Privacy policy
Last updated: 03/11/2026
This policy explains how we process the personal data of people who use usuarios-online.com and of visitors to websites that install our counter, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
La Clave Ganadora S.L. · Tax ID B54714571 · Gta. del Poeta Vicente Mojica 4 - 15G, 03005 Alicante (España) · Email: 
· contact form.
2. Data we process, purposes and legal basis
| Who | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Registered users | Email, password (irreversibly hashed), language, registered websites and their settings, access dates. | Create and manage your account and provide the counter and statistics service. | Performance of a contract (art. 6.1.b GDPR). | While you keep your account. Deleting it erases your data and statistics. |
| Registered users | Security log: account actions, date and IP address. | Protect accounts and the service against unauthorised access and abuse. | Legitimate interest in security (art. 6.1.f GDPR). | 180 days. |
| People who contact us | Name, email, subject, message, website ID (optional) and IP. | Answer your request and prevent abuse of the form. | Consent (art. 6.1.a GDPR) and legitimate interest. | Until the request is resolved and at most 12 months. |
| Visitors of websites with the counter | IP address (in memory only, never stored), browser, operating system, device type, resolution, language, approximate country, visited page (without parameters) and referring website. | Produce the statistics of the visited website on behalf of its owner. | Determined by the owner of each website, who is the data controller (see section 3). | Visit details: 7 days. Aggregated, anonymous statistics: as long as the website exists. |
3. Data of visitors to websites that use the counter
When an owner installs our counter on their website, they are the controller of that processing and La Clave Ganadora S.L. acts as processor, under the terms of article 28 GDPR set out in the Terms of Service. We have designed the counter to minimise data:
- It uses no cookies or local storage and does not follow visitors across websites.
- The full IP address is never stored. To count unique visitors, an anonymous code is computed from the IP and the browser, mixed with a random daily key that is destroyed after a few days. After that, the code can no longer be linked to anyone.
- The country is derived from the IP using a local database (DB-IP), without sending data to third parties.
- Parameters, which could contain personal data, are removed from the visited page and the referrer.
If you visit a website with our counter and want to exercise your rights, please contact its owner first. You can also write to us and we will forward your request.
4. Recipients
We do not sell or share data with third parties. Our web hosting and email providers may access it, only as necessary and under a processing agreement. Statistics of a website marked as "public" can be seen by anyone and may appear in search engines, but they contain no personal data. If we ever enable a third-party anti-spam system (Cloudflare Turnstile, hCaptcha or Google reCAPTCHA) on our forms, that provider will receive technical data from your browser under its own policy; we will indicate this next to the form. By default we use our own anti-spam system, which shares no data.
5. International transfers
We do not carry out international data transfers, except those that could result from using the anti-spam providers mentioned above, which offer the appropriate safeguards provided for in the GDPR.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to the email address above or through the contact form. From your dashboard you can change your email and password and delete your account with all its data. If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.
7. Security
We apply appropriate technical and organisational measures: encrypted connection (HTTPS), passwords hashed with strong algorithms, protection against automated attacks, access control and activity logs, and data minimisation by design.
8. Minors
The service is not intended for children under 14. If you are a minor, you need the permission of your parents or guardians to register.
9. Changes to this policy
We may update this policy to adapt it to legal or service changes. The current version will be published on this page with its update date.
This is a translation. In case of discrepancy, the Spanish version prevails.