Privacy

In short

What you type in the review does not leave your device. Your final settlement is calculated entirely in your browser and is not stored. To know whether the tool is useful and at which step people get stuck, which steps you use is measured without identifying you. Only codes and bands are sent, never an amount or a date. There are no cookies and no advertising.

The rental review works the same way: what you type is calculated in your browser and is not stored.

The employment contract review works the same way: what you type is calculated in your browser and is not stored.

The domestic worker review works the same way: what you type is calculated in your browser and is not stored. It does not ask for your name, DNI, address, nationality, immigration status, health or pregnancy.

The review of the APR (TAE) and deadlines of your credit works the same way: what you type is calculated in your browser and is not stored. Its questions do not ask for your name, DNI, account number or the name of the lender.

The review of your insurance dates works the same way: what you type is calculated in your browser and is not stored. Its questions do not ask for your name, DNI, policy number or the name of your insurer.

The review of your mortgage works the same way: what you type is calculated in your browser and is not stored. Its questions do not ask for your name, DNI, address or the name of your bank.

The reviews of your bills work the same way: what you type is calculated in your browser and is not stored. Their questions do not ask for your name, your DNI, your supply point code (CUPS), your account number or the name of your electricity supplier or your operator; about the supply, only the postcode, to know whether the review covers your area.

If you decide to upload a document to fill in the details, it is read with AI in the European Union with your consent and is not stored. If you buy the report pass, the payment is handled by Stripe.

What is stored and where

What you type in the review

Only in your browser, while the page is open. The calculation is done on your device: your dates, your pay, the figures in your final settlement, your dependent children and your other contracts are not sent to any server or stored. When you close or reload the page, they disappear.

What you type in the rental review

Only in your browser, while the page is open. The dates of your tenancy agreement, your rent and rent increases, the deposit (fianza), the expenses and what was returned to you are calculated on your device and are not sent to any server or stored. When you close or reload the page, they disappear.

What you type in the contract review

Only in your browser, while the page is open. The dates of your contract, your pay, your working hours, your payslips, your previous contracts, the job offer and your answers are calculated on your device and are not sent to any server or stored. Your answer on whether you have a recognised disability, which is only asked for a professional traineeship contract (contrato de práctica profesional), does not leave your browser either. When you close or reload the page, everything disappears.

What you type in the domestic worker review

Only in your browser, while the page is open. Your dates, your pay, your working hours, your holidays and your answers on how the relationship ended are calculated on your device and are not sent to any server or stored. When you close or reload the page, they disappear.

What you type in the review of your credit

Only in your browser, while the page is open. The amounts, interest rates, instalments, charges and dates of your credit are calculated on your device and are not sent to any server or stored. When you close or reload the page, they disappear.

What you type in the review of your insurance

Only in your browser, while the page is open. The dates of your policy and of the renewal notice, and its premiums, are calculated on your device and are not sent to any server or stored. When you close or reload the page, they disappear.

What you type in the review of your mortgage

Only in your browser, while the page is open. The date of the deed, its clauses, the amounts of your invoices and of your repayments and their dates are calculated on your device and are not sent to any server or stored. When you close or reload the page, they disappear.

What you type in the reviews of your bills

Only in your browser, while the page is open. The postcode, the dates, the contracted power, the consumption and the amounts of your electricity bill, and the dates and amounts of your minimum-term commitment (permanencia) and your cancellation, are calculated on your device and are not sent to any server or stored. When you close or reload the page, they disappear.

Your year of electricity bills

If you review several electricity bills, each one with its answers stays in the tab's memory so they can be added up as “your year”. It is not written to your device and does not leave it, except during payment, as explained below; when you close or reload the tab, it disappears.

What is measured about your visit

Short events with codes and bands, which are sent to PostHog while you use the page (the detail, below). The identifier of the page view lives only in its memory: it is not written to your device and is lost when you close or reload it.

