Privacy policy

Last updated: October 18, 2026

This page explains, in plain words, what personal data escullme handles, why, who helps us with it, how long we keep it and what you can ask of us.

Who is responsible

Gerard Pradas runs escullme and is responsible for the personal data described here. Write to contacto@escull.me about anything on this page.

What we handle and why

Your account

Your email address, your password (stored only as a secure hash that can't be reversed), whether you've confirmed your address, which shelter you manage, if any, and your sign-in sessions and the one-time links we email you (also stored only as hashes). We use them to let you sign in and use your account, including managing a shelter's profile, as part of the service you sign up for (GDPR art. 6.1.b). We need your email address and a password to create an account; without them we can't give you one. We keep them until you delete your account, which you can do at any time in Settings → Profile: your address, password and sessions are erased at once. You stay signed in until you log out or go 30 days without using escullme.

Shelter profiles and animals

What you publish about your shelter (name, city, postal code, its location on the map, phone, email, website, social networks and photo) and about its animals (details and photos) is public on escullme once we've verified the shelter, so people can find you. Publish only what you're allowed to share, and photos of people only with their permission. It's part of the service you sign up for (art. 6.1.b), and stays until you change or delete it. Deleting an animal erases it and its photos for good (a copy cached by Google's network may stay reachable for up to a day). Deleting the shelter hides it, with its animals, but keeps it, photos included (they remain at their web address, unlisted), so a deletion made by mistake can be undone. Deleting your account hides the shelter you alone manage in the same way, and it's no longer linked to you. Ask us and we'll delete it all for good.

Emails we send

To confirm your address or reset your password, we email you a link, and nothing else. It's part of the service (art. 6.1.b).

Server logs

Like any website, our servers record technical details of each request, including your IP address, to keep escullme working and secure: our legitimate interest (art. 6.1.f). We delete them after 30 days. Firebase Hosting, which delivers the site, also keeps IP addresses for a few months to detect abuse and to give us usage figures.

Visit statistics

To know how escullme is used, we count visits with Umami, without cookies. It doesn't store your IP address: it uses it, with your browser's details, to make an anonymous code that changes every month and to work out an approximate location (country, region, city). It also receives the page you visit and its title (never the part of its address after #), the page you came from, and your browser, device, screen size and language. This is our legitimate interest (art. 6.1.f). Nothing is counted if your browser asks sites not to track you (Do Not Track), or if you switch it off here:

Your visits are counted in this browser.

Messages you send us

If you write to contacto@escull.me (or contact@ or contacte@escull.me), we receive your address and your message, to answer you: our legitimate interest (art. 6.1.f). We keep them as long as needed to deal with what you ask. They arrive in a personal Gmail mailbox (Google), stored on Google's servers, including in the United States.

Who helps us

These companies process data for us, only on our instructions and under data processing agreements:

  • Google Cloud: the servers, photo storage and server logs, in Belgium (EU). Firebase Hosting, also by Google, delivers the site from servers around the world.
  • Neon: the database, in Frankfurt (Germany).
  • Scaleway: the emails we send, from France.
  • Cloudflare: our domain's addresses (DNS), and forwarding the messages you send to our contact addresses.
  • Umami: visit statistics, on servers in the EU and the United States, kept for 6 months.

Some of these companies, or companies they rely on, are in the United States, as is Google, which runs our Gmail mailbox. Those transfers are covered by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

We don't sell personal data, show advertising or build profiles of anyone. Maps come from our own storage: OpenStreetMap only hears from you if you follow an “Open in OpenStreetMap” link to their site.

Cookies and storage in your browser

escullme uses one cookie, __session, which keeps you signed in: it only goes to our sign-in service, expires 30 days after your last visit and is strictly necessary, so it needs no consent. While you create an account, or log in before confirming your address, your address is kept in this tab's storage (sessionStorage) to show it on the next page; it's gone when you close the tab. If you switch visit statistics off, your browser keeps a note of that (localStorage). There are no advertising or tracking cookies.

Your rights

You can ask to access your data, correct it, delete it, limit or object to how we use it, and receive it in a portable format. You can edit or delete most of it from your account; for anything else, write to contacto@escull.me and we'll answer within a month. If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es). We don't make automated decisions about you: shelters are verified by hand.

Age

Accounts are for people aged 18 or older.

Changes

If what we do with personal data changes, we'll update this page and its date.