Privacy policy.

1. Data controller

Ezequiel Piñero Pérez
Tax ID (NIF): 32076698R
Registered address: C/Capacho 4, 11591, Jerez de la Frontera, Spain
Email: hello@strudoapp.com

2. Purpose of processing

• Waitlist: managing early access to Strudo, contacting interested parties when registration opens, and carrying out onboarding where applicable. Data collected: email address, studio name, game engine, and professional role.
• Contact form: responding to enquiries, support requests, collaboration proposals, and any other messages submitted via the contact form at strudoapp.com.
• Usage analytics: measuring traffic and user behaviour on strudoapp.com via Google Analytics (GA4) and Microsoft Clarity, in order to improve the product and user experience. GA4 measures aggregated traffic metrics (visits, session duration, page views); Clarity generates heatmaps and anonymous recordings of browsing sessions — unlike GA4, these aren't just aggregated statistics: it's a replay of the actual interactions of each session, always without data that directly identifies you.

3. Legal basis

• Waitlist: the data subject's explicit consent (Art. 6(1)(a) GDPR), given by ticking the consent checkbox on the sign-up form.
• Contact: the data subject's explicit consent (Art. 6(1)(a) GDPR), given by ticking the consent checkbox before submitting the message.
• Analytics: the data subject's explicit consent (Art. 6(1)(a) GDPR), given by accepting the cookie banner.

4. Retention period

• Waitlist data: until the data subject withdraws consent or requests erasure, or up to 24 months from the date of registration if the service does not launch.
• Contact data: 12 months from the last communication, or until the data subject requests erasure.

5. Your rights

You may exercise the following rights at any time by writing to hello@strudoapp.com:

• Access: to obtain confirmation as to whether your data is being processed and, if so, to access it.
• Rectification: to request the correction of inaccurate or incomplete data.
• Erasure: to request the deletion of your data, including when you withdraw your consent.
• Portability: to receive your data in a structured, commonly used format.
• Objection and restriction: to object to processing or to request that it be restricted in certain circumstances.

If you consider that the processing does not comply with the GDPR, you may lodge a complaint with the competent supervisory authority in your country of residence.

6. International transfers

Google Analytics (GA4) transfers browsing data to servers of Google LLC (USA). These transfers are covered by the Standard Contractual Clauses approved by the European Commission. You can review Google's privacy policy at policies.google.com/privacy.

Microsoft Clarity transfers browsing data to servers of Microsoft Corporation (USA). These transfers are covered by the Standard Contractual Clauses approved by the European Commission. You can review Microsoft's privacy statement at microsoft.com/privacy/privacystatement.

Other than the above, no data transfers are made to third countries or international organisations.