Privacy notice

Who we are

Numero Uno is developed by MoonyFringers. The controller responsible for your personal data is:

• [CONTROLLER LEGAL NAME], trading as MoonyFringers
• Registered address: [REGISTERED ADDRESS]
• VAT number: [VAT NUMBER]
• Privacy contact: [PRIVACY CONTACT EMAIL]
• Data protection officer: [DPO — if appointed]

How Numero Uno works

Numero Uno is a local-first desktop application for managing your comic-book collection. Your collection — series, issues, copies, notes, prices and images — is stored in a database on your own computer. It does not reach our servers unless you use an optional cloud feature that needs it, such as Pro cloud sync.

Our servers handle your account, your licence, and the optional cloud features described below.

What data we process and why

For each purpose below we state the lawful basis under Article 6(1) GDPR. Your email address, nickname, age declaration and acceptance of the terms and of this notice are required to create an account; without them we cannot provide one. Everything else depends on the features you choose to use.

Account and sign-in

When you create an account or sign in, we process your email address and send it a one-time sign-in code; there is no password. We store sign-in codes and session tokens only in hashed form. We also store your account status and technical dates, such as when the account was created and when you were last active (updated at most once a day).

Lawful basis: performance of the contract you enter into with us (Art. 6(1)(b)).

Nickname, age declaration and legal acceptances

To complete sign-up you choose a nickname, declare that you are at least 16 years old, and accept the current terms of service and this privacy notice. We store your nickname, the date of your age declaration (not your date of birth), the version of each document you accepted and when you accepted it, and, optionally, the language you prefer for our emails.

Your nickname is your public name in Numero Uno: other users may see it, but they never see your email address. If you change your nickname, the previous one is reserved for 90 days so that nobody else can take it to impersonate you.

We do not ask for your real name, date of birth, postal address, phone number or country.

Lawful basis: performance of the contract (Art. 6(1)(b)).

Licences and device activation

To issue and verify your free or Pro licence, we store the licence tier and its dates. For each computer on which you activate it, we store a device fingerprint computed by the app, kept only in hashed form, and the time of the last licence check. This lets us apply the device limit of your plan and lets the app keep working offline for a limited period.

Lawful basis: performance of the contract (Art. 6(1)(b)).

Pro cloud sync and images

Cloud sync is an optional Pro feature. If you use it, we store a copy of your collection on our servers to keep it in step across your devices and the web portal: collections, series, issues, copies (including condition, prices paid and sold, purchase and sale dates, where you bought each copy, and notes), tags, statuses, saved views, pack subscriptions and preferences, plus the images you attach. Synced data is visible only to you.

Synced images are stored exactly as you upload them, including any embedded metadata such as the place where a photo was taken or the device that took it. If you do not want that metadata stored, remove it before adding the image.

Free-text fields may contain information about other people, such as the name of a seller. Please include only what you need.

Lawful basis: performance of the contract (Art. 6(1)(b)).

Spreadsheet import

If you import a collection from a CSV or Excel (XLSX) file, the file is uploaded to our servers for processing. It is deleted once the import session is more than 24 hours old. A record of which rows were imported is kept with your account so that you can undo an import.

Lawful basis: performance of the contract (Art. 6(1)(b)).

Account emails

We send only the emails needed to run your account: sign-in codes, the confirmation of an account deletion request, and messages about changing your email address. We do not send marketing email. If we ever offer it, it will be a separate opt-in that you can withdraw at any time.

Lawful basis: performance of the contract (Art. 6(1)(b)).

Security, logs and abuse prevention

To protect the service and your account, we process IP addresses. We use your IP address, in memory only, to limit repeated sign-in attempts; these counters are not written to disk and expire with the limit window (15 minutes by default). Our web servers keep access logs containing your IP address, the address requested and request details. Server application logs may also contain IP addresses and the email addresses we send messages to.

Lawful basis: our legitimate interest in keeping the service and users’ accounts secure and in operating the service (Art. 6(1)(f)).

Backups

We back up our database regularly so that we can restore the service after a failure. Backups contain the account and synced data described above. If we ever restore a backup, accounts deleted after that backup was taken are deleted again before the service accepts requests.

Lawful basis: our legitimate interest in the availability and integrity of the service (Art. 6(1)(f)).

