Privacy policy

Controller

Alejandro Ismael Rodríguez Donaire, tax ID (NIF) 76752476G, Avenida Antonio Gaudí 17, 29004 Málaga, Spain. Contact: king@thedailythrone.com.

What we handle

Visitors: an anonymous technical identifier created by your browser. No account is needed and we never sell or share your identity.
If you take the throne: your email (for the receipt; optional if the throne is free), your sentence, your name, your city if you give one, your signature, the amount and the times of your reign.
If you ask to be told when someone takes your throne: we use your email to send you that notice. Each email includes a one-click link to stop them.
If you report a sentence: the reason you write and your browser's anonymous identifier.
Card details are handled by Stripe; we never see or store them.

What is published

Your sentence, name, city (if given), signature, amount paid and reign times are shown on the throne and in the Hall of Kings. Your email is never published. The name and signature you enter are visible to anyone, so if you would rather not give your real name, use a nickname.

Purposes and legal basis

Providing the service and processing the payment: performance of the contract (art. 6.1.b GDPR).
Tax and accounting obligations: legal obligation (art. 6.1.c GDPR).
Content moderation, handling reports and preventing abuse: legitimate interest in keeping the service safe and lawful (art. 6.1.f GDPR).
“Your throne has been usurped” emails: your consent, given by ticking the box when you bid (art. 6.1.a GDPR). You can withdraw it at any time from the link in each email.

Who else handles this data

Google Ireland / Google LLC (Firebase: hosting, database and functions), Stripe Payments Europe / Stripe Inc. (payments), OpenAI Ireland / OpenAI LLC (automatic moderation of the sentence, name, city and signature before they are published), and the email provider we use to send the notices you ask for. These providers may process data outside the European Economic Area; where they do, the transfer relies on the European Commission's standard contractual clauses and, where applicable, on the EU–US Data Privacy Framework. You can ask us for a copy of those safeguards.

We receive an internal Telegram alert whenever someone takes the throne or reports a sentence, containing the sentence, the name and the amount (never the email or payment details).

How long we keep it

Sentence, name, city, signature, amount and dates: published and kept in the Hall of Kings for as long as the service exists, because that public record is part of the service itself. If a reign is removed, it stops being shown immediately.
Email and transaction data (invoicing): 6 years from payment, under article 30 of the Spanish Commercial Code, and in any case while tax obligations have not lapsed (4 years, article 66 of the Spanish General Tax Act).
Email notice preference: until you unsubscribe; after that we only keep a coded (hashed) note of your address so that we never email you again.
Reports and moderation records: 1 year, so we can spot repeat abuse and answer complaints.
Technical and security logs, and the anonymous browser identifier: up to 12 months.

After those periods the data is deleted or anonymised.

Cookies and storage

The first time you arrive we ask whether you accept analytics cookies. Nothing from Google loads until you answer, and if you reject it never loads at all. You can change your decision at any time from the "Cookies" link in the footer.

Necessary (no consent required)

Your language and your anonymous session, in your browser's local storage. The service does not work without them.
Google reCAPTCHA Enterprise, which checks that you are not a bot before letting you bid or report. It is a security measure, not an advertising one, and without it the service would be open to abuse.
Stripe, which may set its own cookies to prevent fraud during payment.

Analytics (only if you accept)

Google Analytics 4 (Google Ireland Limited). Used to know how many people visit, from which country and which page they arrived from. It sets its own cookies expiring after at most 2 years, and the data is kept by Google for up to 14 months. Google may process it outside the European Economic Area, relying on the European Commission's standard contractual clauses and the EU–US Data Privacy Framework. Legal basis: your consent (art. 6.1.a GDPR).

If you reject, the site works exactly the same: we simply stop counting your visit.

Minors

The service is for people aged 18 and over. We do not knowingly collect data from minors; if we learn that we have, we delete it and refund the payment.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to king@thedailythrone.com. You can also ask us to remove your sentence from the Hall of Kings; the accounting record of the transaction is kept for the legal period stated above. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to your own national authority.

Last updated: 23 September 2026