GlutenFreeBCN ("we", "us", or "our") operates the website glutenfreebcn.com (the "Site"). This Privacy Policy explains what information we collect when you use the Site, how we use it, and the choices you have. We are committed to handling your data transparently and in compliance with the EU General Data Protection Regulation (GDPR) and Spain's Ley Orgánica de Protección de Datos (LOPDGDD).

1. Information We Collect

1.1 Information you provide directly

When you submit our contact form to request a listing for your establishment, we collect the information you enter — typically your name, email address, the place name, address, type of place, and any message you write. We use this information solely to respond to your request and to evaluate your listing.

1.2 Information stored locally on your device

When you "like" a place in our directory, we store your votes in your browser's localStorage under the keys sg_likes and sg_user_likes. This data never leaves your device — it is not transmitted to our servers and we cannot read it. Clearing your browser data will remove these likes.

1.3 Analytics

We use Vercel Analytics to understand aggregate traffic patterns (page views, referrers, country, device type). Vercel Analytics is a privacy-friendly product that does not use cookies and does not track individual users across sessions. You can read Vercel's privacy statement at vercel.com/legal/privacy-policy.

1.4 Advertising (when enabled)

When advertising is active on the Site, we display ads served by Google AdSense. Google and its partners may set cookies and use device identifiers to serve personalized ads, measure ad performance, and prevent fraud. You can control how Google uses this information through your Google Ad Settings. See our Cookie Policy for details. Advertising may not be active at all times on the Site.

2. How We Use Information

• To respond to listing requests and other contact-form submissions.
• To improve the Site's content, performance, and user experience.
• To detect and prevent abuse, spam, and security incidents.
• To comply with legal obligations.

We do not sell your personal information, and we do not share it with third parties except the processors named in this policy (Vercel for hosting and analytics, Web3Forms for contact-form delivery, and — when advertising is active — Google AdSense).

3. Legal Bases for Processing (GDPR)

• Consent — for advertising cookies (when applicable), which you can accept or reject through the cookie banner.
• Legitimate interests — for aggregate analytics and security monitoring, where we believe our interest in operating a safe, high-quality site does not override your privacy.
• Contract / pre-contract — for processing listing requests and replying to your inquiries.

4. Third-Party Processors

• Vercel Inc. — site hosting and privacy-friendly analytics.
• Web3Forms — contact-form delivery to our email inbox.
• Google LLC (AdSense) — advertising, when active.

5. Data Retention

We retain contact-form submissions for as long as needed to follow up with you about a listing request, after which we delete or anonymize the records. Aggregate analytics data is retained per Vercel's standard retention policy. localStorage data lives on your device until you clear it.

6. Your Rights

Under the GDPR you have the right to access, rectify, erase, restrict processing of, or port your personal data, and to object to its processing. You also have the right to lodge a complaint with a supervisory authority — in Spain, the Agencia Española de Protección de Datos (aepd.es).

To exercise any of these rights, please use the contact form on our Contact page.

7. Children

The Site is intended for a general adult audience and is not directed at children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects the most recent change. Continued use of the Site after an update constitutes acceptance of the revised policy.

9. Contact

Questions about this policy or about how we handle your data? Reach us through the Contact page.