1. Data controller

The data controller for information collected through Bingofy is the site owner. For any privacy or data protection question, you can write to privacy@bingofy.app.

2. What data we collect

Bingofy does not require sign-up or a user account. The data processed while using the service is:

• The Spotify playlist URL you enter: sent to the Spotify API to retrieve song names, artists and track order. We do not store or access your Spotify account; we only read public playlists using the app's own credentials.
• Images you upload (card background or free-cell image): used only at the moment your PDF is generated, within that same request; not stored anywhere.
• Language preference, stored in a cookie (see the cookies section).
• Technical data automatically collected by any web server: IP address, browser type, pages visited and timestamps, for security and basic usage statistics (server/hosting logs).

3. Cookies and similar technologies

We use two first-party cookies, strictly necessary for the site to work, which do not require your consent:

• "bingofy-locale": remembers whether you prefer to view the site in Spanish or English.
• "bingofy-consent": remembers whether you accepted or rejected non-essential cookies, so you are not shown the banner on every visit.

4. Advertising (Google AdSense)

Bingofy displays ads through Google AdSense to keep the service free. Google and its advertising partners may use cookies and similar technologies (including the DART cookie) to serve ads based on your visits to this and other websites.

The first time you visit Bingofy we show a banner letting you accept all cookies (including advertising ones) or reject non-essential ones. You can change your choice at any time from the "Cookie preferences" link in the footer.

You can review how Google uses data from sites that use its services, and manage or opt out of personalized advertising, at the following links:

• How Google uses data: https://policies.google.com/technologies/partner-sites
• Google Ads Settings: https://adssettings.google.com
• Industry opt-out tools: https://optout.aboutads.info and https://www.youronlinechoices.eu

5. Third-party services

To operate, Bingofy relies on third-party services, each governed by its own privacy policy:

• Spotify (Web API): to fetch the public content of the playlist you provide. Spotify privacy policy: https://www.spotify.com/legal/privacy-policy/
• Google AdSense: for the site's advertising. Google privacy policy: https://policies.google.com/privacy
• Google Fonts: to load the interface and card typefaces.

6. Legal basis and purpose

We process the strictly necessary data (language, content you upload) on the basis of our legitimate interest in providing the service you request. Google's processing of data for advertising purposes is based on your consent where legally required (EU/UK GDPR).

7. Data retention

The server keeps nothing between requests: the playlist looked up, the images you upload and the generated PDF only exist for the duration of that one request, and no copy is kept afterwards. We do not maintain sessions or any kind of storage tied to your cards.

8. Your rights

If you live in the European Economic Area, the United Kingdom, or another jurisdiction with equivalent rights, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and to data portability. Since Bingofy does not require an account and does not permanently store personal data, most such requests are resolved simply by no longer using the service or clearing your browser cookies.

To exercise these rights or for any question, email us at privacy@bingofy.app. You also have the right to lodge a complaint with your local data protection authority — for example the Spanish Data Protection Agency (https://www.aepd.es) if you are in Spain.

9. International transfers

Services such as Google and Spotify may process data on servers located outside the European Economic Area. These companies rely on recognized international transfer mechanisms (such as the EU Standard Contractual Clauses) under their own privacy policies.

10. Children

Bingofy is not directed at children under 13 and we do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can delete it.

11. Security

We apply reasonable technical measures (such as signed cookies and automatic deletion of temporary data) to protect the information we process. No system is 100% secure, so we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy to reflect changes to the service or applicable law. The last-updated date appears at the top of this page. We recommend checking it periodically.

13. Contact

For any question about this privacy policy, write to privacy@bingofy.app.