Privacy policy

Note: This English text is a translation of our terms provided for convenience. The service originates in Spain; jurisdiction-specific terms (data protection, responsible gaming) should be reviewed by qualified counsel for other markets.

Data controller

• Controller: Sergio Ehlis
• Tax ID (NIF): 48098468V
• Contact (GDPR rights): ehliscastells@gmail.com

1. What data we process

• Account: email and password (encrypted), managed by Supabase (our authentication and database provider, with data hosted in the EU according to the project's configuration).
• Payment: if you purchase Premium, Stripe processes your card. Baseline never sees or stores your card number; we only keep the customer identifier and the subscription status.
• Usage: anonymous, cookie-free visit metrics (Vercel Web Analytics, aggregated data: page views, country, device type). No advertising pixels or user identifiers.

2. What we use it for

• Providing the service: signing in, remembering your plan, showing your subscription content.
• Managing the billing of the Premium subscription (Stripe).
• Operational service communications (e.g. account or payment confirmations).

We do not sell your data or share it with third parties for advertising purposes.

3. Data processors

• Supabase — authentication and database.
• Stripe — payment processing.
• Vercel — web hosting.

4. Retention

We keep your account while it is active. If you delete it, we erase your personal data; Stripe retains the billing records required by tax regulations.

5. Your rights (GDPR)

You can exercise access, rectification, erasure, objection, restriction and portability by writing to the controller's contact email. You may also lodge a complaint with the AEPD (aepd.es).