Privacy Policy

Last updated: May 29, 2026

1. Data Controller

PaymentLeaks is a service operated by Chispa Dev. Contact: ignacio@paymentleaks.com.

2. Data We Collect

PaymentLeaks is free and requires no signup. We do not ask for an email, we do not create accounts, and we do not process payments. The data we handle is limited to:
- Aggregate analytics: we use Vercel Analytics to understand usage patterns (no third-party cookies, no personally identifiable data).
- Push notifications (optional): if you enable them, we store a browser subscription identifier to send you alerts. You can disable them anytime.

We do not collect payment, health, or biometric data, or any special category of personal data.

3. Purpose of Processing

We use aggregate analytics solely to understand site usage and improve the service. If you enable push notifications, we use the subscription identifier only to send the alerts you requested.

4. Legal Basis

Processing of aggregate analytics is based on our legitimate interest in improving the service. Push notifications are based on your explicit consent when you enable them.

5. Data Sharing

We share data only with:
- Vercel: for hosting and aggregate analytics (see their privacy policy).

We do not sell or share your data with third parties for commercial purposes.

6. Data Retention

We do not retain personally identifiable data. The push subscription identifier is kept while you keep notifications enabled and is deleted when you disable them.

7. Your Rights (GDPR)

You have the right to:
- Access: request a copy of your data.
- Rectification: correct inaccurate data.
- Erasure: request deletion of your data.
- Portability: receive your data in a structured format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: at any time.

To exercise these rights, contact: ignacio@paymentleaks.com. We will respond within 30 days.

8. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS) and restricted access to systems.

9. Cookies

We only use functional cookies necessary for the operation of the service (session, language preference). We do not use tracking or advertising cookies.

10. Contact

For any privacy inquiries: ignacio@paymentleaks.com