The documents you upload

Only if you choose to upload your documents (the dismissal letter, the final settlement, your payslips, the employer certificate (certificado de empresa), a conciliation agreement or record, or your employment history (vida laboral)) and give your consent. PDFs are turned into images of their pages in your browser, without leaving it, and before sending anything the page checks, also in your browser, whether any photo looks dark, blurry or small. Those images and the photos travel encrypted to an eslojusto.es server at Amazon Web Services, in Spain (region eu-south-2), which passes them to an AI model (Claude, by Anthropic) through Amazon Bedrock, within the European Union. The model indicates what type of document each page is, copies the details the form asks for, and what was read goes back to your browser. Nothing is stored: the documents only exist in the server's memory while they are read, and its logs, which are kept for 14 days, contain only technical data: the result, the number of pages, how long it took, how much text the model processed and some operational flags, such as whether a second reading was needed, how many details did not match between documents (without saying which ones or their values) or how many pages could not be read and why (for example, blurry or from another country). Never the content or anything that identifies you.

The rental documents you upload

Only if you choose to upload them and give your consent: the tenancy agreement, the rent increase notices, the receipts, the agency's invoice or the return of the deposit. They follow the same path as the other documents, through the same server in Spain and the same model in the European Union, and they are not stored either. A tenancy agreement contains personal data about you and about other people: the names and DNI numbers of the parties and of any guarantor, the address of the property, bank accounts or signatures. The model is instructed not to copy people's names, DNI or NIE numbers, accounts, phone numbers, email addresses or signatures, and to copy the landlord's name only if the landlord is a company. In addition, the server discards any copied text that still contains a DNI, an account, an email address or a phone number, and the name of a landlord that is not a company.

The details in the rental letters

What you add to the letters (your name, your DNI or NIE, your landlord's name, the address of the property, the town and the IBAN account to which you ask for the deposit to be returned) only fills in the letter in your browser. The letters and the account do not leave your device and are not stored.

The contract documents you upload

Only if you choose to upload them and give your consent: the contract with its annexes, your payslips, the job offer or your employment history (vida laboral). They follow the same path as the other documents, through the same server in Spain and the same model in the European Union, and they are not stored either. A contract may contain your DNI, your address and sometimes a disability; a payslip, a trade union subscription. The model is instructed not to copy people's names, DNI or NIE numbers, Seguridad Social numbers, addresses, accounts, phone numbers, email addresses or signatures, or anything about disability, health, sick leave or trade union membership, and to copy the employer's name only if it is a company. In addition, the server discards any copied text that still contains a DNI, an NIE, a Seguridad Social number, an account, an email address or a phone number, or that mentions health, sick leave, disability, trade unions or wage garnishments.

The details in the contract letters

What you add to the letters (your name, your DNI or NIE, the employer, the workplace and the town) only fills in the letter in your browser. The letters do not leave your device and are not stored.

The credit documents you upload

Only if you choose to upload them and give your consent: the agreement, the pre-contract information, the repayment schedule, the statement for an early repayment or the card statements. They follow the same path as the other documents, through the same server in Spain and the same model in the European Union, and they are not stored either. A credit agreement contains your name, your DNI, your address and accounts or cards and, if there is linked insurance, sometimes health data. The model is instructed not to copy people's names, DNI or NIE numbers, addresses, phone numbers, email addresses, accounts, card numbers or signatures, or anything about health; it does copy the name of the lender.

The details in the credit letters

What you add to the letters (your name, your DNI or NIE, the lender, the agreement number and the town) only fills in the letter in your browser. The letters do not leave your device and are not stored.

The insurance documents you upload

Only if you choose to upload them and give your consent: the specific conditions (condiciones particulares) of your policy or its receipt, and the renewal or change notice. They follow the same path as the other documents, through the same server in Spain and the same model in the European Union, and they are not stored either. A policy contains data about you and about other people: names, DNI numbers, the insured address, the number plate, bank accounts and sometimes health or claims data. The model is instructed not to copy people's names, DNI or NIE numbers, addresses, phone numbers, email addresses, accounts, policy numbers, number plates or signatures, or anything about health or claims; it does copy the name of the insurer.

