Privacy policy

Last updated: 9 October 2026.

1. Data controller

2. What data we collect

The Site has no forms, user accounts, comments or analytics, so we don't collect personal data when you browse. We only process data in these cases:

3. Purpose of processing

To reply to messages you send us, such as comments, suggestions or crafts you want to share, and to keep the Site secure. We don't send commercial communications.

4. Legal basis

The legal basis is your consent when you write to us (Article 6(1)(a) GDPR) and, for technical server logs, the legitimate interest in the security of the Site (Article 6(1)(f)).

5. Recipients and data processors

We don't share data with third parties, except where legally required. Emails are handled through the owner's email service. If you play a video, Google Ireland Limited, which operates YouTube, may process your browsing data and store it on servers outside the European Economic Area, including the United States, relying on the European Commission's Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework.

6. Retention period

We keep emails for as long as needed to deal with your message and then, blocked, for the legal limitation periods. Technical server logs are kept for the minimum time needed for security and are deleted on a rolling basis.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to produccio@sinilos.com. If you believe the processing does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security measures

We have adopted the technical and organisational measures needed to guarantee the security of personal data and to prevent its alteration, loss, or unauthorised processing or access.

9. Children

Yababu! is made for preschool children, who enjoy it together with an adult. That is why the Site collects no data from minors: there are no forms, sign-ups, comments or analytics. If a child writes to us, we ask that they do so with the knowledge of a parent or guardian, and we will delete the data if asked.