Privacy notice

Ugfy is run by its founders in Spain. The owner's full legal details (name, tax ID and address) will be published here shortly.

Contact: ugfysupport@gmail.com

• Your name, email address and whether you join as a creator or a brand.
• Your password, stored only as a one-way hash (bcrypt). Nobody can read it, not even us.
• If you use Google: your Google account ID, name, email and profile picture, as Google shares them.
• Your early-member number and whether you want the launch email (the bell).
• Technical data such as your IP address and browser, used briefly to stop bots and abuse, and kept in our host's short-lived request logs.

• To create your Ugfy account, keep it ready for launch and save your early-member discount: needed to give you the service you signed up for (GDPR art. 6.1.b).
• To send account emails, like the confirmation link: same basis (art. 6.1.b).
• To email you the day Ugfy launches: your consent, which you control with the bell and can withdraw at any time (art. 6.1.a).
• To protect the site from bots, spam and account abuse: our legitimate interest in keeping accounts safe (art. 6.1.f).

You must be at least 14 to sign up. If you're under 18, you need the permission of a parent or legal guardian, and any future payments from Ugfy will go to them, not to you.

If we learn that someone under 14 has signed up, we delete the account.

We never sell your data. These providers process it on our behalf, under contract:

• Supabase: the database, hosted in the EU (Frankfurt).
• Vercel: hosting; the site runs in the EU (Frankfurt).
• Google: sends our emails (Gmail) and, if you choose it, signs you in.
• Cloudflare: the bot check on the sign-up form (Turnstile).

Some of these companies are based in the United States. Transfers outside the EU rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

For as long as you have an account. If you delete it, your account and your discount are removed straight away.

A sign-up you never confirm is never stored as an account: its link expires after 24 hours and is then deleted.

You can access, correct, delete or export your data, restrict or object to how we use it, and withdraw consent at any time. Delete your account yourself from the account menu (top right), or write to ugfysupport@gmail.com.

If you think we've handled your data wrongly, you can complain to the Spanish Data Protection Agency (AEPD, aepd.es) or your local authority.

We don't make automated decisions about you or build profiles.

We only use cookies the site needs to work. See the cookie policy.