Controller and contact
The controller is Hector Riera Maiques, Spanish NIF 20852896-S, C/sagunto 106 bajo 2, 46009 Valencia. Contact: thecharacterpath@gmail.com.
This policy covers the website, demo and individual accounts. Creating a sharing group does not itself determine controller and processor roles. Any processing commissioned by an organisation requires specific arrangements covering instructions, responsibilities and user information.
Data processed
Loading the website involves technical request information such as your IP address. The homepage has no registration, newsletter, advertising or analytics form added by Character Path.
The demo creates a random visitor identifier and fictional identities, storing sample names, scope, tasks, sessions, reviews and comments. It requests no personal email or password. Do not enter sensitive or third-party personal information.
The studio uses an approved email, display name and account identifiers. Supabase handles passwords and verification; Character Path links the verified identity to its account. Projects, tasks, hours, reviews, feedback and session records are stored. Access administration lets the owner manage approved addresses and access status, without itself displaying unshared projects or private reflections. Technical access required to operate the service is distinct from group review permissions.
An optional avatar is cropped and reduced in the browser, then decoded and re-encoded by the server. Only a small copy without original metadata is stored in the same private database. It is currently visible only in your own account and included in encrypted backups.
Accounts are for people aged 18 or over. Registration records your declaration and its date in authentication metadata, without requesting birth date or ID. This is a self-declaration, not independent age verification.
Who can see a project
Projects start private. Sharing with a group gives access to its owner and any reviewers designated by that owner, including reviewers added later. The group shows the review team by display name. They can read the shared project, hours, reviews and feedback, and record feedback and quality decisions; they cannot change the artist’s plan, tasks or hours or read private learning reflections. Other artists cannot see your projects. Stopping sharing, leaving the group or removal of review access ends the corresponding access. Existing feedback stays with the artist while the project exists. No projects or comments are sent to AI providers.
Purposes and legal bases
Requested registration, authentication, project storage, shared reviews and essential service support rely on performance of the service relationship and requested pre-contractual steps (GDPR Article 6(1)(b)). Email, credentials, identifiers and the adult declaration are required to register.
Website and demo delivery, abuse prevention and security rely on the legitimate interest in operating a safe service (Article 6(1)(f)). Aggregated account, project-creation and tutorial-status counts are also derived from service records to monitor operation, without displaying private project contents. These differ from optional usage-time measurement. You may object on grounds relating to your situation.
General enquiries and voluntarily submitted product feedback rely on the legitimate interest in responding and improving the service; requested pre-contractual enquiries rely on Article 6(1)(b). In-app feedback sends the owner your name, email, text, category and current section, without automatically attaching projects or images.
Rights requests and legal duties rely on Article 6(1)(c). Optional activity measurement requires consent (Article 6(1)(a)), freely refused or withdrawn without losing service access. There is no advertising profiling or solely automated decision-making with legal or similarly significant effects.
Retention and deletion
Demo access expires after 24 hours. Records and associated WIP images are removed by cleanup at service startup, demo entry and hourly while the server is running. Cleanup does not run during suspension and resumes when the service returns. Restarts may erase data sooner.
Sessions last at most seven days, without extending the demo’s 24-hour access. Application abuse-prevention counters use windows of up to one hour. Expired records are checked hourly while the service runs. Application logs visible in Render are retained for seven days on the current plan.
Enquiries are kept while being handled and followed up; afterwards, only what is needed to evidence agreements or address applicable liabilities is retained. Rights requests and replies are retained as necessary to demonstrate their handling, with restricted access.
Studio accounts and projects are retained while your account is maintained and they are needed to provide the service. Use available project deletion or request account closure and erasure by email. Information needed for legal duties or liabilities is limited to what is necessary and blocked under applicable law for the relevant limitation periods. Encrypted recovery copies do not follow the demo's 24-hour expiry and are not erased simultaneously with active data. These copies currently have no automated maximum rotation period; use the same contact to request information and erasure handling.
