1. What this covers#
This notice covers the personal data we handle when you sign in and subscribe on crimefile.cloud. The controller is Atiempo.me, S.L., Marbella, Spain. Contact: [email protected].
The site-wide privacy policy still applies to everything else on crimefile.cloud.
2. When you sign in with Telegram#
Signing in uses the official Telegram Login Widget. Telegram sends us a small, signed package of data and we check its signature before trusting it.
We receive: your Telegram user id, your first and last name as set in Telegram, your @username if you have one, your profile photo URL, and the time you signed in.
- ·We do NOT receive your phone number.
- ·We do NOT receive your messages, contacts, or anything else from your Telegram account.
- ·We use this only to find or create your CrimeFile account and to attach the subscription to it.
3. When you pay#
Payment is taken by Stripe Payments Europe, Ltd. You enter your card details on Stripe's own checkout page. We never receive your card number, CVC or expiry date.
Stripe tells us that a payment succeeded, and gives us identifiers for the subscription and the invoice. We store those, plus the amount, currency and date, so we can grant your Premium, show it to you, and keep proper accounting records.
Stripe acts as an independent controller for its own fraud-prevention and compliance purposes. See stripe.com/privacy.
4. The sign-in cookie#
When you sign in we set one cookie, cf_web_session. It holds your CrimeFile account id and Telegram id, signed so it cannot be altered, and it expires after 30 days. It is strictly necessary for the subscription pages to work, so it is set without a consent banner.
Signing out deletes it immediately.
5. Why we are allowed to hold it#
- ·To perform our contract with you (Art. 6(1)(b) GDPR) — sign-in, granting Premium, billing, support.
- ·To meet legal obligations (Art. 6(1)(c) GDPR) — tax and accounting records, which we keep for the period Spanish law requires.
- ·Our legitimate interest (Art. 6(1)(f) GDPR) — preventing fraud and abuse of the subscription.
6. How long we keep it#
Account and subscription data: while your account exists. Payment records: as long as tax law requires, currently up to 6 years, after which they are deleted or anonymised.
7. Your rights#
You can ask for a copy of your data, correct it, delete it, restrict or object to processing, or take it elsewhere. Write to [email protected] and we will answer within 30 days.
Deleting your account cancels any active subscription. You can also complain to your national data protection authority; in Spain that is the AEPD.