The details in the insurance letter

What you add to the letter saying you are not renewing (your name, your DNI or NIE, the insurer, the policy number and the town) only fills in the letter in your browser. The letter does not leave your device and is not stored.

The mortgage documents you upload

Only if you choose to upload them and give your consent: the pages of your deed and, if you have them, the notary, land registry, gestoría (administrative agency) and valuation invoices, tax form modelo 600, the FEIN or the statement for a repayment. They follow the same path as the other documents, through the same server in Spain and the same model in the European Union, and they are not stored either. A deed contains your name, your DNI, your address and the guarantors' details and, if there is linked life insurance, sometimes health data. The model is instructed not to copy people's names, DNI or NIE numbers, addresses, phone numbers, email addresses, accounts or signatures, or anything about health, not even within the text of a clause; it does copy the name of the bank.

The details in the mortgage letters

What you add to the letters (your name, your DNI or NIE, the bank, the loan number and the town) only fills in the letter in your browser. The letters do not leave your device and are not stored.

The electricity, mobile or internet bills and contracts you upload

Only if you choose to upload them and give your consent: your electricity bills, their contract or a price change notice, or the contract and bills for your mobile or internet. They follow the same path as the other documents, through the same server in Spain and the same model in the European Union, and they are not stored either. An electricity bill contains your name, your address, your supply point code (CUPS) and part of your account number (IBAN); a mobile or internet bill also contains your phone numbers. The model is instructed not to copy people's names, DNI or NIE numbers, addresses, phone numbers, email addresses, accounts, card, customer or contract numbers, IMEI numbers or signatures: neither the IBAN nor your name is copied. From the address it copies only the postcode, and it does copy the name of the electricity supplier or the operator. The model reads the CUPS, but the server turns it into a fingerprint, a short code that only serves to recognise the same bill uploaded twice, and only that fingerprint goes back to your browser: the CUPS does not leave the server.

The details in the letters about your bills

What you add to the letters (your name, your DNI or NIE, the electricity supplier or the operator, the contract or customer number and the town) only fills in the letter in your browser. The letters do not leave your device and are not stored.

The free readings and the pass

In your browser's local storage (localStorage), and only if you use them: a signed counter of your free readings for the day (“eslojusto-lecturas”); if you buy the pass, the pass and the readings it has left (“eslojusto-pase”) and the code of each payment you start, with a random number that only your browser knows, so that the pass can be recovered (“eslojusto-pago”; each payment is removed after 7 days if it was not completed, or when its pass expires). They do not carry your name or anything from your documents, and they only leave your device with the next reading, to recover the pass or to check it before showing you the detail of your review, the report or the letter. They are received by the eslojusto.es server at AWS, which asks Stripe about the payment. An expired pass and a counter from a previous day are deleted automatically the next time the page looks them up, and everything is deleted when you clear this site's data in your browser; that is why the pass is only valid in this browser and is lost on another device, in a private window or when you clear that data. If reading is not available, the tab remembers this for one hour in its session storage (“eslojusto-lectura-no-disponible”, only with the time) so as not to offer it to you in the meantime.

Your review while you pay

If you pay, the answers of your review are stored in that tab's session storage (sessionStorage) while you are on the payment page, to show you the result when you return. For electricity bills, the answers for each bill of your year that you have already reviewed are stored the same way, without the fingerprint of the supply point code. They do not leave your device and are deleted when you return or close the tab.

Your choice of theme (light or dark)

In your browser's local storage (localStorage), and only if you press the theme button. It never leaves your device. It is deleted when you clear this site's data in your browser.

The server logs

The website is hosted on GitHub Pages. GitHub logs the IP address and the technical data of each visit, like any web server.

About GitHub's logs, see the GitHub General Privacy Statement.

What is measured

This is everything that is sent. Each value comes from a closed list of codes or bands, and the page checks each event before sending it: an event with anything else is not sent, and of what PostHog adds on its own, only what is on this list gets through.

