Privacy Policy

1. Data Controller

The controller of the personal data collected through mindofspades.com is Jorge Galdeano León, contact email: info@mindofspades.com.

2. Data Processed

• User Data: Name, email, country, and any information provided during registration or profile setup.
• Payment Data: Billing information, transaction history, and payment status (handled securely via Stripe).
• Usage Data: Browsing history within the platform, progress in courses, and technical logs (IP addresses).

3. Purposes of Processing

• To manage your registration and provide access to purchased courses and subscriptions.
• To process payments and issue corresponding invoices.
• To send operational notifications about your subscription or technical updates.
• To send marketing communications about new magic courses, if the user has expressly consented.
• To ensure the security of the platform and prevent fraudulent access.

4. Legal Basis

• Execution of the contract: Necessary to provide the courses and services you purchase.
• Consent: For marketing purposes and the use of certain non-essential cookies.
• Legal obligation: For tax and accounting purposes related to sales.
• Legitimate interest: To protect the platform against fraud and piracy of content.

5. Data Disclosure and Recipients

Your data is not sold to third parties. However, it is shared with essential service providers: Supabase (data storage), Stripe (payment gateway), and potentially email marketing services (e.g., Resend or Mailchimp) for communication.

These providers act as data processors and are chosen for their compliance with security standards.

6. International Transfers

Some providers (like Stripe or Supabase) may process data outside the European Economic Area. In such cases, we ensure that appropriate legal mechanisms, such as Standard Contractual Clauses, are in place.

7. Data Retention

• Account data: Retained as long as the user maintains an active account.
• Transaction data: Retained for the periods required by tax law (usually 5-10 years).
• Marketing data: Retained until the user withdraws consent.

8. User Rights

You have the right to access, rectify, delete, oppose, limit processing, and request data portability. You can exercise these rights by emailing info@mindofspades.com. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD).

9. Security

We implement technical and organizational measures to protect your data. Since we sell digital content, we specifically record IP addresses during purchases to prevent account sharing and unauthorized distribution of our copyrighted videos.

10. Google Account Integration and Google User Data

Mind of Spades allows you to register and sign in using your Google account via OAuth 2.0. When you choose this option, we request access to specific data from your Google account solely to create and manage your user profile on this platform.

• Data Accessed — We access the following Google user data: (1) Email address: used as your primary account identifier and to send transactional notifications related to your account or subscription. (2) Full name: used to personalise your dashboard and user experience. (3) Profile picture: displayed in your account profile area within the platform.
• Data Usage — The Google user data we access is used exclusively to: create your Mind of Spades account, authenticate your identity on subsequent visits, personalise your dashboard with your name and photo, and send account-related operational communications (e.g. purchase confirmations, subscription updates). We do not use Google user data for advertising, profiling, or any purpose beyond providing the service you have requested.
• Data Sharing — We do not sell, rent, or share your Google user data with third parties for advertising, marketing, or any other purpose unrelated to providing our service. Your account data (including the information obtained from Google) may be processed by Supabase, our database infrastructure provider, acting as a data processor under a Data Processing Agreement. No other third party receives your Google user data.
• Data Storage & Protection — Google user data is stored in our secure database hosted by Supabase (EU region). We apply industry-standard security measures including encrypted data transmission (TLS/SSL), strict role-based access controls, and regular security reviews to safeguard your information.
• Data Retention & Deletion — Google user data is retained for as long as your account remains active on Mind of Spades. You may request the complete deletion of your account and all associated Google user data at any time by emailing info@mindofspades.com. Upon a verified deletion request, we will permanently remove your data within 30 days, except where retention is required by applicable law (e.g. tax records).