Privacy policy

What data is processed and what is not: no sign-up, no forms, no analytics of our own. What the host measures, and how to exercise your rights.

Version 1.0 In force since 1 September 2026 Clipper Hub

This is a translation. Clipper Hub is operated from Spain and its legal texts are written in Spanish. If this English version and the Spanish original ever disagree, the Spanish one prevails.

The honest summary: this site does not ask you for data, does not register you, has no analytics of its own and sets no cookies, neither its own nor anyone else's. If you never write an email, the site owner never learns who you are. The only thing that happens is what happens when you request any page on the internet: the server that serves it (Cloudflare (Cloudflare, Inc., United States)) receives your IP address, which page you asked for and which browser you used, and uses that to deliver it and for aggregate counts. Section 3 sets it out and the cookie policy confirms it.

1Data controller

Controller: Fernando Morales
Tax ID (NIF): 53.044.286-F
Address: El Boalo, Madrid (Spain)
Contact: bbreaksvault@gmail.com

Given the volume and the nature of the processing —no special categories of data, no systematic monitoring of individuals, no large-scale processing— there is no obligation to appoint a data protection officer. Privacy matters are handled at the contact address above.

2What this site does not do

It sets no cookies of its own and stores nothing in your browser on its own account. The ones that exist are set by the host: they are all browser, and neither does the host: it is checked, and explained in the cookie policy.
It has no analytics of its own: no Google Analytics, no social network pixels, no heat maps. The owner has installed no measurement tool, and there is none injected by anyone else.
It loads no third-party fonts, icons or images. All of that is served from this very site. Your browser contacts no domain other than this one when it opens these pages.
There is no sign-up, no accounts, no forms and no newsletter. There is no field anywhere to type a personal detail into.
No profiling and no automated decision-making about people.
No personal data is sold, rented or handed over to anyone, for advertising or for anything else.

3What data is processed, why, and on what legal basis

Data	When	Why	Legal basis (GDPR)
Server logs: IP address, date and time, page requested, response code, browser and operating system	On every visit, automatically	Serving the page, keeping the service secure, detecting abuse and faults, and producing aggregate technical counts (never individual ones)	Legitimate interest in the operation and security of the site (art. 6(1)(f))
Your email address and the content of your message	Only if you write to the contact address	Reading and answering your query, complaint, takedown request or exercise of rights	Legitimate interest in replying to whoever gets in touch and, where applicable, compliance with a legal obligation (arts. 6(1)(f) and 6(1)(c))

The owner collects nothing else. There is no visitor identifier, neither the owner's nor a third party's: nothing tells your second visit apart from your first.

4Who it is disclosed to

There are no transfers of data to third parties, other than any legal obligations that might arise towards courts, law enforcement or public authorities.

Processors are involved, that is, providers who process data on the controller's behalf and under contract:

Hosting provider (Cloudflare (Cloudflare, Inc., United States)), which hosts the site and generates the technical logs described above.
Email provider, if you get in touch that way.

Until September 2026 the site was hosted on whop.site, and the host injected its own measurement pixel into every page, with cookies this site could not make conditional on anything. That pixel is gone: the move to an own domain was made precisely to remove it. It is written down here because anyone who read the previous version of this policy deserves to know what changed.

Where any of those providers is established outside the European Economic Area, the international transfer relies on an adequacy decision of the European Commission —such as the EU-US Data Privacy Framework for certified US providers— or, failing that, on the standard contractual clauses approved by the Commission, with any additional safeguards required.

5When you click a link and leave

Links to campaigns, platforms, regulations and advertised products lead to third-party sites. From the moment you click, it is that site processing your data, under its own privacy policy and its own cookies. Clipper Hub neither controls that processing nor receives personal information about you through it.

In the specific case of affiliate links, the destination platform may record that the visit came from this site in order to attribute a possible commission. What the owner gets to see of that is aggregate statistics —number of clicks, sign-ups and commissions— never the identity of whoever clicked or what they did next.

6Campaign data (and why there are no people in it)

The site's database holds information about campaigns: brand or operator, rate, budget, number of participants, deadlines and conditions. That is company data and aggregate figures, not personal data.

Clippers' names and their individual earnings are not stored. Although some campaign pages publish a leaderboard of top earners, that list is deliberately discarded at the reading stage and never reaches the database.

If a campaign's name coincides with a person's —artists, creators or personal brands— that is treated as public professional information, on the basis of the legitimate interest in reporting on a commercial offer open to the public. Anyone can object by writing to bbreaksvault@gmail.com, and their campaign will be removed from the site.

7How long it is kept

Server logs: whatever retention period the hosting provider applies, which is short and aimed at security and diagnostics.
Emails: for as long as the exchange with the sender lasts and, after that, for as long as needed to handle any legal liability arising from that communication. Then they are deleted.

8Your rights

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw a consent where you have given one. Just write to bbreaksvault@gmail.com stating which right you are exercising; some reasonable identity check may be requested, but only if there is well-founded doubt about who is writing.

Requests are resolved within a maximum of one month, extendable to two if complex, and exercising these rights is free of charge.

If you believe your data has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid), or with the supervisory authority of your country of residence. A prior attempt to sort it out by writing to the contact address is appreciated, though not required.

9Minors

The site is aimed at people over 18 and does not knowingly collect data from minors. If any were detected, it would be deleted immediately.

10Security

Technical and organisational measures reasonable and proportionate to the risk are applied: the site is static, exposes no databases to the internet and stores no credentials or user data, because it asks for none. In its public deployment it is served over an encrypted connection (HTTPS). No system is infallible; if a breach occurred with a risk to anyone's rights, it would be notified in accordance with articles 33 and 34 of the GDPR.

11Changes to this policy

This policy may be updated if the service or the law changes. The version in force is the one published here, with its version number and date. If the owner introduced a new purpose of their own accord, it would be announced on the site and consent would be requested before applying it.

Last updated: 1 September 2026.