Last updated: 12 November 2026
This English version is provided for convenience. In case of any discrepancy, the Spanish version prevails.
1. Data controller
- Controller: Anna Ferry Mestres
- Tax ID (NIF): 47648875M
- Address: Ayrton Senna, 3, 08160 Montmeló, Barcelona, España
- Email: hello@fontarium.com
This policy applies under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
2. What data is processed
Technical browsing data
When you visit the site, the server and hosting provider may temporarily log technical data such as your IP address, date and time, the resource requested, your browser and operating system, and any errors. This is needed to deliver the pages, keep the site secure and diagnose problems.
Download counter
Each download adds one to an anonymous per-font counter, shown as a total in the site footer. Only the number of downloads is stored: no IP address or any other data that could identify you is recorded. To filter out bots, the browser identifier is checked at the time of the download but not stored.
Analytics data
Only if you accept analytics, Google Analytics processes pseudonymous identifiers, pages visited, browsing events and technical device information to produce aggregated usage statistics. IP addresses are anonymized, and Google Signals and ad personalization are disabled.
Email communications
If you write to hello@fontarium.com, your email address, your name if you give it and the content of your message will be processed only to reply and handle your request.
What is not processed
Fontarium has no user accounts, no forms that store data, and does not sell or share data for advertising. The text you type in the font tester is processed in your browser and is never sent or stored.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Delivering the site, keeping it secure and fixing errors | Legitimate interest in providing a secure, stable service (art. 6.1.f GDPR). |
| Usage statistics with Google Analytics | Consent (art. 6.1.a GDPR), which you can withdraw at any time. |
| Answering questions and requests received by email | Legitimate interest in replying and, when rights are exercised, compliance with a legal obligation (art. 6.1.c GDPR). |
4. Retention
- Technical logs: only as long as strictly necessary for security and diagnosis, according to the hosting provider's settings.
- Analytics: Analytics cookies expire after six months. User and event data in Analytics is kept for a maximum of fourteen months.
- Emails: as long as needed to handle the request and, afterwards, for the statutory limitation periods of any possible liability.
5. Recipients and international transfers
No data is shared with third parties unless legally required. The following providers process data on Fontarium's behalf as processors:
- Netlify, Inc.: hosting and delivery of the site.
- Google Ireland Limited: Google Analytics, only with consent.
- Email provider: handling of messages received.
Some of these providers may process data outside the European Economic Area. In that case, transfers rely on the safeguards provided by the GDPR, such as the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses. See the privacy policies of Netlify and Google.
6. Your rights
You can exercise the following rights at any time:
- Access: find out whether your data is processed and get a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask for your data to be deleted.
- Objection and restriction: object to processing or ask for it to be restricted.
- Portability: receive your data in a structured format.
- Withdrawal of consent: without affecting the lawfulness of earlier processing.
To exercise them, write to hello@fontarium.com stating the right you want to exercise. You may be asked to prove your identity if there is reasonable doubt. You will receive a reply within one month at most.
If you believe your rights have not been properly addressed, you can file a complaint with the Spanish Data Protection Agency (AEPD).
7. Security
The site is served over an encrypted connection (HTTPS), and appropriate technical and organizational measures are applied to protect data against unauthorized access, loss or alteration.
8. Automated decisions and minors
No automated decisions with legal effects are made and no commercial profiles are built. Fontarium is not aimed at children under 14 and does not knowingly collect their data.
9. Cookies
Details of the cookies and local storage used by the site are in the cookie policy.
10. Changes to this policy
This policy may be updated to reflect changes in the service or the law. The version in force is the one published on this page.