Privacy Policy
Last updated: November 12, 2025
1. Data Controller
Mamutlove
Email: hola@mamutlove.com
Website: mamutlove.com
2. Data we collect and purpose
2.1 Web Analytics (Umami Analytics)
This site uses Umami Analytics, an open-source web analytics tool that respects your privacy and does not use cookies. Umami is self-hosted on European servers, so data is not shared with third parties.
Data collected:
- Pages visited
- Referrer (site you came from)
- Browser type and operating system
- Approximate country/region (derived from IP, but IP is not stored)
- Time spent on site
- Interaction events (clicks, downloads)
Data we do NOT collect:
- IP address (processed but not stored)
- Individual user identifiers
- Personally identifiable information
- Third-party cookies
Purpose: To understand how visitors use our site to improve user experience and content through aggregated and anonymous data.
Legal basis: Legitimate interest (GDPR Art. 6.1.f) to improve our services through anonymous web traffic analysis.
Retention: Data is retained for a maximum of 24 months and then aggregated or deleted.
Technology used:
- localStorage (browser local): To identify sessions anonymously without creating user profiles
- No HTTP cookies: Umami does not store cookies on your device
Do Not Track respect:
- If your browser has “Do Not Track” enabled, we respect your preference and do not collect data
2.2 Email communication
If you contact us via hola@mamutlove.com, we store:
- Your email address
- Name (if you provide it)
- Message content
Purpose: To respond to your inquiries and maintain communication related to our services.
Legal basis: Performance of pre-contractual or contractual measures (GDPR Art. 6.1.b) or consent (GDPR Art. 6.1.a).
Retention: Until your inquiry is resolved or you request deletion.
3. Data recipients
Your data is not shared with third parties except:
- Umami Analytics: Self-hosted on Vercel (EU servers), with PostgreSQL database on Neon (EU servers, Frankfurt)
- Zoho Mail: For email management (EU servers)
- Netlify: For website hosting (EU servers)
These providers comply with GDPR and have appropriate security measures.
4. International transfers
All our providers have servers in the European Union, so there are no international data transfers outside the EEA.
5. User rights
Under GDPR, you have the right to:
- Access: Obtain confirmation about whether we process your data and access it
- Rectification: Correct inaccurate or incomplete data
- Erasure: Delete your data (“right to be forgotten”)
- Restriction: Restrict the processing of your data
- Portability: Receive your data in structured format
- Object: Object to the processing of your data
- Withdraw consent: At any time, without affecting previous processing
Note on analytics: Since Umami does not store identifiable data or create user profiles, it is not possible to extract individual data from aggregated statistics. If you wish not to be tracked, enable “Do Not Track” in your browser.
To exercise these rights, contact: hola@mamutlove.com
6. Security
We implement technical and organizational measures to protect your data:
- SSL/TLS encryption (HTTPS)
- Restricted access to personal data
- Secure servers with regular updates
- No IP address storage
- Aggregated and anonymized analytics data
- Database with encryption at rest
7. Transparency about Umami Analytics
Umami is an open-source web analytics solution designed with privacy by default:
- Open source: Code is public and auditable
- Cookie-free: Does not store HTTP cookies
- Anonymous data: Does not identify individual users
- Self-hosted: Data remains under our control
- GDPR compliant: Designed to comply with European regulations
- No external trackers: Does not share data with third-party commercial entities
More information: umami.is
8. Changes to Privacy Policy
We reserve the right to modify this policy. Changes will be published on this page with a new update date.
9. Supervisory authority
You have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if you believe the processing does not comply with regulations:
AEPD
C/ Jorge Juan, 6
28001 Madrid
Tel: 901 100 099 / 91 266 35 17
Web: www.aepd.es
10. Contact
For any questions about this privacy policy:
Email: hola@mamutlove.com