Last updated: November 2026

SideQ (sideq.life) is run by a family living in Barcelona, Spain. You can reach us at contact@sideq.life and request our physical address if legally needed. We are the controller of the personal data described in this policy.

Account and comments: if you create an account or leave a comment, your name, email address and what you write.

Free downloads: when you request a free resource such as the Barcelona Trip Checklist, your email address, optionally your first name, the date of your request and how many times your download link was used.

Newsletter: if you tick the newsletter box, we also record when and where you agreed, the exact wording you saw, and when you confirmed.

Email delivery status: whether our emails were delivered, bounced or marked as spam, so that we stop writing to addresses that do not work or that asked us to stop.

Messages to us: anything you send to our contact address.

Website usage: only if you accept analytics cookies (see section 8).

We do not store your IP address or browser details with your download or newsletter record, and we do not track whether you open or click our emails.

Sending you the file you asked for (one email with your download link). Basis: it is needed to give you what you requested, and our legitimate interest in running the service. Requesting a download does not subscribe you to anything.

Sending you the newsletter. Basis: your consent. The box is never ticked for you. After you tick it we send a confirmation email, and we only start sending the newsletter once you click the confirmation link. You can withdraw your consent at any time.

Technical and service emails such as the confirmation email or an expired-link notice. Basis: our legitimate interest in running the service.

Accounts and comments. Basis: to provide the service you asked for.

Protecting the service against abuse and keeping our email sender reputation healthy. Basis: our legitimate interest.

We do not sell your data. We use these providers to run the site; they process data on our behalf:

Amazon Web Services (SES for email delivery, S3 for file storage, SNS and SQS for delivery notifications), in the Paris region.

Fly.io for hosting the website and database, in Paris.

Migadu for our contact mailbox and account emails.

Google Analytics, only if you accept analytics cookies.

Where a provider is based outside the European Economic Area or may access data from there, the transfer relies on the European Commission's standard contractual clauses or an adequacy decision. We may also disclose data when the law requires it.

Download-only contacts (people who requested a file but did not subscribe): deleted 12 months after their last request. They never receive newsletters.

Download links stop working 30 days after they are issued.

Newsletter subscribers: for as long as you stay subscribed. After you unsubscribe we remove your name and preferences within 30 days and keep your email address and the unsubscribe date for up to 24 months as proof that you withdrew, then we delete it.

Delivery records: 90 days. Raw email delivery notifications: 30 days.

Do-not-email list: if an address bounces permanently or you mark our email as spam, we keep only a one-way scrambled code (a hash) of the address, never the address itself, so that we never write to it again by mistake. We keep this for as long as needed for that purpose.

Accounts and comments: until you ask us to delete them.

Every newsletter email contains an unsubscribe link, and most email apps also show an Unsubscribe button. Unsubscribing takes effect immediately.

You have the right to access your data, correct it, have it deleted, restrict or object to its use, receive a copy in a portable format, and withdraw consent at any time without affecting what happened before. To use any of these rights, reply to any email from us or write to contact@sideq.life. We aim to answer within one month. If you are not satisfied, you can complain to the Spanish data protection authority (Agencia Española de Protección de Datos, aepd.es) or to the authority in your country.

Downloads are stored privately and handed out through short-lived links. Links in our emails use random tokens that we store only in scrambled form. Access to our administration area is restricted. No system is perfectly secure, but we take reasonable measures to protect your data.

We use cookies for the site to work and, with your consent, to measure traffic with Google Analytics. Pages reached from our email links (confirm, download, unsubscribe) do not load analytics. See our Cookie Policy for details.

Our service is not intended for children under 14. We do not knowingly collect personal data from them. If you believe a child has given us data, write to us and we will delete it.

We may update this policy. The date at the top shows the latest version. If we make a significant change to how we use your data, we will tell you in a newsletter or on this page.

Questions about this policy or your data: contact@sideq.life.