Account deletion records

When we erase an account, we keep a minimal record containing only the internal account identifier and the time of erasure — not your email address — so that the erasure can be repeated if a backup is ever restored.

Lawful basis: compliance with our legal obligation to erase your data (Art. 6(1)(c), in connection with Art. 17 GDPR).

This website and the web portal

This website does not use analytics or advertising cookies. It stores only your light or dark theme choice in your browser’s local storage. The web portal uses a session cookie that is strictly necessary to keep you signed in.

Who receives your data

We do not sell your personal data and we do not use it for advertising. We use these service providers, which process personal data on our behalf as processors:

• Hetzner — hosts our servers, including the database, synced images, logs and backups, in the European Union [TO CONFIRM: datacentre location].
• Resend — delivers our emails. It receives your email address and the content of each message, such as a sign-in code. Resend is based in the United States; transfers to it are covered by [TO CONFIRM: EU–US Data Privacy Framework certification or standard contractual clauses].

Other users may see your nickname, never your email address. We may also disclose data where the law requires us to.

How long we keep data

• Account data and synced collection data: until you delete them or your account.
• Unfinished sign-ups: erased 7 days after the account was created.
• Sign-in codes: valid for 15 minutes. Sessions: up to 30 days. Both are deleted shortly after they expire.
• Account deletion requests: cancellable for 7 days, then the account is erased.
• Previous nickname: reserved for 90 days after a change.
• Previous email address: kept for 7 days after an email change, so that you can undo the change.
• Uploaded spreadsheets: deleted once the import session is more than 24 hours old.
• Web server access logs with IP addresses: 14 days. Application logs: [TO CONFIRM: retention period].
• Database backups: 30 days.
• Account deletion records (account identifier and time only): 35 days, slightly longer than backups.
• Inactive accounts (planned, not yet in effect): a warning email after 23 months without activity and erasure at 24 months.
• Emails at our email provider: [TO CONFIRM: Resend retention period].

Your rights

Under the GDPR you have the following rights:

• Access and portability: you can download a copy of your account data — profile, legal acceptances, licence summary, synced collection data and images — as a ZIP file, once every 24 hours.
• Rectification: you can correct your collection data at any time, change your nickname (once every 30 days) and change your email address. When you change your email address, we sign you out of your other devices and email your old address a link that undoes the change for 7 days.
• Erasure: you can delete your account. We sign you out everywhere and email you a confirmation. For 7 days you can cancel by signing in again; after that we permanently erase your account and the data stored on our servers, including synced collection data, images, pending imports, licences and device activations. For a Pro licence, only the related billing record is kept [TO CONFIRM: content and retention of the billing record].
• Restriction: you can ask us to restrict the processing of your data in the cases set out in Article 18 GDPR.
• Objection: you can object, on grounds relating to your particular situation, to processing based on our legitimate interests, such as security logs and backups.
• Complaint: you can lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work or where an alleged infringement took place. In Italy, this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

To exercise a right, use the account features in Numero Uno or write to [PRIVACY CONTACT EMAIL]. We reply within one month, as the GDPR requires.

Data on your own device

The data that the desktop application keeps on your computer — your local collection database, images and settings — does not reach our servers unless you sync it. We cannot see it and we cannot delete it for you, not even when you delete your account. To remove it yourself:

• Sign out in the app, so that it removes its sign-in credential from your operating system’s credential store.
• Uninstall Numero Uno.
• Delete the application data folder named moonyfringers.numero-uno.app. It is in ~/Library/Application Support on macOS, in %APPDATA% on Windows and in ~/.local/share on Linux.
• Delete any copies or backups of your collection that you saved to other folders or drives.

Children

Numero Uno accounts are not intended for anyone under 16. You must declare that you are at least 16 years old to create an account. If you believe that someone under 16 has created an account, contact us and we will delete it.

Automated decisions

We do not use your data for profiling, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Changes to this notice

This notice is versioned; the current version is shown at the top of this page. When we change it in a way that matters, we publish a new version and ask you to review and accept it in Numero Uno before you continue to use your account. We will update this notice before we launch any new feature that processes personal data.

Contact

For any question about this notice or your personal data, write to [PRIVACY CONTACT EMAIL] or to [CONTROLLER LEGAL NAME], [REGISTERED ADDRESS].