Privacy Policy

Last updated: October 14, 2026

This policy explains how personal data is handled on vedratic.com and on the apps published under it: globdrop.vedratic.com, andamio.vedratic.com (formerly project-manager.vedratic.com), ahorreo.vedratic.com, chronotopia.vedratic.com and footlley.vedratic.com. The short version: the apps keep your data on your device, and the only personal data processed is what the website needs to be delivered, the analytics and advertising you accept in the cookie banner, and the emails you choose to send us.

1. Who is responsible

Vedratic is a small software lab by the team behind Momusa. The website and the apps are operated by the person named above, who is the data controller. There is no data protection officer; write to the address above for anything related to your data.

2. What we process, why, and on what legal basis

2.1 Delivering the website

The website and the apps are static files served by Cloudflare. To deliver each page, Cloudflare necessarily processes connection data: your IP address, the page requested, your browser's user agent and the time of the request. It also uses that data to protect the site against abuse. We do not run our own servers and do not keep access logs.

The web fonts of vedratic.com are served from the site itself. Globdrop and Chronotopia still load their fonts from Google Fonts, so while you use them, your browser also connects to Google's servers, which see your IP address. The historical photos in Chronotopia are loaded from Wikimedia Commons when you open them, so the Wikimedia Foundation's servers see your IP address too.

Legal basis: our legitimate interest in publishing the website and keeping it secure (Art. 6(1)(f) GDPR).

2.2 Your cookie choices

We use Google's consent tool (Privacy & messaging, a consent management platform certified under the IAB Transparency & Consent Framework) to ask for your consent and to remember your answer. It stores your choice in a cookie on your device, which is what lets us show that the consent was given.

Legal basis: compliance with a legal obligation to obtain and demonstrate consent (Art. 6(1)(c) GDPR and Art. 22.2 of Spain's LSSI).

2.3 Analytics (Google Analytics 4)

If you accept statistics cookies, Google Analytics 4 measures which pages are visited, how people arrive and roughly where they are (country or region), using cookies and a random identifier. We use it to know which articles and tools are useful. In Globdrop, Chronotopia and Footlley Smash it also records what you do in the app in general terms (for example, the game mode, the map or place you open and your score), without any personal data. We do not send Google your name, email or anything you store in Andamio or Ahorreo, which have no analytics at all.

Google Analytics is loaded through Google Tag Manager with Google Consent Mode. vedratic.com, Globdrop, Chronotopia and Footlley Smash each have their own Analytics property. If you decline, no analytics cookies are set; Google may still receive cookieless signals (for example, that a page was viewed) without any identifier, which it uses to estimate aggregate traffic.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time from the cookie settings.

2.4 Advertising (Google AdSense)

The blog, the tool pages, the Globdrop guides and the Globdrop game itself show ads served by Google AdSense. The other project pages, Andamio and Ahorreo show no ads. Chronotopia shows no ads from any ad network; inside the app there are links to Momusa and Sindria, the companies behind Vedratic, and an "advertise here" card that links to Momusa's contact page.

• If you accept advertising cookies, Google and its partners can use cookies and similar identifiers to show ads based on your interests and to measure them. This involves profiling by Google.
• If you decline, Google can still show non-personalised ads, chosen from the content of the page and your approximate location, without advertising cookies.

Your choice is passed to Google through the IAB Transparency & Consent Framework and Google Consent Mode.

Legal basis: your consent for personalised ads and for storing or reading advertising cookies (Art. 6(1)(a) GDPR); our legitimate interest in funding the free content with non-personalised ads (Art. 6(1)(f) GDPR). You can also manage Google's ad personalisation at adssettings.google.com, and read how Google uses data on partner sites at policies.google.com.

2.5 When you contact us

There is no newsletter. If you use the contact form or write to support@momusa.tech, we receive your email address, your name if you include it, and whatever you tell us, and use them only to answer you. The form is delivered by FormSubmit (formsubmit.co), which receives the message to forward it to our mailbox; if you'd rather it didn't pass through a third party, write to the address instead.

Legal basis: taking the steps you ask for and our legitimate interest in answering messages (Art. 6(1)(b) and (f) GDPR).

