Privacy policy
We collect as little as possible. We use no cookies for analytics or advertising, and we never store your IP address. The only cookie we set remembers the language you chose.
Last updated
Who is responsible (data controller)
kit72hours.com is operated by David Sousa Orta, Calle de Coslada, 28028 Madrid, Spain. Contact for privacy questions and requests: [email protected].
Our own analytics (no cookies)
To see which pages are useful, our site sends a small, anonymous signal to our own server when a page is viewed and when you leave it. We record only: the page address (without any query string), the website you came from (its domain name only, for example google.com), your country (worked out by our host from the connection, not your exact location), the device type (mobile, tablet or desktop), how many seconds the page was visible and how far down you scrolled (in %). Each page view gets a random number, created in the page’s memory and never stored on your device, so that the time and scroll figures can be attached to that one view; it cannot link two visits or identify you.
We do not use cookies, local storage or fingerprinting for this, we do not store IP addresses or browser identifiers, and we do not combine this data with anything else. Obvious automated traffic (bots) is ignored. The data is stored in a Cloudflare D1 database and kept for up to 24 months, then deleted. Our legal basis is our legitimate interest in understanding and improving the site (Art. 6(1)(f) GDPR).
Hosting and security
The site is hosted by Cloudflare, Inc., which acts as our processor. To deliver pages and protect the site from attacks, Cloudflare processes technical connection data such as IP addresses, under its own security retention rules and the EU Standard Contractual Clauses / EU-US Data Privacy Framework for transfers outside the EU (legitimate interest, Art. 6(1)(f) GDPR).
Affiliate links (Amazon)
Links through kit72hours.com/go/ are affiliate links. When you click one, we send you to the Amazon store for your country (for example amazon.es, amazon.de, amazon.co.uk or amazon.com) with our Associates tag, and we log the click with the same anonymous details as above: which link, the page it was on, your country, the Amazon store and the device type. No IP address or identifier is stored. Once you are on Amazon, Amazon may set cookies and process your data under its own privacy notice, for example to attribute a purchase to us. As an Amazon Associate we earn from qualifying purchases; Amazon reports sales to us only in aggregate and never tells us who bought what.
Your checklist
Ticks and household size on our checklists are saved only in your browser’s local storage, on your device. They never reach our servers. You can clear them with “Start again” or by clearing your browser data.
The only cookie: your language
The site exists in English and Spanish. If you pick a language with the EN | ES switcher, we save that choice in one first-party cookie, lang, with the value en or es. It lasts one year (SameSite=Lax), holds nothing else and is never used for analytics, advertising or tracking. Because it only remembers a setting you asked for, it is a functional cookie that does not need consent (Art. 5(3) ePrivacy Directive; Art. 22.2 of Spain’s LSSI). You can delete it in your browser settings at any time.
Without that cookie, if you open an English page from a Spanish-speaking country and your browser’s first language is Spanish, we send you to the same page in Spanish. We work this out from the country our host derives from the connection and the language your browser announces; nothing is stored. Choose EN in the switcher and you will not be redirected again. Search engines and other bots are never redirected.
Fonts
Fonts are hosted on our own domain. No requests go to Google or other font providers.
If you email us, we use your address and message only to reply, and delete them when they are no longer needed.
Your rights
You can ask for access, correction, deletion or restriction of your personal data, object to processing based on legitimate interest, and complain to a data-protection authority (in Spain, the Agencia Española de Protección de Datos, aepd.es, or the authority where you live). Because our analytics hold no data that identifies you, we usually cannot link any record to a person.