With every event

The date and time of each event and a random number that only exists while the page is open. The address of the page without parameters: the domain, the path and the sheet you are on. Your browser and its version, and your system (Windows, Android…). The type of device (computer, mobile or tablet) and the size of the window. The domain of the website you come from (for example “www.google.com”), without the full address. If you arrive from a campaign link, its source, its medium and its name (utm_source, utm_medium, utm_campaign), only when they are a short code of letters, numbers and hyphens. And three technical items from PostHog: the eslojusto.es project key, the version of its code and a flag that asks it not to create any profile.

When you open a page

That you have opened it and the main language of your browser, only the general part: “ja”, not “ja-JP”.

When you leave a page

How long you were on the page and how far down you scrolled.

If you use the browser's translator

The language you translate the page into, for example “ar”.

On each sheet of the review

That you open it and, when you finish it, how long you took, in a broad band: under 10 seconds, from 10 to 30, from 30 to 60, from 60 to 180 or over 180. If you go back, from which sheet to which.

If a value is not accepted

The name of the field and which check it failed, for example “leaving date” and “before the start date”. Never what you typed in it.

If you open a help item

Which frequently asked question you open, or for which item you look at “How it is calculated”.

When reviewing

The reason for the end of the contract, the type of fixed-term contract, how you are paid the extra payments (pagas extra) and whether you count holiday in working days or calendar days and, if working days, whether you work 5, 6 or another number of days a week, as you choose them in the options. How many items carry the figure from your final settlement and how many come out below, match, above or cannot be checked. Whether more notice period is deducted than the maximum. Whether what an unfair dismissal would pay is shown, without the figure. Whether the result is shown as a summary or with the pass's detail. Whether this visit shows the checks one by one first or the result straight away: it is drawn at random, half each way, and not stored. Whether the difference is zero, under 100 €, from 100 to 500 €, from 500 to 2.000 € or more. How many times you have reviewed on this page, how long you took, in bands, and, if you review again, the names of the fields you changed. About unemployment benefit (paro), only whether the estimate does not apply to your reason, whether it has figures or comes out without them, and how many other contracts you added, in a band: 0, 1, 2, or 3 or more. Never how many dependent children you have or any date of those contracts. About the ERTE (temporary lay-off scheme) and whether you have been paid, only the name of the question if you change it, never the answer. What you tick about a possible null and void dismissal (despido nulo) (pregnancy, leave, sick leave…) is never sent, not even if you have ticked something.

When you press “Start again”

That you have pressed it.

In the rental review

The same as in the final settlement review, with its sheets (agreement, landlord, move-in, rent, increases, expenses, move-out and result): that you open each one, how long you take, in bands, and whether you go back. If a value is not accepted, the name of the field and which check it failed, for example “agreement date”, never what you typed. Which frequently asked question you open, or for which item you look at “How it is calculated”, by its type (agency fees, deposit, guarantee, advance payment, increase, expense, return or interest on the deposit), never its description. And whether you press “Start again”.

If your tenancy agreement falls outside the review

The reason, from a closed list: signed before 6 March 2019, seasonal, a room rental, for another use, for protected (subsidised) housing or an old controlled rent (renta antigua).

When reviewing the rental

In which period the agreement was signed (from March 2019 to May 2023, from May 2023 to October 2026, or later), whether the landlord is an individual or a company, whether they are a large landlord (gran tenedor) (yes, no or you don't know), what type of rent update clause it has and how many increases you added, in a band: 0, 1, 2, or 3 or more. For each group of items (agency fees, guarantees, increases, expenses and return of the deposit), the result that weighs most, such as “you pay too much” or “within the limit”, or that there are none. Which uncertainties change a result, such as a law pending validation or an “I don't know”. Whether the difference is zero, under 100 €, from 100 to 500 €, from 500 to 2.000 € or more, whether the pass is offered, whether the result is shown as a summary or with the pass's detail, how many times you have reviewed on this page and how long you took, in bands. Never an amount, a date, your region, your postcode or anything your agreement says.

