Privacy policy
18 August 2026
1. Data controller
- Controller: Alberto Quintin Navarro, a natural person, with no economic activity attached to this site.
- Contact: the email shown as “Contact” in the footer.
2. Summary
Neither this site nor the Luft application collects personal data on its own: there are no user accounts, forms, cookies, analytics or telemetry. The only processing is what this policy describes: the unavoidable technical logs of the servers that serve the site and the downloads, and the data you send us yourself if you write to us.
The application does not check for new versions and does not report errors: the only address it connects to on its own is the public Lichess games archive, and only when you ask it to update the reference database. If a future version adds an update check, it will be described here before that version ships.
3. What data is processed, why and on what basis
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Serving this website (hosted on Cloudflare Pages) | IP address, user agent, requested page, date and time, in server logs | Deliver the pages and protect the service against abuse and attacks | Legitimate interest (art. 6(1)(f) GDPR): security and operation of the site | As set by Cloudflare for its security logs (normally days) |
| Downloading installers and the database (hosted on GitHub) | IP address and technical request data | Deliver the files | Legitimate interest: providing the requested download | As per GitHub’s policy |
| Contact by email | Your email address, your name if given and the content of the message | Reply to your enquiry | Consent (art. 6(1)(a) GDPR) when writing to us, and legitimate interest in handling the enquiry | For the duration of the conversation and at most one year afterwards, unless legally required otherwise |
No automated decision-making or profiling takes place. Data of minors is not knowingly processed.
4. Recipients and processors
- Cloudflare, Inc. (USA), hosting and delivery network for the site, as data processor.
- GitHub, Inc. (USA), hosting of the download files.
Both companies are certified under the EU-US Data Privacy Framework and additionally apply the European Commission’s standard contractual clauses, which cover the international transfer. Beyond those providers, no data is disclosed to third parties unless legally required.
Links to the database sources or to the VirusTotal analysis of the download lead to third-party sites with their own privacy policies, which apply from the moment you visit them.
5. Cookies
This site sets no cookies or equivalent technologies and uses no analytics. The hosting provider may, only when it detects abusive traffic, use strictly technical security cookies that are exempt from consent (art. 22.2 Spanish LSSI-CE).
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent at any time, by writing to the contact email and stating the right you are exercising. If you consider that the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es) or your local supervisory authority.
7. Changes
This policy may be updated to reflect technical or legal changes; the date of the latest revision appears at the top of the page. Should the Spanish and English versions differ, the Spanish version prevails.