Privacy Policy

1. What Data We Process

No sign-up and no names. We only process this:

• Site visits: Cloudflare Web Analytics counts page views without cookies and without identifying you.
• Taps on the site: which button, link or control you tap (for example "Telegram", "Map", a filter or the heart; each has a fixed name, never what you type), the page, the city and the type of device (phone, tablet or computer), to learn what is useful. If you tap on a plan, also which plan and which venue, and if you open a plan from a list, which list and its place in it, and which plan cards appear on your screen. And how far down the page you scroll: a quarter, half, three quarters or the end. And how many seconds the page is open and in use (it stops counting after a minute untouched). To count people, not taps, your browser remembers for one day which plans you already opened or tapped (on your device, tardeo-tapped) and each tap says whether it is the first of the day; it is cleared the next day and when you turn measurement off. These records carry no cookie and no code of your device or your network. They are kept about 90 days; after that only each day's totals per plan, per venue and per control remain, for at most 25 months. To stop abuse your IP address is only used as a code (hash) that changes every day and is deleted after two days.
• Which area you visit from: once a day, the country and region (for example "Spain, Madrid") that Cloudflare infers from the connection, to learn where there is interest. Only totals are added up; never the exact town or the IP, and it is not joined to your taps or votes. We also note the company that provides your connection, like Movistar or a cloud provider, never your home or your line. Visits from cloud providers and data centers are not counted as visitors.
• Where you came from: only the name of the site that sent you (for example "instagram.com"), never the exact page or what you searched.
• Your device type: only phone, tablet or computer, from the screen size and whether it is a touchscreen, never the model. Of the browser we note only its family (Safari-like, Chrome-like, Firefox or other), and only when counting return visits.
• Pages not found: the address that doesn't exist, to fix broken links.
• How many networks did something useful each day (opening the map, getting tickets, adding to the calendar or sending a plan): only the day's total. So the same network isn't counted twice, we keep a code of the day for this alone, deleted after two days.
• "Me interesa", city votes and Instagram messages: see sections 4 and 5.

Page views: we count each page you open on our own server, to know how many people use Tardeo. For this we use no cookies and store nothing on your device. We record the page, the city of the agenda, the site that sent you and the device type. To count people and not just pages, the server checks whether your network (your IP, turned into a code that changes every day) already opened any Tardeo page today, any page of that city, or that same page, and the record notes only yes or no. Those codes are kept separately, a different one for each page, so they can't be joined to each other, and they are deleted after two days; the page's record carries no code. If you come from another page of Tardeo, we also record which one (only its address, what your browser already tells us), and if you came in through one of our tagged links (for example "?s=wa"), that tag on what you do on that same page. We only add these up per page and per day, to see which pages lead to which: we never join your pages together or follow your path. Cloudflare Analytics Engine keeps these records about 90 days; after that we only keep each day's totals. We do it on our legitimate interest in measuring our own site (art. 6.1.f GDPR). You can object by writing to hola@tardeo.ai or with the "Turn off measurement" button in section 4.

The agenda's "Near me" button uses your location only in your browser, to sort the plans by distance. It is saved only in this tab for a few minutes, rounded to about a hundred metres, and never sent to us. Turning it off deletes it.

2. Purposes and Legal Basis

• Making the features you use work ("Me interesa", "Mis planes", replying on Instagram): because you ask for it (art. 6.1.b GDPR).
• Measuring how many people use the site, which parts help and preventing abuse (page views, taps, votes, IP hash): legitimate interest in improving and protecting the service (art. 6.1.f GDPR). You can object by writing to us.

We don't sell data, don't build profiles and don't use third-party advertising.

3. Who Else Is Involved

We use providers that process data on our behalf: Cloudflare (hosting, statistics and database; transfers to the US may happen under the EU-US Data Privacy Framework) and Meta (the Instagram API, when you write to us on Instagram). Our Telegram channels are public: if you join, Telegram processes your data under its own policy. If you sign up for the newsletter, Resend sends the emails and keeps the list (section 9). We don't share your data with anyone else.

4. Cookies and Similar Technologies

We use no advertising cookies and no cookies from other companies. All our cookies are set by our own server, only work on tardeo.ai and the site's code can't read them. There are three: td_ret (to count return visits, 13 months, below), td_nomeasure (only if you turn measurement off, to remember that, 13 months) and td_dev (only if you tap "Me interesa", one year). If your browser blocks cookies, "Me interesa" may not work.

When you tap "Me interesa" on a plan, we set a technical cookie (td_dev, a random id, without your name or account) to count one vote per device and remember the plans you marked. It is only created when you tap the heart. We keep that id with the plans you marked for one year at most. To stop repeat votes, your IP address is kept only as a code (hash) that changes every day, and it is deleted after two days. We use this data only to count votes; you can ask us to delete it. When someone on our team opens the site with their internal link, we keep only that id in a separate list so their own taps are left out of our numbers. The "Which city would you like" votes work the same way: a counter per city and the same daily IP code, to count one vote per city and network a day: for each vote we keep the city and that network code, which is deleted after two days. A place picked under "Another city" counts as one more vote, like the cities on the list; we keep only its official code. What you type to find it never leaves your browser.

