Privacy

1. Controller and legal notice

The data controller and owner of this portal is Zaíra Maria Martinez Sanchez, NIF 54723902V, Calle de Melilla 7, 28939 Arroyomolinos (Madrid), Spain. Any question about privacy or about the portal can be sent to contactus@fidesviva.org.

2. What the portal does not do

The portal sets no cookies of its own, uses no third-party analytics or advertising tools and does not follow its readers from one day to the next or across other sites. It makes no automated decisions about anyone and builds no profiles. Fonts are served by the portal itself, with no calls to outside services. There are no reader accounts.

If a reader changes the text size of the readings, the Bible or the episodes, that setting is kept only in their own browser (local storage), with no cookie or identifier, and is never sent to the portal. It serves only to show the text at the chosen size on the next pages, and it is removed by clearing the site's data in the browser.

3. Hosting logs

The portal is hosted by Vercel Inc., in the United States. Like any web server, it logs technical data about each visit, the IP address, the date and time, the page requested and the type of browser. These logs keep the site running and protect it from abuse, and they are kept for a limited time. The legal basis is the legitimate interest in running the service and keeping it secure. Vercel is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognizes as an adequate safeguard for these transfers.

4. Images

Some of the portal's images, such as the works of art for the Bible and for the Gospel of the day, are served from media.fidesviva.org, a content delivery network run by BunnyWay d.o.o., in Slovenia, which stores them in Germany. Like any server, when it delivers an image it receives the IP address and the browser's technical data, which it uses only to serve the image and protect the service. The legal basis is the legitimate interest in the portal loading quickly and securely. The other images are served by the portal itself.

5. Own visit count

To know how many people read the portal and where they come from, the portal counts its visits itself, without cookies and without keeping the IP address. For each page viewed it keeps the page, the language, the domain of the referring site, the campaign tags of the link, the country and region given by the delivery network, the browser's first language, the type of device and the family of browser and operating system, without versions.

Visitors are counted with a fingerprint computed from a random key that changes every day and is deleted afterwards, so the same person cannot be recognised from one day to the next nor traced back to an IP address. If the browser asks not to be tracked (Do Not Track or Global Privacy Control), nothing is recorded. This data is kept for thirteen months at Supabase, on servers in London (United Kingdom, a country the European Commission recognises as providing adequate protection). The legal basis is the legitimate interest in knowing, in aggregate, how the portal is used.

6. YouTube videos and images

Episode pages show the video in two steps. When the page opens, it shows only an image served by the portal itself, and nothing is sent to YouTube. When the reader chooses to watch, YouTube's privacy-enhanced player (youtube-nocookie.com) loads. From that moment YouTube, a Google service, receives the IP address and browser data and may store information in the browser, and Google's privacy policy applies. Chapter links open the video on YouTube. The episode cover images are fetched from YouTube by the portal's own server, so the reader's browser does not connect to YouTube to show them.

7. Email

Whoever writes to Fides Viva shares their address and what they write. That data is used only to read and answer the message, is not passed on to third parties and is deleted when it is no longer needed. Email is hosted by DreamHost, in the United States, which processes it on the controller's behalf under its data processing agreement.

8. Email newsletter

Whoever subscribes to the newsletter receives every morning, in the chosen language, the Gospel of the day, the saint of the day or both. Now and then they may also receive a notice from Fides Viva about the portal or its content; the same unsubscribe stops everything. An email address is enough; no account is needed. The subscription only starts when the person presses the button in the confirmation email; without that confirmation, the data is deleted after seven days.

What is kept is the email address, the language, the liturgical calendar followed (taken from the country of the connection at the moment of subscribing, without keeping the IP address), what was chosen and the dates on which the subscription was requested, confirmed, changed or cancelled, with the version of the text accepted. The legal basis is consent, which can be withdrawn at any time.

The emails carry no tracking pixels and no tracked links. Links to the portal say that the visit comes from the newsletter, without identifying who clicked.

The emails are sent by Resend (Plus Five Five, Inc., United States), which processes the data on behalf of the controller under its data processing agreement. Transfers rely on the EU-U.S. Data Privacy Framework and on the European Commission's standard contractual clauses. The emails leave from servers in Ireland.

Every email has a link to unsubscribe in one click and another to the preferences, where one can change what is received, download one's own data or delete it entirely. Unsubscribing deactivates the subscription; deleting removes the address and the preferences. The newsletter data is kept at Supabase, in London. After deletion, the record of the subscription and unsubscription dates is kept without the address, as proof of consent. If an address bounces or its owner marks an email as spam, only an encrypted fingerprint of the address is kept, so as never to write to it again.

9. Rights

Anyone can ask for access to their data, its correction or erasure, restrict or object to its processing and ask for its portability by writing to contactus@fidesviva.org. Anyone can also lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the data protection authority of their country.

10. Changes

This policy will be updated when the portal changes, for example when reader accounts arrive. Last reviewed, October 20, 2026.