In the contract review

The same as in the final settlement review, with its sheets (relationship, type of contract, previous contracts, pay, payslips, working hours, trial period, holidays, clauses, information, offer and result): that you open each one, how long you take, in bands, and whether you go back. If a value is not accepted, the name of the field and which check it failed, for example “start date”, never what you typed. Which frequently asked question you open, or for which point you look at “How it is calculated”, by its type (pay, type of contract, chaining of contracts, trial period, working hours, part-time work, holidays and payments, clauses, information, offer or reference), never its text. And whether you press “Start again”.

If your contract falls outside the contract review

The reason, from a closed list: a special employment relationship, civil servant staff, a contract through a temporary employment agency (empresa de trabajo temporal), a relief contract (contrato de relevo) or being under 18.

When reviewing the contract

In which period the contract started (before the March 2022 reform, in 2022 or 2023, in 2024 or 2025, or from 2026), its type as you choose it, whether it is part-time, and whether you have a written contract, are a qualified technician or your employer has fewer than 25 people (yes, no or you don't know). For each group of points (pay, type of contract, chaining of contracts, trial period, working hours, part-time work, holidays, extra payments, clauses and information), the result that weighs most, such as “below the minimum” or “within the limit”, that it depends on an “I don't know”, or that there are none. In how many years the pay is below the SMI (0, 1, 2, or 3 or more) and whether any year does not yet have a published SMI. How many payslips you added, in a band (0, from 1 to 3, or 4 or more), and whether you added your employment history or an offer, whether the contract names a collective agreement and, if its code was read, whether it is a State, regional or provincial one and a sector or company one, never which one. Whether the difference is zero, under 100 €, from 100 to 500 €, from 500 to 2.000 € or more, whether the pass is offered, whether the result is shown as a summary or with the pass's detail, how many times you have reviewed on this page and how long you took, in bands. Never an amount, a date, the name of the employer or of the collective agreement, your answer about disability or anything your contract says.

In the domestic worker review

The same as in the final settlement review, with each of its sheets, from the job to the result: that you open each one, how long you take, in bands, and whether you go back. If a value is not accepted, the name of the field and which check it failed, for example “start date”, never what you typed. Which frequently asked question you open and for which point of the result you open the calculation, by its type.

If your case falls outside the domestic worker review

The reason, from a closed list: that the relationship ended before the September 2022 reform.

When reviewing the domestic worker case

How you work (by the hour, by the month or living in the home), the period of the year of the pay (2022 or 2023, 2024 or 2025, or from 2026), how the relationship stands (ongoing, dismissal by withdrawal (desistimiento), another reason or you don't know), whether there are extra payments and how (none, spread over the monthly pay or separate), whether there is payment in kind, and whether the withdrawal was in writing and with the severance pay made available (yes, no or you don't know). For each group of points (pay, working hours, holidays, termination, severance pay and notice period), the status that weighs most. How much is missing, in a band, never the amount; how many times you review and how long you take, in bands.

In the review of your credit

The same as in the final settlement review, with each of its sheets, from the type of credit to the result: that you open each one, how long you take, in bands, and whether you go back. If a value is not accepted, the name of the field and which check it failed, for example “when you took it out”, never what you typed. Which frequently asked question you open.

If your credit falls outside the review

The reason, from a closed list: a mortgage, a lease with no purchase (renting), credit for a business, less than 200 € or an agreement before 25-09-2011.

When reviewing your credit

The type of credit (personal loan, car loan or revolving card) and the range of years in which you took it out (before 2011, from 2011 to 2015, from 2016 to 2020 or from 2021). For each item (the APR, the compensation for early repayment, the dealer discount and withdrawal), its result as a code; for the comparison with the average rate, its band and whether the APR compared was the one worked out from the figures or the one in the agreement. Whether you were offered the pass and whether you see the result with its detail. How many times you review and how long you take, in bands. Never an amount, an interest rate, a date or the name of the lender.

