Privacy policy

This policy explains how the personal data of visitors to Boxto is handled, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

• Controller: Jose Luis Lucio
• Contact: [email protected]

2. Data processed

This website does not collect personally identifiable data on its own servers. Your theme preference is stored only in your browser (localStorage) and is never sent to any server.

This site uses Cloudflare Web Analytics, a privacy-first, cookieless measurement tool. It records only aggregated visit metrics (page views, referrer, country and device type) through a lightweight beacon. It sets no cookies, does not use localStorage, does not fingerprint you and does not track you across sites; no personally identifiable data is collected.

3. Legal basis

• Necessary technical storage (theme preference): legitimate interest and provision of the requested service (Art. 6.1.b and f GDPR).
• Cookieless analytics (Cloudflare Web Analytics): legitimate interest in aggregate audience measurement (Art. 6.1.f GDPR); no consent is required because no cookies are set and no personal data is processed.

4. Recipients

Aggregated, cookieless analytics is processed on our behalf by Cloudflare, Inc. as data processor; it involves no personal data and is never used for advertising. Apart from that, no data is shared with third parties.

5. Your rights

You may exercise the rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent, by writing to [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

Last updated: 2026.