Legal

Privacy Policy

Last updated: May 8, 2026

This Privacy Policy explains how PablosWeb (“we”, “us”, or “our”), operated at https://pablosweb.com, collects, uses, and protects information about you when you use this website.

1. Information We Collect

We collect the following personal information when you authenticate via Google or Facebook:

Name – your display name from your OAuth provider.
Email address – used to identify your account.
Profile picture URL – a publicly accessible image URL returned by your OAuth provider, used as your avatar.
OAuth provider identifier – a unique, opaque user ID issued by Google or Facebook to link your account without storing passwords.

We do not collect payment information, precise location, or any data beyond what is listed above.

2. How We Use Your Information

To authenticate you and maintain a secure login session.
To identify which features and pages you are permitted to access.
To display your name and avatar within the site.
To notify site administrators of new account registrations via email (where configured).

3. Cookies and Local Storage

We use the following cookies:

Session cookie – a short-lived HTTP-only, Secure, SameSite=Lax cookie that keeps you logged in during your browser session.
Remember-me cookie – a long-lived HTTP-only, Secure, SameSite=Lax cookie that lets you remain logged in across browser restarts for up to 90 days. It contains a random selector and a hashed validator; no personal data is stored in the cookie itself.

We do not use advertising cookies, tracking pixels, or third-party analytics scripts.

4. Third-Party Authentication Providers

Signing in is handled by Google (Google Identity Services) and Meta (Facebook Login). When you click “Continue with Google” or “Continue with Facebook” you are redirected to those services and subject to their respective privacy policies:

We receive only the profile data listed in Section 1. We do not receive your Google or Facebook password, and we have no ongoing access to your Google or Facebook account beyond that initial exchange.

5. Data Storage and Security

Your information is stored in a MySQL database on servers we control. We apply the following safeguards:

All connections to the site are encrypted with HTTPS/TLS.
Authentication tokens are hashed (SHA-256) before storage; raw tokens are never persisted.
Database credentials are stored in environment variables, not in source code.
Access to the site and its data is restricted to authenticated, role-permitted users.

No system is completely secure. If you believe your account has been compromised, please contact us immediately using the address below.

6. Data Retention

Your account record is kept for as long as your account exists. Remember-me tokens expire after 90 days and are deleted automatically. If you would like your account and all associated data deleted, please contact us.

7. Your Rights

Depending on your jurisdiction you may have the right to:

Request a copy of the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data.
Withdraw consent at any time (by revoking access in your Google or Facebook security settings and requesting account deletion from us).

To exercise any of these rights, use the contact details in Section 9.

8. Children’s Privacy

This site is not directed at children under the age of 13 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Contact

For any privacy-related questions or requests, please contact:

Email: website@pablosweb.com

10. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the site after a change constitutes acceptance of the updated policy.