Wildscript

Privacy policy

Last updated: 27 October 2026 · Version 2026-10

Courtesy translation; in case of doubt the Spanish version prevails.

1. Controller

The controller of your data is Wildscript (hola@wildscript.org). Write to that address for any privacy matter.

2. What data we process, why and on what basis

  • Account: name (optional), email, password (stored encrypted), preferred language, and the version of these documents you accepted, with its date. Used to manage your account. Basis: providing you the service.
  • Library: the books you save. Basis: providing you the service.
  • Reading recommender and assistant: what you enter (ages or age range, interests, reading level, free text, messages) and the recommendations you receive. Basis: providing the service you ask for.
  • Downloadable gift: email, name (optional), language and, as proof of your consent, the IP address and date. Basis: your consent.
  • Wildscript Academy waiting list: email, name (optional), language and the date of your consent. Basis: your consent.
  • Contact form: name, email, subject and message, which reach us by email. Basis: handling your request.
  • Technical data: IP address (to limit abuse), server logs and errors. Basis: our legitimate interest in the security and proper operation of the site.
  • Statistics: we measure visits with Plausible, without cookies and without personal data.

3. Cookies

We only use necessary cookies: the session cookie if you sign in, the one that remembers your language and the one that lets you download your gift (24 hours). We do not use advertising or tracking cookies.

4. Who else processes your data

To run the site we use these providers, which process data on our behalf:

  • Supabase: database, accounts and files. Servers in the European Union (Ireland).
  • Vercel: website hosting.
  • Resend: sending emails (confirmations and gift).
  • Sentry: technical error logging.
  • Google: sign-in with Google, if you choose it.
  • Anthropic and Google (Gemini): artificial intelligence of the assistant and the recommender (see section 5).
  • Cloudflare (Turnstile): anti-bot check on forms.
  • Plausible: visit statistics without cookies.
  • YouTube (Google): we load video thumbnails and link to our channel; when you open a video you go to YouTube and its conditions apply.

Links to Amazon and other stores take you to their websites, which have their own policies. Some of these providers may process data outside the European Economic Area; in that case they rely on the safeguards provided by the GDPR, such as standard contractual clauses.

5. Artificial intelligence

  • Reading recommender (Google Gemini): age ranges, interests, reading level, your preference, the language and the book catalogue are sent. Your name and email are not sent.
  • Personalised consultation (Anthropic): the child's age range (not the exact age), favourite animals, reading level, language and the free text you write are sent. The child's name is not sent: it is only used on your screen to personalise the greeting. In this consultation we do not store the name or the free text.
  • Assistant chat (Anthropic), if you use it: your messages and that conversation's history are sent, and we store them in your account.
  • Do not write names or details that identify a minor in free-text fields.

Recommendations are generated automatically and are only a guide.

6. How long we keep data

  • Account, library, conversations and usage records: while you have an account; they are deleted when you delete it.
  • Conversations you delete: permanently removed after 30 days.
  • Gift list: until you unsubscribe. We keep the email with the unsubscribe mark so as not to write to you again; you can ask us to delete it completely.
  • Academy waiting list: until you ask or until we decide not to continue with the project; then we delete it.
  • Contact messages: as long as needed to deal with your request.
  • IP addresses for usage limits: 24 hours.
  • Backups: 30 days.
  • Error and server logs: the limited period set by Sentry and Vercel.

7. Your rights

You can ask us for access, rectification, erasure, objection, restriction of processing and portability of your data, and withdraw a consent at any time. Write to hola@wildscript.org. If you think we have not handled your data properly, you can complain to the data protection authority in your country.

8. How to delete your account

Go to My account → Danger zone → Delete account. Your account, library, conversations and usage records are deleted immediately (from backups, within a maximum of 30 days). Your subscription to the gift or the waiting list is separate: use the unsubscribe link in the emails or write to us.

9. Minors

Wildscript is aimed at adults and accounts are for adults only. A child's data (age range, interests) is entered by an adult to receive a recommendation; we do not ask for their surname or email.