Privacy policy

Last updated: 2026-10-04

This policy explains how we process your personal data on visitroxboronc.com and on the other websites in the Blosfera network. A Blosfera account works across all the websites in the network, and this policy applies to all of them.

1. Data controller

  • Controller: José Carlos Martín Martín (Tax ID 70809003F)
  • Address: C/ Edgar Neville, 6, 28020 Madrid (España)
  • Privacy contact: soporte@blosfera.com

2. What data we process

If you only read: your IP address and technical data about your browser, which are recorded in the logs of the server and of the content delivery network to serve the website and protect it from abuse. Some preferences (light or dark theme, saved articles) are stored only in your own browser.

If you register:

  • Account data: email, username and password (stored encrypted). If you sign in with Google, we receive your Google name, email and profile photo.
  • Profile data you choose to add: display name, bio, photo and cover image, and your privacy setting for messages.
  • The website and country you registered from, to organise the community.
  • Your activity: forum topics and comments, photos you post (their metadata, including location, is removed), private messages, users you follow and block, and reports you send or receive.

Advertising: if you accept it in the cookie notice, Google may use cookies and identifiers to show you ads. More information in the Cookie policy.

3. Purposes and legal bases

Purpose Legal basis
Creating and managing your account, the forum, profiles and private messages Performance of a contract (Art. 6(1)(b) GDPR): the Terms of use
Moderating content, preventing spam and abuse and keeping the websites secure Legitimate interest (Art. 6(1)(f) GDPR) and compliance with the Digital Services Act
Sending you necessary emails (account confirmation, password recovery, security codes, moderation notices) Performance of a contract
Personalised advertising Your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time
Handling your requests and complying with legal obligations Legal obligation (Art. 6(1)(c) GDPR)

Automated moderation: texts and photos you post go through an automated filter (OpenAI's moderation service and, for borderline photos, Google Gemini) that may prevent clearly inappropriate content from being published. Borderline content is reviewed by a person. If you disagree with a decision, you can request a human review at soporte@blosfera.com.

We do not sell your personal data.

4. Who processes your data on our behalf

We use providers that process data on our behalf (processors), under contract and with safeguards:

  • OVHcloud (France, EU): servers hosting the website and the database.
  • Cloudflare (USA): content delivery network and attack protection.
  • Bunny.net (Slovenia, EU): image storage and delivery.
  • OpenAI (USA): automated moderation of texts and photos.
  • Google (USA/Ireland): Google sign-in, advertising (with your consent) and review of borderline photos (Gemini).
  • Resend (USA): sending emails.

Some of these providers are in the United States. Transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.

We will only disclose your data to authorities when required by law.

5. How long we keep it

  • Account, profile, posts and messages: for as long as you have the account. If you delete it, they are erased immediately together with what you have posted. Topics you started that have replies from other users are kept so as not to erase what they wrote, without your message and with the author shown as "Deleted user".
  • Content removed by moderation: up to 6 months, to handle appeals. If you delete your account, we keep only that content (and any content that had been reported), with your username and email, for the rest of those 6 months, to handle appeals or legal requests; then it is erased.
  • Technical server logs: only as long as needed for security, at most 12 months.
  • Verification codes: 15 minutes.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time:

  • From your profile (⚙ menu): Download my data (portability) and Delete my account (erasure of the account and everything you posted).
  • By writing to soporte@blosfera.com from your account email.

If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the data protection authority of your country.

7. Minors

You must be at least 16 years old to register. We do not knowingly collect data from people under that age. If you find an account belonging to a minor, write to us and we will delete it.

8. Security

Connections are encrypted (HTTPS), passwords are stored encrypted, access to data is restricted by permissions and private content (such as messages) is only visible to its participants.

9. Users in Brazil (LGPD)

If you are in Brazil, we process your data under the General Data Protection Law (Law 13,709/2018) on the same legal bases and for the same purposes described above. You can exercise your rights under Art. 18 LGPD at soporte@blosfera.com, our channel for data subjects, and complain to the National Data Protection Authority (ANPD).

10. Users in the United States

We do not sell personal information or share it for money. The service is not directed to children under 13 and we do not knowingly collect their data (COPPA). Our websites do not respond to browser "Do Not Track" signals; you can manage advertising from the cookie settings. California residents can contact soporte@blosfera.com with any privacy request.

11. Changes

If we make significant changes to this policy, we will say so on the websites and, if you have an account, notify you by email.