FestivosAPI is operated by DSL4 Digital, S.L.U., a company established in Spain. This page covers the disclosures required under Spanish law (LSSI-CE, GDPR/LOPDGDD) for a digital service sold from Spain.
Responsable del tratamiento: DSL4 Digital, S.L.U., NIF B93958742, con domicilio social en Calle Armiño 6, BB P2 12, Arona, S/C Tenerife, 38632. Registro Mercantil de Santa Cruz de Tenerife, Sección 8, Hoja 78183, asiento 1/2026/7004. Contacto: legal@dsl4.com.
This paragraph is published in Spanish because it is the legally required identification of the responsible party under the LSSI-CE (Ley 34/2002, de Servicios de la Sociedad de la Información y de Comercio Electrónico).
POST /v1/signup): no personal data at all. The key is a random token with nothing tying it to an identity./v1/* call increments a per-key, per-UTC-day request counter so we can enforce your tier's daily cap (see src/ratelimit.js). The unauthenticated POST /v1/signup endpoint keeps the same kind of counter keyed by IP address, to cap free-key abuse. Neither counter stores request paths, query params, or response bodies -- just a number per key or IP per day. Cloudflare, our hosting provider, separately retains its own standard HTTP access logs per its own policy (Cloudflare Privacy Policy).This site sets no cookies and runs no client-side analytics or tracking scripts -- every page is static server-rendered HTML with inline CSS and no external requests. There is nothing to consent to.
Legal basis: performance of a contract (art. 6.1.b RGPD) -- storing your checkout email and counting requests is necessary to run the paid tier and rate-limited free tier you signed up for.
Retention: a paid key's email is kept while the key is active, plus the period Spanish tax/invoicing rules require after cancellation. Rate-limit counters are scoped to a single UTC day and carry no personal data beyond the key or IP address used to bucket that day's count.
Recipients: Stripe (payment processing) and Cloudflare (hosting/infrastructure) act as data processors on our behalf. We do not sell or share your data with anyone else.
Your rights: access, rectification, erasure, objection, restriction, and portability. Exercise them at legal@dsl4.com. You can also file a complaint with the Agencia Española de Protección de Datos (aepd.es).
Subscriptions are processed by Stripe; we never see or store your card details. If you need an invoice with your NIF/CIF, add it during Stripe checkout -- tax-ID collection is enabled on both Payment Links.