In the review of your insurance

The same as in the final settlement review, with each of its sheets, from the policy to the result: that you open each one, how long you take, in bands, and whether you go back. If a value is not accepted, the name of the field and which check it failed, for example “expiry date”, never what you typed. Which frequently asked question you open.

If your policy falls outside the review of your insurance

The reason, from a closed list: life, health, funeral or other insurance that is not home or car insurance, or a policy that expired before 01-01-2016.

When reviewing your insurance

Whether it is home or car insurance and whether you took it out at a distance (yes, no or you don't know). For the deadline to say you are not renewing, the notice of changes, the premium and withdrawal, its result as a code: for example, deadline open or passed, notice on time or late, premium going up, staying the same or going down. How many times you review and how long you take, in bands. Never a date, a premium or the name of the insurer.

In the review of your mortgage

The same as in the final settlement review, with each of its sheets, from the mortgage to the result: that you open each one, how long you take, in bands, and whether you go back. If a value is not accepted, the name of the field and which check it failed, for example “date of the deed”, never what you typed. Which frequently asked question you open.

If your mortgage falls outside the review

The reason, from a closed list: it was taken out by a company, it is on a business property, it is the developer's mortgage taken over (subrogada) when buying, it is a multi-currency or reverse mortgage, or it is a loan without a mortgage.

When reviewing your mortgage

The date range of the deed (before 09-12-2007, up to 14-05-2013, up to 09-11-2018, up to 15-06-2019 or from 16-06-2019) and whether you took it out as a private individual (yes, no or you don't know). For the costs set by law, those under the Tribunal Supremo's (Supreme Court's) allocation and the fees, their result as a code; how many invoices you enter, in bands (none, 1-2, or 3 or more); which clauses appear in your deed, by their type (for example, floor clause (cláusula suelo) or IRPH), never their text; the highest figure of the three lines, in bands and without adding them up; whether you were offered the pass and whether you see the report with it. How many times you review and how long you take, in bands. Never an amount, an interest rate, a date or the name of the bank.

In the reviews of your bills

The same as in the final settlement review, with each of its sheets, from your supply or your minimum-term commitment to the result: that you open each one, how long you take, in bands, and whether you go back. If a value is not accepted, the name of the field and which check it failed, for example “charge date”, never what you typed. The bono social (social bonus) questions that only people who have it see are not measured: neither that you open them nor their errors. Which frequently asked question you open.

If your bill or your cancellation falls outside the review

The reason, from a closed list: a supply in Canarias, Ceuta or Melilla, of more than 15 kW, with an access tariff other than 2.0TD or with solar panels that feed into the grid, or a bill issued before 12-06-2026; or, for the minimum-term commitment, a cancellation requested before 2022.

When reviewing your electricity bill

Whether it is PVPC (the regulated tariff) or the free market, and whether the supplier is a reference supplier (comercializadora de referencia), another one or you don't know, never its name. Which types of line do not add up, for example the meter rental or VAT (IVA), each one once, never its description or its amount, and never the bono social line, which would show that you have it; whether any line charges too little, whether any result is waiting for official data and whether a difference repeats on every bill. Never your supply point code or its fingerprint, an amount, a date or the name of your supplier.

When reviewing your minimum-term commitment and your cancellation

For the minimum-term commitment, the change of conditions and the charges after cancellation, its result as a code, for example “above what the regulations allow”. Never an amount, a date or the name of the operator.

When choosing how to start

Whether you choose to upload a document or fill in by hand.

When reading documents

How many photos or pages you upload, in a band (1, from 2 to 4, from 5 to 9, from 10 to 15 or from 16 to 25), and how many PDFs you chose. When it finishes, which document types were recognised (for example, dismissal letter or payslip), how many details were filled in, in a band (0, from 1 to 3, from 4 to 8, or 9 or more), whether any came out with low confidence, whether the figures did not add up, whether two documents did not match, whether they had to be read again with a more accurate model and, if any page could not be read, why (blurry, dark, cut off, handwritten, not employment-related, from another country, of a type that is not recognised, with no useful details or not read), without saying which one; or, if it fails, the error code. If, before sending, a photo looks dark, blurry or small, which of the three and whether you sent it anyway. Never anything the documents say.

