Privacy policy

1Who handles your data

The controller is devlisca, which runs mostraa.me. For anything to do with this, including your rights, write to [email protected].

2If you only visited someone’s page

We collect nothing. Pages published on mostraa.me have no cookies and no analytics, and load nothing from any other company, with one exception: video, explained just below. Even the typefaces are served by us, so that your IP address does not end up with anyone else just because you opened a page. The maps too: the images are OpenStreetMap’s, but we are the ones who ask for them, and your browser only talks to us. If you tap “Directions”, then you do leave for Google Maps, because you chose to go.

If the page has a YouTube video, the video player is loaded from YouTube, which belongs to Google, when you reach that part of the page. At that point YouTube receives your IP address. We use YouTube’s privacy-enhanced mode (youtube-nocookie.com), which, according to YouTube, stores no information about you until you press play. On a page with no video, none of this happens.

Our hosting logs the requests it receives, including the IP address, because that is how a server is kept running and attacks are stopped. Those logs are deleted after a few days and are not used to follow you.

3If you wrote to us through the form

We keep what you wrote: your name, email, phone if you left it, and the message. They are used to reply to you and to deal with whatever comes next. The legal basis is your request to be contacted, that is, the steps before a contract.

We keep them for as long as the conversation lasts and up to three years after, in case you come back. If you would rather they were gone sooner, ask and they will be.

4If you have an account

To sign you in we keep your email and your password, the password encrypted and unreadable to us. From your page we keep whatever you put on it: name, text, contacts, address, hours, links and images.

It is the minimum for the service to exist, and the legal basis is the contract between us. Note that the page, once published, is public: what you write on it is meant to be seen by whoever opens the address.

We keep it for as long as the account lasts. When it ends, we delete the page and what it held, and keep only what the law requires us to keep, such as invoices.

When you ask for an email to reset your password or confirm your email, we keep, for one day, a fingerprint of the email address and of the IP address the request came from: a code that cannot be turned back into the email or the IP. It is only there to stop anyone sending many emails to the same person, and it is deleted when that day is over.

5Who else handles it

Nobody buys data from us, because we do not sell it. We do need these organizations for the service to work:

• Cloudflare, which hosts the site, the database and the images.
• Google, through Firebase, which handles sign-ins, and through YouTube, when a page has a video (see clause 2).
• Resend, which delivers our emails: the ones from the contact form and the ones about your account, such as resetting your password or confirming your email. It receives the address each email goes to and what it says.
• Anthropic, which writes your page when you ask the AI in the panel. It receives what you write in the questions, including the extra question when the AI asks one, and a list of which blocks of your page are already filled in, so it knows what is left to suggest at the end. That list says only yes or no. When you ask for the headline or the description to be rewritten, it receives that text, your name and the rest of the description, and nothing else. Your phone, email, address and pictures are never sent to it. We do not keep the answers once the page is written, and they are not used to train models.
• The OpenStreetMap Foundation, which finds your address on the map when you press “Find the address” in the panel. It receives the address you typed and nothing else: the request leaves from our servers, so it does not get your IP address. The coordinates you choose are kept by us.

Cloudflare, Google, Resend and Anthropic are American companies, and some of these operations may take place outside the European Union. In those cases the transfer rests on the standard contractual clauses approved by the European Commission. The OpenStreetMap Foundation is in the United Kingdom, which the Commission recognizes as having data protection equivalent to Europe’s.

We also hand data over to a court or an authority when the law obliges us to. Otherwise, no.

6Cookies

The public pages use none. In the panel, once you sign in, your browser keeps the session so that it does not ask for your password on every screen. It is a technical mechanism the panel cannot work without, and so we do not ask your permission for it.

If you use the button that switches the site between Portuguese and English, we keep that choice in a cookie called lang, for a year, to show you the right language when you come back. It holds only the language, does not identify you, and exists only if you press the button.

7If the page belongs to a team

When a company puts the pages of the people who work there on this service, it is the company that decides what is published about each of them. In that case the company is the controller of the data and we only process it on its behalf, under Article 28 of the GDPR.

In practice: if you appear on the page of the company you work for and want something changed or removed, talk to them first. If you get nowhere, write to us and we will help.

8What you can ask for

You can ask to see what we hold about you, to correct what is wrong, to delete it, to restrict its use, to take it with you in a file, or to object to its processing. Just write to [email protected]. We reply within a month, and we charge nothing for it.

If we think we are right and you think we are not, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados, cnpd.pt.

9Changes

If this changes, it changes here, and the date at the top changes with it. When the change is important, we tell you by email before it takes effect.