Status and scope
Technical draft prepared on 6 November 2026. The operator, address and contact are confirmed; tax identification details and final review are pending. This is not yet a final privacy policy or a compliance certification.
This policy concerns carapatolabs.com. AnnaLyzer and ActaFoto Pro have separate policies because they handle information differently.
Controller and contact
Carlos Blanco, an individual, is the operator of Carapato Labs, this website and the AnnaLyzer and ActaFoto Pro applications. Address supplied by the operator: Carrer es es migjorn s/n, Ferreries, Menorca, Spain. Contact and privacy: info@carapatolabs.com.
Tax identification details remain to be completed in the legal notice.
Website visits
The planned architecture serves static pages and assets through Cloudflare. To deliver the website and protect the service, the infrastructure may process your IP address and technical request and traffic information.
No user accounts, lead forms, advertising, tracking pixels or audience analytics have been incorporated. This website does not receive or analyse the documents or photos used in the apps. Disabling web application logs does not eliminate technical processing by the infrastructure provider.
Cookies and preferences
The website does not incorporate advertising or analytics cookies. A consent banner is not planned for non-essential technologies that are not used.
Cloudflare may use security mechanisms and cookies when its configuration or a security challenge requires them. Deployment checks must confirm which features are active. Any stored interface preference must be identified before this policy is finalised. This draft does not claim that no visit can receive a technical cookie.
Support enquiries
If you email info@carapatolabs.com, the operator receives the sender’s address, message and any files you attach. This information is used to answer the enquiry and manage related actions.
To report a problem, the app name, version, device model and a description will usually be enough. Avoid sending complete documents, health information, signatures or other people’s information unless necessary. Use anonymised examples.
Proposed legal bases for review are the contract or steps requested before entering one for related enquiries, and the relevant legitimate interest for other enquiries and service protection. Support messages will not be used for marketing without a valid legal basis.
Providers, retention and transfers
Cloudflare delivers and protects the website. Its documentation explains traffic data processing and contractual safeguards for international transfers. Exclusive storage within the European Union is not guaranteed.
No operator-controlled retention period for visitor logs has been set, and no universal provider retention period has been verified. The final policy must reflect the services and settings actually used.
For support, the proposed approach is to keep information while needed to resolve the request and, where applicable, for legal obligations or claims. The final retention criteria remain subject to the operator’s review.
Incoming email to info@carapatolabs.com is forwarded through Cloudflare Email Routing to a Gmail inbox. Cloudflare and Google handle message transport and reception; the destination inbox’s private address is not published.
Your rights
Where applicable, you may request access, rectification, erasure, restriction, objection and portability, or withdraw consent without affecting earlier lawful processing. Send your request to info@carapatolabs.com.
You may complain to the Spanish Data Protection Agency (aepd.es). Automated decisions with legal effects and visitor marketing profiles are not planned.
Changes
Review this policy before adding analytics, forms, accounts, providers or features that change data handling. The final version will display its publication date.
This draft is based on the available technical review. It requires final owner review and does not replace legal advice.