IMPORTANT: DRAFT NOTICE. The owner of quillora.net must fill in the bracketed fields, verify actual data processing and review this policy before treating it as final.
1. Data controller
Site operator: [LEGAL ENTITY OR NAME]. Tax/registration number: [NUMBER]. Business address: [ADDRESS]. Privacy contact: [PRIVACY EMAIL]. Data protection officer, if any: [DPO OR NOT APPLICABLE]. Website: quillora.net.
2. Categories of personal data
Account data may include name, email, password hash, account ID and preferences. Security data may include IP addresses, authentication events and technical logs. Community features may process uploaded book metadata, comments, reviews, favorites and support requests. Optional newsletter and analytics or advertising data depend on the features enabled and applicable consent.
3. Purposes and legal grounds
We process essential account, sign-in and library data to provide the service you request, relying on contract or pre-contractual steps. Necessary security processing may rely on legitimate interests after appropriate balancing. Legal obligations may apply. Optional newsletters, analytics and advertising use consent wherever required; this consent can be withdrawn without losing essential functions.
4. Google and Facebook Sign-In
If you choose Google or Facebook login, the provider may share a user ID, display name, email and profile image according to permissions and availability. We use these to authenticate and associate an account. We do not request your Google or Facebook password. Each provider has its own privacy policy governing data it processes directly.
5. Cookies
Essential cookies support sessions, CSRF protection, language and preferences. Optional analytics, advertising or embedded services may use additional technologies, subject to applicable consent rules. See our Cookie Policy.
6. Retention
Account information is kept while the account is active and for additional lawful periods where necessary. Security logs follow [SPECIFY RETENTION SCHEDULE]. Newsletter data is removed upon unsubscribe unless an applicable legal obligation requires otherwise. The controller must specify the actual retention periods or criteria for each activity.
7. Recipients and international transfers
Service providers may include hosting, email, Google, Meta, anti-spam or advertising integrations when enabled. [LIST ACTUAL PROCESSORS, LOCATIONS AND INTERNATIONAL TRANSFER SAFEGUARDS]. Do not assume no transfers occur without checking.
8. Privacy rights
Depending on the law, you may request access, correction, erasure, restriction, objection and portability, and withdraw consent. You can lodge a complaint with Spain's data protection authority (aepd.es). Contact [PRIVACY EMAIL]; reasonable identity verification may be required.
9. Erasure requests
See /page/data-deletion for instructions. Some records may be legally retained. Removing your quillora.net account does not remove information held independently by Google or Facebook.
10. Children
[STATE AGE REQUIREMENTS AND PARENT/GUARDIAN CONTROLS]. If unauthorized processing of children's data is identified, we will assess and address it in accordance with applicable law.
11. California rights, where applicable
The CCPA/CPRA applies only if its statutory conditions are met. Eligible California residents may have rights to know, delete, correct, limit certain sensitive-data uses, and opt out of sale or sharing. [ASSESS COVERAGE, CATEGORY DISCLOSURES, SALE/SHARING, GPC AND OPT-OUT METHODS]. A privacy policy alone does not establish compliance.
12. Changes and contact
Draft last reviewed: October 19, 2026. Material changes will be posted here. Privacy questions: [PRIVACY EMAIL].