Privacy policy
Last updated: July 27, 2026
Umbrabyte Apps is the public studio identity of Cristian Donet Segura (NIF: 20468489F, D-U-N-S® 374071851), a self-employed mobile software developer operating from Calle Pintor Camarón, nº 24, 12560 Benicasim, Castellón, Spain. This policy explains how we handle personal data on this website and, at a general level, in our mobile applications.
Before a specific app launches, its store listing and in-app policy will be updated to describe the exact data practices, legal bases, retention periods, and third-party services it uses.
Data controller
The data controller for all personal data processed through this website is:
- Name: Cristian Donet Segura
- Trade name: Umbrabyte Apps
- Address: Calle Pintor Camarón, nº 24, 12560 Benicasim, Castellón, Spain
- Tax ID (NIF): 20468489F
- D-U-N-S®: 374071851
- Contact: support@umbrabyte.app
Information we collect
Website
This website does not require an account and does not intentionally collect personal data through forms. The only personal data we receive is what you choose to include when you contact us by email (for example, your name and email address), which we use solely to respond to your inquiry.
Mobile applications
An application may process technical, purchase, diagnostic, or usage data to provide its features. The exact categories, purposes, retention periods, and legal bases will be specified in that application’s dedicated privacy policy before its public release.
Legal basis for processing (GDPR art. 6)
| Processing activity | Legal basis |
|---|---|
| Responding to email inquiries | Art. 6(1)(b) — performance of a pre-contractual or contractual relationship; or Art. 6(1)(f) — legitimate interest in communicating with our users |
| Language preference stored locally | Art. 6(1)(f) — strictly necessary for site functionality; no personal data transmitted to us |
| Optional analytics (Google Analytics) — only when you opt in | Art. 6(1)(a) — consent |
| Optional advertising measurement (Google Ads) — only when you opt in | Art. 6(1)(a) — consent |
Where we rely on legitimate interests (art. 6(1)(f)), you may object at any time; see the “Your rights” section below.
Retention periods
| Data | Retention period |
|---|---|
| Email correspondence | Up to 3 years from the last exchange, or as required by applicable law |
| Language preference (local storage) | Until you clear your browser data; never transmitted to us |
| Analytics data (if opted in) | As defined by Google Analytics’ standard retention settings (up to 26 months by default); deletable at any time by withdrawing consent |
How we use information
Any personal data we receive is used only to:
- Respond to your inquiries or support requests.
- Operate the feature you explicitly requested.
- Maintain the security and reliability of our services.
We do not sell personal data, we do not rent it, and we do not use it to build advertising profiles for our own purposes.
Third-party services and international transfers
This website is hosted on infrastructure that may be located outside the European Economic Area (EEA). Where personal data is transferred to a third country, we rely on the European Commission’s Standard Contractual Clauses (SCCs) or other appropriate safeguards as required by GDPR Chapter V.
An app may use platform services or providers for distribution, payments, crash reporting, analytics, or advertising. No provider is listed as active until confirmed for the relevant app. Where a provider is used, the app-specific policy identifies it, states the transfer safeguard, and links to its privacy documentation.
Google services (Google Analytics, Google Ads, Google Play): when configured, these services may transfer data to the United States under Google’s Standard Contractual Clauses with the EU. See Google’s Privacy Policy for details.
Cookies and similar technologies
This website stores your language preference in localStorage on your device. This storage is strictly necessary for the site to work correctly and does not transmit any data to us.
The default website build does not activate any optional tracking or advertising technology. A deployment may optionally configure:
- Analytics — Google Analytics, to understand aggregate site usage.
- Advertising measurement — Google Ads, to evaluate campaign performance.
If either category is configured, the website shows a consent banner and keeps the corresponding tags and storage denied until you explicitly opt in. No optional technology activates merely because the website supports it. You may withdraw or change your choices at any time via Cookie preferences in the footer. We use Google Consent Mode v2 to enforce your denied state until a choice is made.
Data security
We apply reasonable technical and organizational safeguards to protect the personal data we process, including encryption of data in transit (TLS) and, where applicable, at rest. No method of internet transmission or storage is completely secure, and we cannot guarantee absolute security.
Your rights
Depending on where you live, you have the following rights regarding personal data we hold about you. To exercise any right, contact us at the address in the “Contact” section; we will respond within the timeframe required by applicable law (generally 30 days under GDPR).
Rights under GDPR / LOPDGDD (EU/Spain)
- Access (art. 15): obtain a copy of your personal data.
- Rectification (art. 16): correct inaccurate or incomplete data.
- Erasure (“right to be forgotten”) (art. 17): request deletion of your data.
- Restriction of processing (art. 18): limit how we use your data.
- Data portability (art. 20): receive your data in a structured, machine-readable format.
- Objection (art. 21): object to processing based on legitimate interests.
- Withdrawal of consent (art. 7(3)): withdraw consent at any time without affecting prior processing.
- Lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es — or with the supervisory authority of your country of residence within the EEA.
Additional rights — California residents (CCPA / CPRA)
California residents may also request disclosure of the categories and specific pieces of personal information collected, request deletion, and opt out of the “sale or sharing” of personal information. We do not sell personal information.
Additional rights — Brazilian residents (LGPD)
Brazilian residents have rights equivalent to those listed under GDPR, enforceable under Lei Geral de Proteção de Dados (Lei 13.709/2018). Complaints may be filed with the Autoridade Nacional de Proteção de Dados (ANPD).
Additional rights — UK residents (UK GDPR / DPA 2018)
UK residents may lodge complaints with the Information Commissioner’s Office (ICO) at ico.org.uk.
Children’s privacy
Our services are not directed to children. We do not knowingly collect personal data from children under 13 years of age (as defined by COPPA in the United States) or under 16 years of age (as defined by Article 8 of the GDPR and Article 7 of the Spanish LOPDGDD). If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
Changes to this policy
We may update this policy as our website and applications evolve. Material changes will be reflected by updating the “Last updated” date at the top of this page. We encourage you to review this page periodically.
Contact
For privacy questions or to exercise your rights, contact support@umbrabyte.app.
Cristian Donet Segura — Umbrabyte Apps
Calle Pintor Camarón, nº 24, 12560 Benicasim, Castellón, Spain
Questions about your privacy?
If you have questions about data processing or wish to exercise your rights, contact us directly.