STANCEL · PRIVACY
Privacy
This is the English version of the Spanish «Privacidad». Both describe the same processing under the same law. If the two ever disagree, the Spanish one governs — the controller is established in Spain and that is the text a Spanish authority would read.
GDPR (EU 2016/679) and LOPDGDD (3/2018). Required from the first email address collected.
1. Controller
Eduardo Rodríguez · hola@stancel.net
2. What is collected, what for, and on what basis
| Data | What for | Legal basis | How long |
|---|---|---|---|
| Email address (waiting list) | To tell you when the product launches and send product news | Consent (Art. 6(1)(a)) | Until you unsubscribe |
| Email and name (support) | To reply to you | Consent / performance of a contract | For as long as the query lasts, plus statutory periods |
| Purchase data | Invoicing and tax obligations | Legal obligation (Art. 6(1)(c)) | The applicable tax retention periods |
| Site technical logs | Security and operation | Legitimate interest (Art. 6(1)(f)) | The minimum necessary |
3. Site measurement — no cookies, no third parties
To know which pages are read and where people arrive from, visits are counted with an in-house counter hosted on this same site. Google Analytics is not involved, and neither is any other external service.
| Cookies | None. This site does not set a single cookie, its own or anyone else's. That is why there is no cookie banner: there is nothing to consent to |
| What is stored | The page visited, the domain you came from (not the full address), the campaign parameters in the link, whether you are on mobile or desktop, and your browser language |
| Your IP address | Not stored. It is used for an instant to compute a code that expires on its own at midnight and cannot be reversed. It exists so you are not counted six times for looking at six pages, and for nothing else |
| Who sees it | Only the controller. This data does not leave this server and is not shared with anyone |
| Legal basis | Legitimate interest (Art. 6(1)(f)): measuring one's own site with data that does not identify you |
Because the code that would identify you expires every day and no IP is stored, this measurement cannot recognise you or follow you between sessions — neither here nor on any other site.
4. What is NOT collected, and this is the part that matters
The program runs entirely on your own computer. The controller does not receive your trades, your positions, your balance, your account credentials, or any data about your broker or your funding firm. There is no server for that to reach.
If any data transmission were ever added to the program, it would be optional, announced beforehand and switchable off — and this policy would be updated before, not after.
5. Processors and disclosures
Third-party services are used, each under its own data processing agreement:
- Email provider — to send the waiting-list messages.
- Site hosting.
- Payment gateway (merchant of record) — it is the seller of record to you and processes your payment data under its own policy. The controller neither sees nor stores your card.
No data is sold or disclosed to anyone else, except where the law requires it.
They are: Brevo · Hostinger. When sales begin, Paddle will be added, and it will appear here before anything is charged.
6. Your rights
Access, rectification, erasure, objection, restriction and portability. Exercise them by writing to hola@stancel.net — and unsubscribing from the list is one click in any email, with no reason given.
You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es), which is the supervisory authority for this controller.
If you are outside the EU: the controller is established in Spain, so your data is processed there and this policy applies to you in the same terms. That is a statement of where the data lives — not a way of giving you less.
7. Minors
Neither the site nor the program is directed at minors, and their data is not knowingly collected.
8. Changes
If this policy changes in any material way, you will be told through the same email address you signed up with, before the change takes effect.
⚠️ Notes for whoever reviews this — not for publication
These are for the professional review, and they are written down so nobody has to rediscover them.
1. This is a translation, and that is correct here. A privacy notice describes processing that is the same regardless of the reader's language: the controller is in Spain, so the GDPR applies whoever is reading. The same is true of the legal notice, which identifies the provider.
It is not true of the sales documents — terms, refunds and jurisdiction do change with the buyer. Those two are published in English as informative translations, each saying on its own first line that the Spanish version governs. Never as parallel texts with standing of their own: with a merchant of record the contract of sale is with the gateway, and two operative texts that can disagree create the question of which one wins. 2. The Spanish version governs, and it says so at the top. Two legal texts that can disagree with nobody deciding which wins is the classic way a translated notice becomes worse than none. 3. The supervisory authority named is the Spanish one, deliberately. Naming a reader's local authority would be a promise the controller cannot keep.