Privacy Policy

Last updated: 2026-10-28

Scope: this policy covers unvale.so — UnVale's corporate site — and the email you send us. Each product UnVale ships publishes its own policy on its own site; this document does not govern them. For any data-subject request, email [email protected] with the subject "GDPR request".

Publisher / Editor

This privacy policy is published by Raúl Padilla Martín, trading as UnVale, a software studio based in Spain, operating the domain unvale.so. UnVale is a trading name: there is no registered company behind it today, so the publisher and controller is a natural person. Questions: [email protected].

Controller / Responsable

Name: Raúl Padilla Martín, a natural person trading as UnVale (no registered company)
Contact: [email protected] (subject "GDPR request" routes the message to the controller)
Country: Spain
Legal basis: GDPR Regulation (EU) 2016/679 + LOPDGDD (LO 3/2018)

What this site collects

This site is a static set of pages. It has no accounts, no forms, no sign-up and no payment. There is nothing to log in to and nothing to submit.

Category	Purpose	Legal basis	Retention
Technical request data (IP address, user agent, requested URL, timestamp) handled by our hosting provider	Serving the page, protecting the site from abuse and attack	Legitimate interest (art. 6.1.f)	Short-lived operational logs held by the hosting provider; UnVale does not copy them into any system of its own
The content of an email you choose to send us, and your email address	Answering you	Legitimate interest (art. 6.1.f), or pre-contractual steps at your request (art. 6.1.b)	Kept while the correspondence is live, and for up to 24 months afterwards; deleted earlier on request

What this site does not do

No cookies. This site sets none — neither necessary nor analytical.
No analytics, no tracking pixels, no advertising tags, no third-party scripts. Every asset the page loads is served from unvale.so itself.
No profiling and no automated decision-making within the meaning of GDPR art. 22.
No sale or sharing of personal data. We do not sell, rent, or trade anything about you.
No special-category data is collected by this site.

Because nothing here identifies a returning visitor, there is no consent banner: there is nothing to consent to.

Processors

Processor	Role	What they handle
Cloudflare	Hosting, DNS and CDN for `unvale.so`; email routing for the `@unvale.so` addresses	Technical request data as above; inbound email in transit. See Cloudflare's Privacy Policy.
Resend	Outbound email delivery from the verified `unvale.so` domain	The address we reply to and the content of our reply. See Resend's Privacy Policy.

Both act on UnVale's instructions under GDPR art. 28 data-processing terms.

Data transfers

Cloudflare and Resend are US-headquartered and may process data outside the EEA. Those transfers rely on the EU-US Data Privacy Framework and, where applicable, Standard Contractual Clauses. UnVale makes no other transfer outside the EEA from this site.

Your rights (GDPR art. 15-22)

Access and portability — ask what correspondence we hold from you and receive a copy.
Rectification — have anything inaccurate corrected.
Erasure — have your correspondence deleted.
Restriction and objection — object to processing based on legitimate interest.
Complaint — you may complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD), or to the authority where you live.

Exercise any of these by emailing [email protected]. We respond within 30 days per art. 12.3. We may ask one question to confirm the request comes from you — no more than needed.

Minors

This site is addressed to a professional audience and is not directed at children. We do not knowingly process the data of anyone under 14 (LOPDGDD art. 7) through it.

Security

TLS for every request; HTTP is redirected to HTTPS.
No user database and no credentials exist for this site, so there is no account data to breach.
Correspondence is held in mailboxes protected by strong authentication.

Products

UnVale's products are published on their own sites, each with its own privacy policy and terms covering what that product actually processes. Nothing in this document extends to them, and nothing in this document should be read as describing a product's data handling.

Changes to this policy

Material changes are published here with a new date at the top and a row in the version history below.

Version history

Date	Change
2026-10-28	Publisher and controller corrected to the full legal name, Raúl Padilla Martín, trading as UnVale, Spain — the same string now used on pasacodigo.unvale.so and uncoupe.unvale.so, which previously named a company that does not exist. ⚠️ LSSI-CE art. 10 also requires the publisher's NIF to be shown here; it is still not, and must be added.
2026-10-28	Publisher and controller stated as a natural person — Raul Padilla trading as UnVale. The previous text carried a "[legal form TBD]" placeholder implying a company that does not exist; no S.L. is registered as of this date. ⚠️ LSSI-CE art. 10 also requires the publisher's NIF to be shown here; it is not yet, and must be added.
2026-10-28	Replaced wholesale. The previous document was a consumer product's privacy policy published at this URL; it described accounts, health data, image scanning, recall matching and App Store subscriptions, none of which `unvale.so` does. This version describes the corporate site only, and names Cloudflare and Resend as the sole processors.

Contact

For any GDPR / privacy question, email [email protected] with subject "GDPR request". We respond within 30 days per art. 12.3.