Privacy policy
Last updated: 8/10/2026
1. Data controller
The data controller is the owner of hotend. See Legal notice for full details. Contact: [email protected].
2. Data we process
2.1 General browsing
We do NOT collect personally identifiable data during general browsing. Our analytics is a first-party counter with no cookies or identifiers that neither stores nor reads anything on your device: it only keeps aggregated daily totals per page (views, reading time, scroll depth, landing page and referring site, internal page-to-page navigation, device class, browser language, hour of day, clicks on external links, and loading speed). We store no IP addresses and no individual records: nobody can tell who visited what or reconstruct anyone's browsing — not even us. (Google advertising is separate and governed by your consent: see §3 and §6.)
2.2 Language preference
We store your language choice (ES/EN) in browser localStorage. This is NOT a cookie, never transmitted to our servers, and can be cleared from your browser settings.
2.3 Email contact
If you write to [email protected], we keep your email and message up to 12 months. Legal basis: consent (GDPR Art. 6.1.a).
2.4 Printer reviews
If you post a review on a printer page we process: your name (or alias, published with the review), your email (NEVER published) and the review text. Purposes: (a) moderating and publishing the review, and (b) only if you also tick the optional updates checkbox, sending you hotend updates. Legal basis: explicit consent (GDPR Art. 6.1.a), collected separately for each purpose and timestamped; you can withdraw it at any time by writing to [email protected] or via the opt-out link in every email; on withdrawal we remove your email from the list. Retention: published reviews, for as long as they stay on the site (you can request removal at any time); rejected reviews and their data are deleted within 12 months; the updates-list email, until you unsubscribe. Data is stored in Supabase (see §3).
3. Recipients and processors
Your data is NOT sold or shared commercially. Processors acting on owner's behalf under GDPR-compliant DPAs:
- Supabase Inc. (database + auth)
- Cloudflare Inc. (CDN + hosting + analytics)
- Google Ireland Ltd. (Google AdSense) — advertising. Google acts as an independent controller for ad personalisation, only with your prior consent given through the consent banner (certified CMP, IAB TCF framework). Legal basis: consent (GDPR Art. 6.1.a), revocable any time via “Ad preferences” in the footer. See Google's policies.
4. International transfers
Some processors (Cloudflare, Resend) process data outside the EU under EU Standard Contractual Clauses or adherence to the EU-US Data Privacy Framework.
5. Your rights
Under GDPR you have rights to: access, rectification, erasure ("right to be forgotten"), restriction, portability, objection, withdrawal of consent.
To exercise, email [email protected]. Response within 30 days max. You may also complain to the Spanish Data Protection Agency (www.aepd.es).
6. Cookies and advertising
The Site sets no first-party cookies. Google AdSense advertising may use third-party cookies only with your consent; change it any time via “Ad preferences” in the footer. See the Cookie policy for details.
7. Changes
This policy may be updated. Material changes will be notified via prominent notice on the Site.