Privacy and cookies
Last revised: 11 November 2026
1. Data controller
- Owner: Rafael Guzmán López, trading as Daykyri.
- Email: mira@daykyri.com
- Website: daykyri.com
Hereinafter, "the Controller".
2. Applicable law
Data processing is governed by Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR); Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD); and Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).
3. Data processed, purposes and legal bases
3.1. Email communications
Data: email address and message content. Purpose: to answer the enquiry. Legal basis: the data subject's consent by writing (Art. 6(1)(a) GDPR). Retention: for the duration of the conversation and one year afterwards.
3.2. Purchases
Data: name, email address, country and order details. Purpose: to deliver the product, provide support and meet legal obligations. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR). Retention: for the periods required by tax and commercial law. Payment data is collected and processed solely by Paddle; the Controller has no access to it.
3.3. Browsing
Data: IP address, browser and pages requested, logged by the hosting provider. Purpose: to serve the Website and protect it from attacks. Legal basis: legitimate interest in the security of the service (Art. 6(1)(f) GDPR). Retention: the provider's minimum technical period.
The Controller does not use analytics tools that track users and does not build profiles for commercial purposes.
4. Recipients
- Paddle.com Market Limited (United Kingdom), which acts as Merchant of Record and processes purchase data as an independent controller under its privacy policy.
- Cloudflare, Inc., processor for hosting the Website.
- Zoho Corporation, processor for the email service, with data hosted in the European Union.
Data will not be disclosed to other third parties unless required by law.
5. International transfers
Transfers to the United Kingdom are covered by the European Commission's adequacy decision. Transfers to the United States arising from Cloudflare's service are covered by the EU-U.S. Data Privacy Framework and the standard contractual clauses approved by the European Commission.
6. Data subject rights
Data subjects may exercise their rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given at any time, by writing to mira@daykyri.com. The Controller may request the information needed to verify identity and will respond within one month.
Data subjects also have the right to lodge a complaint with the competent data protection supervisory authority.
7. Minors
The Website's products are intended for adults. The Controller does not knowingly collect data from children under 14. If it detects data from a minor collected without the authorisation of their parents or guardians, it will delete it.
8. Security
The Controller applies appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of data, including encryption of communications via HTTPS.
9. Cookie policy
9.1. What cookies are
Cookies and similar technologies are files or data stored on the User's device when visiting a website, which allow information about the visit to be remembered.
9.2. Cookies used
- Theme preference (local storage, first-party, persistent): remembers whether the User chose light or dark mode. It is strictly necessary and exempt from consent under Article 22(2) of the LSSI-CE.
- Paddle (third-party), on purchase pages only: technical cookies needed to process payment and prevent fraud. Exempt from consent.
- YouTube (third-party): videos load in privacy-enhanced mode and only when the User clicks "play". From that moment, YouTube may store information under its own policy.
The Website does not use analytics or advertising cookies. Affiliate links lead to third-party sites, such as Amazon, which apply their own cookies once the User visits them.
9.3. How to disable them
Users can block or delete cookies in their browser settings. Disabling technical cookies may prevent the purchase process from working properly.
10. Changes
The Controller may update this policy to reflect changes in the law or the service. The version in force is the one published on the Website.