3. The apps and tools

• Globdrop stores your language, theme and last-used tab in your browser's local storage. Scores are not sent to us and there are no accounts or rankings. The game uses the same cookie banner (Google's consent tool) and AdSense ads described above, with its own Analytics property. If you use the share buttons, your result is handed to WhatsApp, Facebook or Instagram, which process it under their own policies.
• Andamio stores your projects in your browser's local storage. It sends nothing to us or to anyone else, and has no analytics or ads.
• Ahorreo reads your bank statements and stores everything in your browser (IndexedDB) or in files you save yourself. It has no analytics or ads and sends no data anywhere. The only exception is optional and off by default: if you click to fetch Euribor or exchange-rate tables, your browser downloads them from the European Central Bank, which sees your IP address like any website you visit. Nothing about you or your finances is included in that request.
• Chronotopia has no ad network. If you accept statistics cookies in its own banner, it uses Google Analytics as described in 2.3; if you decline, no analytics cookies are set. It keeps two values in your browser's local storage, promo:last and promo:count: when it last showed its short note about Momusa or Sindria, and how many it has shown, so that the note appears at most once a day and alternates between the two. The links to Momusa, Sindria and the "advertise here" card are plain links: nothing is requested from those sites until you click one. Besides its own files, it loads its fonts from Google Fonts and the historical photos from Wikimedia Commons, as described in 2.1.
• Footlley Smash runs in your browser and does not send your games to us. It uses Google's consent tool and, if you accept statistics cookies, Google Analytics as described in 2.3. It does not show ads yet; if it does in the future, they will be the AdSense ads described in 2.4. In online matches, the game first uses a matchmaking server (by default the public PeerJS server, 0.peerjs.com) to find your opponent, and that server sees your IP address; then your browser connects directly to your opponent's (peer to peer), so each side sees the other's IP address. Nothing about the match is stored.
• The tools (buffer calculator, map distortion calculator) calculate everything in your browser. What you type is not sent anywhere. Their pages carry the analytics and ads described above.

Because data kept in your browser never reaches us, we cannot see, recover or delete it for you: clearing your browser's site data removes it.

4. Who receives the data

• Cloudflare, Inc. — hosting and content delivery.
• Google Ireland Ltd. and Google LLC — Tag Manager, Analytics 4, AdSense, the consent tool and, in Globdrop and Chronotopia, Google Fonts. For personalised advertising, Google and the ad partners registered in the IAB framework act as independent controllers.
• Wikimedia Foundation, Inc. — serves the Wikimedia Commons photos shown in Chronotopia.
• FormSubmit — delivers the messages sent through the contact form to our mailbox.
• Our email provider — stores the mailbox that receives your messages.

We do not sell personal data and do not share it with anyone else, unless required by law.

5. International transfers

Google LLC, Cloudflare, Inc. and the Wikimedia Foundation are based in the United States. Transfers to Google and Cloudflare rely on their certification under the EU–US Data Privacy Framework and, where applicable, on the European Commission's standard contractual clauses.

6. How long data is kept

• Connection data (Cloudflare): only as long as Cloudflare needs it to deliver and protect the site, under its own retention policy. We do not keep it.
• Your cookie choice: up to 13 months, after which the banner asks again.
• Google Analytics 4: event and user data are kept for 2 months, the property's retention setting; aggregated reports are kept longer but do not identify you.
• Advertising cookies: set and controlled by Google; the longest last up to 13 months.
• Emails and contact form messages: while we deal with your message, and deleted within 12 months of the last exchange unless they are needed to handle a legal claim.
• App data: on your device, until you delete it.

7. Your rights

You have the right to access your personal data, to rectify it, to have it erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting what was done before. To exercise them, use the contact form. We may ask you to confirm your identity.

If you think your data has not been handled properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es) or to the authority of your country in the EU.

To change or withdraw your cookie consent, use the button on the cookie policy page.

8. Children

The website and the apps are not directed at children under 14, the age of digital consent in Spain. We do not knowingly process personal data of children under 14. A child under 14 should use them only with the permission of a parent or legal guardian, who should make the cookie choices on the child's behalf. If you believe a child has sent us personal data, write to us and we will delete it.

9. Changes to this policy

If the way we handle data changes, we will update this page and the date at the top. If the change is significant, we will say so on the website.

See also the cookie policy, the terms of service and the legal notice.