Privacy policy
1. Data controller
Iker Fortes Reinaga · hola@kiacos.com. This policy covers this website, kiacos.com, and nothing else:
- Kiacos.fotos (fotos.kiacos.com) processes no personal data: it works with no account and images never leave your browser.
- Kiacos.nexo works with no account and ships with its own privacy policy, published where the app stores require it.
- Vendomiel (vendomiel.com) is a shop with its own controller and its own privacy policy, published on its site.
2. Data we process
This site has no user accounts and no forms: reading it asks you for nothing. There are only two processing activities:
- If you write to the contact address: your address and whatever you say in the message, so we can reply.
- Technical data: the server logs any visit generates (IP address, date, requested path and browser), needed to serve the pages and to spot abuse.
The /admin panel is used by a single account, the owner's, and its session is kept in their own browser.
3. The waitlist was deleted
Until September 2026 this site had a waitlist form for Kiacos.central. It collected the email address, the queue position, the referral code, the language and an irreversible hash of the IP address, used only to limit automated signups; the plain IP and the user agent were never stored.
When the product was withdrawn, that data was deleted, counter and hashes included, and both the form and the endpoint that received it were removed. No copy is kept, none of it was shared with anyone and none of it was used for anything else.
4. Purposes and legal basis
- Replying to people who write: legitimate interest in handling a message the person started.
- Serving the site and protecting it from abuse: legitimate interest.
No data is sold, there is no advertising, no profiling and no automated decision-making.
5. Processors
- Google LLC · Firebase Hosting, Cloud Functions, Firestore and Firebase Authentication, with data hosted in the europe-west1 region (European Union).
- The owner's email provider, which delivers and stores the messages sent to the contact address.
6. Retention
Email messages are kept as long as they are useful to handle the matter they are about and to evidence what was answered. Server logs, for the provider's retention period, which is short and meant for operations and security, not analysis.
7. Your rights (GDPR)
Access, rectification, erasure, objection, portability and restriction of processing by writing to hola@kiacos.com. You may also complain to the Spanish Data Protection Agency (aepd.es).
8. International transfers
Data is hosted in the European Union. If a processor transfers data outside the EU, a valid transfer basis applies (standard contractual clauses or a current adequacy framework).
9. Cookies and browser storage
This site uses no cookies, has no analytics and stores nothing in your browser. The only exception is the /admin panel, which keeps the administration account's session in the browser of whoever signs in, which is the owner. No third-party tracking.
10. Changes
Changes to this policy are published here, with the update date at the top.