Providers’ operational records follow their terms and security purposes. Resend states 30 days for messages and logs on Free and seven days for its backups; these periods do not describe project retention. Simultaneous disappearance of all technical copies is not promised.
Providers and transfers
Render hosts the application in Frankfurt. Cloudflare provides DNS and intermediates HTTPS traffic for website delivery and protection, processing technical request data. Hospedaje y Dominios is the registrar. GitHub holds code in a private repository without the user database.
Supabase provides persistent storage and authentication, with the project configured in Frankfurt. Resend sends private-account confirmations and recovery emails from a sending region in Ireland; it stores message content and logs in the United States. Sending region does not determine storage location. The registration-free demo does not send these emails.
Providers may involve access or processing outside the European Economic Area even with primary hosting in Frankfurt. Linked agreements describe contractual safeguards, including standard contractual clauses where applicable. Ask thecharacterpath@gmail.com for information on applicable safeguards and how to obtain a copy. Data is not represented as exclusively remaining in the EU or EEA.
Gmail provides the contact mailbox and processes the information you include in enquiries and requests. Do not send passwords, complete ID documents or unnecessary private materials. Information may also be disclosed to authorities where legally required.
Your rights
Where applicable, request access, rectification, erasure, restriction, portability or object at thecharacterpath@gmail.com. Withdrawal of consent does not affect prior lawful processing. Requests receive a response within one month; complexity or request volume may justify up to two additional months, with reasons notified during the first month. Identity checks are proportionate, without requesting a complete ID copy by default. You may complain to the Spanish data protection authority at www.aepd.es.
Required and optional data
Email addresses and account identifiers are personal data even without an identity-document number. Data comes from you, service use and reviewers of projects you share. The authentication provider handles passwords; do not email them.
Avatars, content you choose to add and product feedback are optional. Avoid sensitive or unnecessary third-party personal information. Terms acceptance, privacy information and consent to optional activity measurement serve different purposes; measurement is voluntary.
Work-in-progress images (WIP)
Where enabled, the service stores optimised WIP images, thumbnails, notes, upload dates, declared hours and task feedback. Use fictional material in the demo. Studio uploads depend on enabled private storage.
JPG, PNG and WebP images are re-encoded without original metadata. PureRef originals and 3D source files are not stored. Images follow project permissions, with no public gallery or AI processing. Use available export and deletion options. Copies downloaded by authorised recipients are outside the platform's technical control. Review and backup retention rules also apply.
Reviews, corrections and temporary drafts
Review requests retain the selected WIP references, notes, decisions, dates and reviewer identity. Time corrections retain previous and new values and the reason. These records follow the project’s current access permissions. Submitted WIP cannot be removed while its review is pending or approved; withdraw the submission or update the work first.
In-app notifications show requests and feedback within current access permissions and remember which items you have read. They do not send automatic email. Text drafts are stored privately in the signed-in account for 24 hours after their latest save; they are not shared with reviewers or stored as form content in browser storage. Unsubmitted image files and password fields are excluded. Expired drafts are hidden immediately and deleted on the next account draft read or hourly cleanup while the server is active. They are excluded from the application’s encrypted project exports; provider-level copies follow provider retention. Sign out on shared computers.
Optional usage measurement
Optionally share active days and approximate time in the app. The owner sees aggregate statistics, not your private content. No external analytics or additional cookies. Data is kept for 90 days in the service. You can disable this in Account and erase your usage history.
Measurement is off until you accept. We associate daily activity totals with your account, without recording typed text, private files, visited URLs or individual clicks. The owner receives aggregate counts. Backups already made may retain earlier data until their rotation; see the retention section and contact us for privacy requests.
If you allow measurement, the last activity signal time is also stored to count currently active accounts without displaying their identities in the counter. Activity data expires within a 90-day window and is cleaned at startup and hourly while the service runs. Consent choice, version and date remain with the account to remember your preference.