Website Privacy Policy

Contact Channel

For any privacy inquiry, exercise of data rights, or clarification, you can contact us directly via email at support@nictotarus.dev.

Scope of This Policy

This Privacy Policy applies solely to the website interface, static assets, and communication channels accessible at https://nictotarus-web.web.app.

A. No User Account Registration

You do not need to create an account, log in, or provide a username or password to browse our site, inspect application features, or view documentation.

B. Voluntary Direct Communications (Email & Support)

When you choose to contact us by clicking our contact buttons or sending an email to support@nictotarus.dev, we process:

• Sender Details: Your email address and display name as provided by your email service provider.
• Message Content: The text of your query, bug reports, feature requests, or technical diagnostics you voluntarily choose to share.

Lawful Basis: Art. 6(1)(b) GDPR (taking steps at the request of the data subject prior to entering into a contract or resolving support) and Art. 6(1)(f) GDPR (our legitimate interest in responding effectively to user inquiries, ensuring application reliability, and providing technical support).

C. No Monetization or Sale of Personal Data

We never sell, lease, trade, or monetize your personal data or email address to advertisers, data brokers, or third parties under any circumstances.

No Advertising, Tracking, or Third-Party Analytics Cookies

This website does not use advertising cookies, remarketing pixels, Facebook pixels, Google Analytics tracking scripts, or cross-site user profiling technologies.

Strictly Functional Client Storage (HTML5 localStorage)

The only piece of information stored locally in your web browser is your chosen language preference:

• Key: nictotarus_lang (holding ca for Catalan, es for Spanish, or en for English).
• Purpose: Strictly functional — ensuring that when you switch pages or reload, your chosen interface language is preserved without resetting.
• No Transmission to Servers: This value is stored entirely on your device inside your browser's private storage and is never transmitted to any external server.

Technical Server Connection Logs

Whenever you visit any website, your browser establishes a network connection with the hosting server. In accordance with standard internet protocol operation and technical requirements, Google Firebase edge servers temporarily log:

• IP Address: Processed for packet delivery, DDoS mitigation, and edge caching routing.
• Request Details: Date and exact timestamp of access, HTTP protocol version, requested path, and HTTP status code.
• User Agent: Browser brand, browser version, and operating system (used to negotiate proper asset formats).

Purpose & Lawful Basis: These logs are used solely to ensure stable network delivery, prevent malicious cyberattacks, and maintain infrastructure security. Lawful basis: Art. 6(1)(f) GDPR (legitimate interest in providing a safe and functioning web service). Server logs are automatically purged according to Google Cloud standard retention cycles (typically 30 to 90 days).

Encryption in Transit (HTTPS / TLS 1.3)

All communications between your device and our website are encrypted using state-of-the-art TLS 1.3 encryption (HTTPS), protecting your connection from eavesdropping or tampering.

Google Fonts

The website loads web typography (Bricolage Grotesque and DM Sans) from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Google collects minimal technical requests necessary to serve font files, subject to standard caching.

External Links (Google Play Store & Community Channels)

Our website provides direct links to the official Google Play Store so you can install our applications, as well as an optional community handle (Discord: @Nictotarus). When you click an external link, you leave our website, and your interactions are governed by the privacy policy and terms of the respective external platform.

Application-Specific Privacy Policies

Each mobile app developed by Nictotarus has its own transparent privacy policy explaining on-device metadata handling, file permissions, and data protection:

FileProps: Properties & EXIF View Privacy Policy →

ImageProps: EXIF Photo Editor View Privacy Policy →

AvianScan Bird Identifier View Privacy Policy →

Retention Periods

We retain personal data only for as long as strictly necessary to fulfill the purpose for which it was collected:

• Support Emails: Communications sent to support@nictotarus.dev are retained only until your technical inquiry or support request has been completely addressed and resolved, plus any applicable period required to maintain service records or defend against legal claims.
• Server Logs: Temporary connection logs maintained by Google Firebase are automatically purged on a 30 to 90 day rolling basis.

International Data Transfers

Because our website is delivered through Google Firebase global CDN edge nodes, technical server requests may be routed through infrastructure operated internationally by Google LLC. All such international transfers are governed by European Commission approved Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework, ensuring an equivalent standard of protection under European law.

Right to Lodge a Complaint with a Supervisory Authority

If you believe that your personal data has been handled improperly or your rights have not been satisfied, you have the right to lodge a complaint with an official Data Protection Authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD) (www.aepd.es, C/ Jorge Juan, 6, 28001 Madrid), or the competent supervisory authority in your EU member state of residence.