Privacy at Kite Threads

Kite Threads is published by KITECONNECT SL (tax ID B71549216), registered office at C/ Mirador de Guendulain, 13, Zariquiegui, 31190 Cizur (Navarra), Spain, entered in the Navarre Mercantile Registry (Registro Mercantil de Navarra), Section 8, Sheet NA 45031, Entry 1.

For any privacy matter you can write to admin@kiteconnect.es.

You can read all content without creating an account or giving us your email. As with any website, the hosting service processes technical connection data needed to deliver pages and protect them from abuse.

To comment, you need a reader account with a verified email address and a display name or pseudonym. We process your email address, sign-in data and language preference to provide and protect this service. Managing your account and the features you request is based on providing the service.

This account is separate from your KiteConnect app account. Registering does not subscribe you to the monthly letter. Your email address is not shown to other readers; your chosen name may appear alongside your published comments. Authorised staff and the providers that run the service may access this data where needed to operate it.

The sign-in link or code we send expires shortly after it is sent; that expiry concerns its validity for signing in, not how long we keep data.

The Kite Threads monthly letter is free and optional. If you request it, we use your email address and chosen language to send editorial content, stories and recommendations from Kite Threads. These emails are based on your consent and do not require a reader account.

Your subscription is completed after you confirm the email we send you. We record subscription requests, confirmations, preference changes and withdrawals, together with their date, language, source and consent-text version, to manage and demonstrate your choices.

You can withdraw consent through the unsubscribe link in our emails or by contacting admin@kiteconnect.es. Unsubscribing does not delete your reader account. Likewise, deleting your account does not cancel a separate subscription to the letter.

When commenting is available, you can comment on articles, stories and recommendations using your verified account. New comments and edits are moderated before publication. Pending content is available to its author and the authorised moderation team.

Published comments show the display name or pseudonym, text and date. The Spanish and English versions of a piece share the same conversation; comments remain in their original language. Abuse reports are not public.

We manage these features to provide the participation service you request. We also process moderation and security information to prevent abuse and protect the community, relying on our legitimate interest in maintaining a safe space and on applicable legal obligations.

Deleting a comment removes its text and name from public view. A marker may remain to preserve the structure of other people's replies. Deleting an account removes the text of its comments and unlinks their authorship. Internal moderation, security and potential claims records follow their own retention criteria; removal from public view does not mean that all such records disappear immediately.

The reader account and the monthly letter are intended for people aged 18 or over. Reading the publication does not require an account.

We use limited technical storage in your browser to keep you signed in, temporarily keep a comment draft while you browse, and remember preferences. We do not use this storage for advertising or analytics.

Lovable Cloud provides hosting, reader authentication and the database, with its authorised infrastructure providers. Its data processing agreement describes its sub-processors and safeguards for international transfers.

Lovable data processing agreement: lovable.dev/data-processing-agreement

Resend manages delivery of the letter, related emails and their preferences. Its documentation states that it stores data in the United States even when Ireland is selected as the sending region. Its processing agreement incorporates Standard Contractual Clauses for transfers.

Resend data processing agreement: resend.com/legal/dpa

Resend GDPR information: resend.com/security/gdpr

You can request information about these safeguards at admin@kiteconnect.es.

• Reader account: while the account is active, until you delete it or we delete it.
• Comments: until removed; a marker without text or name may remain in conversations to keep other people's replies in place.
• Monthly letter: while you remain subscribed. After a withdrawal or delivery block we keep only the minimum record of the decision and consent (date, language, source and version of the accepted text), used solely to demonstrate them, respect your opt-out and handle possible claims. We review at least once a year whether they are still needed; they are not deleted automatically.
• Subscription requests never confirmed: deleted 7 days after the last confirmation email, together with their temporary data. This never affects people who confirmed, unsubscribed or have deliveries blocked.
• Expired or used confirmation links: deleted 7 days after they expire. Unsubscribe links are kept while they are needed to withdraw consent.
• Completed technical synchronisation records: 30 days. Technical notices received from our email provider: 90 days. Sending and comment-posting limit counters: 7 days.
• Moderation and security: pending reports, moderation history and suspensions are kept as long as needed to handle cases and possible liabilities; they are not deleted automatically.

These periods are applied by a daily maintenance task on this blog's data. It does not cover infrastructure backups or data held by our email provider, which follow their own periods.

Where applicable, you can exercise your rights of access, rectification, erasure, restriction, objection and portability, and withdraw any consent you have given at any time, by writing to admin@kiteconnect.es. Withdrawal does not affect earlier processing.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): aepd.es.

We apply reasonable technical and organisational measures to protect data: email-verified access, restricted database permissions and moderation access limited to authorised people. No system is completely infallible.