Privacy Policy

Data controller

The controller responsible for processing your personal data is:

• Controller: F.Javier Pedrosa Ruiz
• Address: Avda. Aurora 59, Málaga
• Tax ID: 75893383F
• Privacy contact: privacy@medianonymizer.com

If you have any questions about this policy or how we handle your data, email us at privacy@medianonymizer.com.

What data we process and why

We process the minimum information needed to provide the anonymization service.

Files you upload for anonymization

When you upload a document, image, audio or video file, it is processed to detect and remove personal data (faces, voices, licence plates, identifiers, etc.).

• Files are uploaded encrypted directly to our storage in the European Union (Germany). The server that runs the website never receives the file content.
• Some files may contain biometric data belonging to third parties (faces or voices): this is special-category data (Art. 9 GDPR) about the person who appears in the file, not you. By uploading it, you declare you have a lawful basis to process it and instruct us to anonymize it; we act as processor (Art. 28 GDPR), under your instructions and solely to anonymize it.

Payment data

We use Stripe to charge for the service. Stripe processes your card data; we do not store card data. We only keep your email address, the amount and a transaction identifier, needed to take payment, issue the receipt and, where applicable, the refund.

Contact form and feedback

If you write to us through the contact form, we process your name, email and message. If you send feedback, we process your message and, optionally, your email. In both cases we record minimal technical data (language, source page and user agent) to reply to you and prevent abuse.

Legal basis

• Performance of a contract (Art. 6(1)(b) GDPR): processing your file and email to provide the service you requested and charge for it. This includes any biometric data (faces/voices) the file may contain: we process it as processor (Art. 28 GDPR), under your instructions. For that data (Art. 9 GDPR), you are the one who must have a lawful basis (your own consent, that of the people who appear, a legitimate interest, or another valid basis), and you declare it when you upload the file.
• Consent (Art. 6(1)(a) GDPR): using analytics cookies relies on your consent, which you can withdraw at any time.
• Legitimate interest (Art. 6(1)(f) GDPR): service security and abuse prevention (for example, per-IP limits on forms).

Retention periods

• Uploaded files: the original file and the anonymized result are kept for up to 24 hours after the result becomes available, so you can correct the result if something isn't right (free corrections, see our Terms of Service); each free correction restarts this 24-hour window. Once that period expires without a new correction, both are deleted automatically and irrecoverably. (Change of 17 July 2026: previously, for images, audio and documents, the original file was deleted as soon as anonymization finished; it is now retained for up to 24 hours after the result is ready, renewed by each correction, to allow corrections.)
• Email and transaction data: kept for as long as needed to manage payment and meet legal (e.g. tax) obligations.
• Contact and feedback messages: kept for as long as needed to handle your request.

Recipients and processors

To provide the service we rely on providers acting as data processors:

We do not sell or share your data with third parties for commercial purposes.

If you upload files containing other people's personal data (CCTV footage or recorded interviews, for example), you act as controller and we act as processor: see our Data Processing Agreement.

International transfers

Some providers are located outside the European Economic Area (USA). In those cases, transfers are covered by the European Commission's Standard Contractual Clauses or other appropriate safeguards under the GDPR.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, at any time by emailing privacy@medianonymizer.com.

If you believe we have not handled your rights properly, you may lodge a complaint with the competent supervisory authority: Agencia Española de Protección de Datos (AEPD) — www.aepd.es.

Cookies

We use necessary first-party cookies and, only with your consent, analytics cookies. See the details in our Cookie Policy; you can change your choice at any time from the "Cookie preferences" link in the footer.

Changes to this policy

We may update this policy to reflect legal or service changes. We will always publish the current version on this page, with its last-updated date.