Privacy Policy
Last updated: May 29, 2026
1. Data Controller
PaymentLeaks is a service operated by Chispa Dev. Contact: ignacio@paymentleaks.com.
2. Data We Collect
PaymentLeaks is free and requires no signup. We do not ask for an email, we do not create accounts, and we do not process payments. The data we handle is limited to:
- Aggregate analytics: we use Vercel Analytics to understand usage patterns (no third-party cookies, no personally identifiable data).
- Push notifications (optional): if you enable them, we store a browser subscription identifier to send you alerts. You can disable them anytime.
We do not collect payment, health, or biometric data, or any special category of personal data.
- Aggregate analytics: we use Vercel Analytics to understand usage patterns (no third-party cookies, no personally identifiable data).
- Push notifications (optional): if you enable them, we store a browser subscription identifier to send you alerts. You can disable them anytime.
We do not collect payment, health, or biometric data, or any special category of personal data.
3. Purpose of Processing
We use aggregate analytics solely to understand site usage and improve the service. If you enable push notifications, we use the subscription identifier only to send the alerts you requested.
4. Legal Basis
Processing of aggregate analytics is based on our legitimate interest in improving the service. Push notifications are based on your explicit consent when you enable them.
5. Data Sharing
We share data only with:
- Vercel: for hosting and aggregate analytics (see their privacy policy).
We do not sell or share your data with third parties for commercial purposes.
- Vercel: for hosting and aggregate analytics (see their privacy policy).
We do not sell or share your data with third parties for commercial purposes.
6. Data Retention
We do not retain personally identifiable data. The push subscription identifier is kept while you keep notifications enabled and is deleted when you disable them.
7. Your Rights (GDPR)
You have the right to:
- Access: request a copy of your data.
- Rectification: correct inaccurate data.
- Erasure: request deletion of your data.
- Portability: receive your data in a structured format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: at any time.
To exercise these rights, contact: ignacio@paymentleaks.com. We will respond within 30 days.
- Access: request a copy of your data.
- Rectification: correct inaccurate data.
- Erasure: request deletion of your data.
- Portability: receive your data in a structured format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: at any time.
To exercise these rights, contact: ignacio@paymentleaks.com. We will respond within 30 days.
8. Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS) and restricted access to systems.
9. Cookies
We only use functional cookies necessary for the operation of the service (session, language preference). We do not use tracking or advertising cookies.
10. Contact
For any privacy inquiries: ignacio@paymentleaks.com