Your browser also keeps these notes on your own device (local storage, not cookies), and doesn't send them to us:

• td_hearts: the plans you marked "Me interesa". td_mine_picked: the ones you pick in "Mis planes" to send to the group.
• tardeo-city-vote: the cities you voted for. tardeo-city-vote-closed: when you closed that question, so it stays away for 30 days.
• tardeo-lang: the language you chose. td_theme: the light or dark mode you chose. td_first_save: that you already saw the note after your first "Me interesa", so it isn't repeated.
• tardeo-visit: plus the city's name: when you last visited that city's agenda and which plans it had, to mark the ones added since as "Nuevo". All we get is that "Nuevo" plans showed on that page, never which.
• For measurement: tardeo-tapped (the plans you already opened or tapped today, section 1) and tardeo-nomeasure (that you turned measurement off).
• Only while the tab is open (session storage): tardeo-ret-session, tardeo-locale, tardeo-src: plus the link's tag, and tardeo-lang-auto, to count each of these only once per visit (that you came back, the browser's language, the tagged link you came through, the automatic switch to English); tardeo-near, your rounded "Near me" location for 10 minutes; and tardeo-visit-prev: plus the city, so the "Nuevo" labels don't change during the visit.

Each is used only for what it says, and you can delete them by clearing this site's data in your browser.

To learn how many people come back, our own server keeps a cookie in your browser (td_ret) with the day of your first visit, the day of your last one and how many visits you've made (up to 4). It is not a number unique to you: anyone who first and last came on the same days, the same number of times, has the same one. It expires 13 months after your first visit and is never extended, and the site's code cannot read it. Once per visit we note only whether you are new or how long since your last visit, how many visits you've made (1, 2–3 or 4 or more), the page, the agenda's city and the browser family; the cookie's content is not stored anywhere. Those records are kept about 90 days, and the daily totals for at most 25 months. If your browser held the marker we used to keep in it, it is used once to create the cookie and then deleted. If you turn measurement off with this button, we delete td_ret, keep another cookie (td_nomeasure, 13 months) and a note in your browser only to remember that, and we stop measuring, except your next-city votes, so they still count. After those 13 months we measure again, unless you turn it off again. You can turn it back on with the same button: Turn off measurement

7. Your Rights

You have the right to:

• Access your personal information
• Request rectification or deletion of your data
• Object to the processing of your information
• Request data portability
• Ask us to restrict processing

If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).

8. Contact

For any privacy-related inquiries, you can contact us through our Instagram, @tardeo.ai (ig.me/m/tardeo.ai), or by email at hola@tardeo.ai.

9. Email: Plan Updates

If you sign up for the newsletter "Weekend plans, in your inbox" (on each plan's page):

• Data controller: José Ignacio González-Garilleti Ruiz. Contact: hola@tardeo.ai.
• What we keep: your email, the cities you pick, the language, the page you signed up from and when you confirmed. Until you confirm with the link in the email we send you, we don't add you to the list. That confirmation email is sent through Resend, which keeps its sending record (your address included) for up to 30 days. If you don't confirm, the link expires after 7 days.
• Why: to let you know when we start sending the weekend plans and, from then on, to send them. Only plans in the cities you pick.
• Legal basis for the list: your consent (art. 6.1.a GDPR), given when you confirm. You can withdraw it at any time.
• Who processes it for us: Resend, Inc. (USA), the service that sends the emails and keeps the list. According to Resend, account data is stored in the US and emails are sent from its EU region (Ireland). The international transfer to the US is covered by the EU–US Data Privacy Framework, according to Resend.
• To stop abuse (mass sends to other people's addresses) we limit how many confirmation emails go out a day per connection and per address, with encrypted counters to limit abuse, deleted within a few days: we keep only a keyed code (hash) of your IP, its network and your email, never the IP or the email itself. The legal basis for these counters is our legitimate interest in preventing abuse (art. 6.1.f GDPR), separate from the consent the list relies on.
• To tell people from bots the form uses Cloudflare Turnstile (Cloudflare, Inc., USA), which checks your browser without tracking cookies; the data it processes is described in its privacy policy.
• On your device: your browser keeps tardeo-email so the email bar is not shown again if you signed up from this device or closed it (only when, for 30 days). It is never sent to us, and clearing the site's data removes it.
• How long: until you unsubscribe; after that we delete it within 30 days at most.
• To unsubscribe or have your data deleted: ask for a link on Manage my subscription (it reaches your inbox, and unsubscribing or removal from the list takes effect at once), or write to hola@tardeo.ai (we do it within 7 days). Once the weekly emails start, each one will also carry its unsubscribe link.