1. Data controller
Sfera Civitas — an independent, non-partisan initiative. Contact: hola@sferacivitas.org · sferacivitas.org.
2. What data we process
- Data you store on your device: your interactions with the prototype (deliberations, proposals, simulated votes, preferences and language) are stored locally in your browser/app (local storage). They are not sent to any Sfera server.
- Usage analytics (web): we use Google Analytics 4 to understand usage in aggregate (page views, device, approximate country). It is only enabled if you consent in the cookie notice; you can decline and the site works the same.
- Messages you send us: if you email hola@sferacivitas.org, we process that email's data to reply.
- We do not collect sensitive data or precise location, and we do not sell data to third parties. The mobile app does not require sign-up at this stage.
3. Purpose and legal basis (GDPR)
- Providing the prototype service — basis: use/performance of the service and interest in trialling the tool.
- Aggregate analytics to improve the tool — basis: your consent.
- Replying to your messages — basis: your consent / legitimate interest.
4. Retention
Local data remains on your device until you clear the app's storage or uninstall it. Analytics data is retained per the Google Analytics configuration. Emails are kept for as long as needed to handle your request.
5. Third parties and transfers
Tools that may be involved: Google Analytics (analytics, consent only) and the hosting serving the site. These providers may process data outside the EEA under the safeguards required by the GDPR. We do not share your data with third parties for commercial purposes.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time, by writing to hola@sferacivitas.org. You may also lodge a complaint with your supervisory authority (in Spain, the AEPD).
7. Children
Sfera Civitas is not directed to minors and does not knowingly collect their data.
8. Security
We apply reasonable measures to protect information. When we enable real identity and voting, the system will be designed with verified identity decoupled from the vote and end-to-end encrypted, anonymous and verifiable voting (the system will know that you vote, not what you vote).
9. Changes to this policy
We will post any changes on this page with the updated date. Significant changes (e.g., enabling real identity/voting) will be communicated prominently.