Privacy policy

Who is responsible

The data controller is VCons, R. das Marias 12, 2725-999 Mem Martins, Portugal.
For any privacy question or request: info@vcons.pt

What we collect

Your email address. Required to create an account, send you a sign-in link, and tell you whether your block was approved.

A session record. When you sign in we store a session token, the time it expires, and — for security — the IP address and browser user-agent it was created from.

What you publish. The image, title, alt text and link you submit. This is deliberately public: it appears on the grid and on its own page.

Order records. The amount, the currency, and Stripe’s references for the payment.

We never see your card details. Payment happens on Stripe’s own hosted page. Card numbers are never transmitted to or stored on our servers.

What we do not do

We do not sell your data. We do not share it with advertisers. We do not run advertising trackers or third-party profiling scripts. We do not build a profile of you across other websites.

Legal bases

Contract — to sell you pixels and publish your block. Legitimate interests — to keep accounts secure, prevent abuse, and moderate content. Legal obligation — to keep financial records for the period tax law requires.

Who else processes your data

Stripe (payments), our email provider (sign-in links and notifications), our hosting and database providers, and our object storage provider. Each acts on our instructions under a data processing agreement. Where data is transferred outside the EEA, it is covered by Standard Contractual Clauses.

How long we keep it

Account and session data: while your account exists, and sessions expire automatically. Order records: as long as tax law requires, typically several years. Rejected artwork: deleted after the appeal window.

Published blocks are intended to be permanent. That is what you are buying. If you ask us to erase your account, the block you paid to publish may remain visible, since removing it would defeat the purpose of the purchase and affect the integrity of the grid.

Your rights

You can ask for a copy of your data, correction of it, erasure of it, restriction of processing, or portability, and you can object to processing based on legitimate interests. Write to info@vcons.pt and we will respond within one month.

You also have the right to complain to your national data protection authority.

Cookies

We set one cookie, to keep you signed in. It is strictly necessary, which is why there is no cookie banner: there is nothing to consent to. We use no advertising or analytics cookies.

Children

The site is not intended for anyone under 16, and we do not knowingly collect their data.

Changes

If this policy changes materially we will say so here and, where the change affects you, by email. The date at the top shows the last revision.