Privacy Policy

Last updated: September 2026

1. Who we are

IndieBug is the data controller responsible for the personal data collected through this website (indiebug.dev). For any privacy-related questions or requests, you can reach us via our contact form.

2. Data we collect

We only collect data you provide voluntarily through our contact form:

  • Name
  • Email address
  • Service interest
  • Target platform
  • Message

When you submit the form, we also process your IP address for the sole purpose of limiting abusive or automated submissions. It is held in memory for a maximum of 15 minutes, is never written to a database, and is never shared with anyone. The legal basis is our legitimate interest in protecting the site from spam (GDPR Art. 6.1.f).

Beyond this, we do not profile or track you. The only data stored in your browser are the preferences described in section 7.

3. Purpose and legal basis

We use your data exclusively to respond to your inquiry and assess whether we can help with your project.

The legal basis is your consent (GDPR Art. 6.1.a), given when you submit the contact form and check the consent checkbox.

4. Third parties

We use Resend (Resend Inc., USA) as our email delivery service to receive contact form submissions. Resend processes your data under Standard Contractual Clauses in compliance with GDPR.

This website is hosted on Cloudflare Pages (Cloudflare Inc., USA). As our hosting and CDN provider, Cloudflare may process connection data such as IP addresses in order to deliver the site. Cloudflare processes data under Standard Contractual Clauses in compliance with GDPR. For more information, see Cloudflare's Privacy Policy.

Apart from these two providers, this website loads nothing from external domains: no third-party fonts, scripts, analytics, embedded videos, or images. Fonts and media are served from our own domain, so your browser never contacts another company while you browse the site.

We do not sell, rent, or share your personal data with any other third parties.

5. Data retention

We keep your data only for as long as necessary to handle your inquiry. If no working relationship is established, data is deleted within 12 months. You can request deletion at any time (see section 6).

6. Your rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of your data
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time

To exercise any of these rights, reach us via our contact form. You also have the right to lodge a complaint with the Spanish data protection authority: AEPD (aepd.es).

7. Cookies and local storage

This website stores two items in your browser, both strictly to remember your own preferences:

  • A theme cookie, which remembers whether you chose light or dark mode.
  • A locale entry in local storage, which remembers whether you chose English, Spanish, or Catalan.

Neither identifies you, contains personal data, nor tracks you across websites. Because both are strictly necessary to provide the preference you explicitly requested, they are exempt from the consent requirement (LSSI-CE Art. 22.2). You can delete them at any time from your browser settings.

We do not use analytics, advertising, or third-party tracking cookies of any kind.

8. Changes to this policy

We may update this policy occasionally. Any significant changes will be reflected with an updated date at the top of this page.