ONMYBIOVolver

Legal

Privacy policy

Last updated: August 7, 2026

Summary

ONMYBIO collects the minimum necessary for your page to work: your account, the content you publish, and aggregated visit statistics. We don't sell your data or share it with third parties for advertising purposes.

Data controller

The data controller is the owner of ONMYBIO. For anything related to your data you can write to hola@onmybio.me.

What data we process

  • Account: your email address and an encrypted password, or the identifier Google provides us if you sign in that way.
  • Content: public name, bio, images, links, socials, events and products that you publish.
  • Usage: visits and clicks on your page, with approximate country and device type. We don't use advertising tracking cookies or profile your visitors.

What we use it for

  • Providing the service: authenticating you and publishing your page.
  • Showing you performance stats for your links.
  • Preventing abuse and keeping the platform secure.
  • Notifying you of relevant service changes.

Legal basis

We process your data to perform the contract you accept when creating an account, to comply with legal obligations, and, for aggregated statistics, on the basis of our legitimate interest in improving the product.

Retention

We keep your data while your account is active. If you delete it, your profile, links and associated content are deleted. Aggregated metrics may be retained in anonymized form.

Data processors

We use providers that process data on our behalf under contract: Supabase (database, authentication and storage) and Vercel (hosting and content delivery network). Both apply appropriate safeguards for international transfers.

Your rights

You can access, rectify, erase, restrict or object to processing, and request portability of your data, by writing to hola@onmybio.me. You can also file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) if you believe we haven't addressed your request.

Security

All traffic travels encrypted over HTTPS. Every table applies row-level permissions, so only you can read or modify your content, and private keys are never exposed to the browser.

Minors

The service is not directed at anyone under 14. If we detect an account belonging to a minor without guardian authorization, we will delete it.

Changes

If we change this policy we'll notify you by email or within the dashboard before the changes take effect.