With the pass

With each review, how the pass appears under the result: you already have it, it is offered with something to claim, it is offered quietly or it is not offered. That you start the payment, that the pass is issued when you return from the payment or when you recover it, or the error code, whether on checking it comes out valid, not valid, expired, cancelled or with no response, and whether you download the report or the letter. About the letter, only whether you filled in none, some or all of the optional details (name, DNI or NIE, employer and town), never which ones or what they say: those details only fill in the letter in your browser and are neither sent nor stored. Never the payment code or the pass.

When reading rental documents

The same events as with the other documents, with the rental document types (agreement, rent increase notice, receipt, agency invoice or return of the deposit) and, if a page is not about the rental, that reason. When you download, whether it is the report, the deposit letter or the rent letter and, for a letter, whether you filled in none, some or all of its details, never which ones. Never anything the documents say or anything you write in the letters.

When reading contract documents

The same events as with the other documents, with the contract document types (contract, payslip, employment history or job offer). When you download, whether it is the report, the letter to the employer, the letter asking for the information in writing or the request for the certificate of fixed-term contracts and, for a letter, whether you filled in none, some or all of its details, never which ones. Never anything the documents say or anything you write in the letters.

When reading credit documents

Reading the credit documents does not send any event. When you download, whether it is the report, the letter asking for the credit information or the one about the compensation for early repayment and, for a letter, whether you filled in none, some or all of its details, never which ones. Never anything the documents say or anything you write in the letters.

When reading insurance documents

Reading the policy and the renewal notice does not send any event. When you download, whether it is the report or the letter saying you are not renewing and, for the letter, whether you filled in none, some or all of its details, never which ones. Never anything the documents say or anything you write in the letter.

When reading mortgage documents

Reading the deed and the invoices does not send any event. When you download, whether it is the report, the letter asking for the mortgage documentation or the one asking for the amounts to be reviewed and, for a letter, whether you filled in none, some or all of its details, never which ones. Never anything the documents say or anything you write in the letters.

When reading documents about your bills

Reading the bills and the contracts does not send any event. When there is no read bill left to review, about “your year”: how many bills it counts, in a band (1, from 2 to 3, from 4 to 6, from 7 to 12, or 13 or more); what they add up to above the regulations, in bands (zero, under 100 €, from 100 to 500 €, from 500 to 2.000 € or more); whether you were offered the pass, whether you see the report with it, how many times you complete it and how long you take, in bands. When you download, whether it is the report or which letter it is and, for a letter, whether you filled in none, some or all of its details, never which ones. Never anything the documents say or anything you write in the letters.

If the page fails

The type of error and in which file and line of the code it occurred. Never the error message, because it could quote something you typed.

No profile of you is created and no visit is linked to another: each time you open or reload a page, the measurement starts from scratch. Never sent: the version of your system, your time zone, the size of your screen, your full language, the full user agent string, the title of the page, what you searched for to get here or the click identifiers that advertisers add to links (gclid, fbclid and the like).

Who receives it

It is received by PostHog Inc., the measurement tool, in its European Union cloud, hosted in Frankfurt (Germany). It processes the data on behalf of eslojusto.es and does not use it for anything else. PostHog Inc. is a United States company: the processing is covered by its processor agreement, which includes the European Commission's standard contractual clauses.

When it receives each event, PostHog sees the IP address of your connection and your browser's user agent, like any server. It stores neither: the project is configured to discard the IP, without using it to locate you, and the full user agent is not sent as data; only the browser, its version and the system listed in “What is measured”.

The events are kept for one year, the period of PostHog's free plan (see its privacy page).

Documents and payments

Reading a document is optional: the review works the same if you type in the details. Before you upload it, we ask for your explicit consent, because a payslip or an employment history (vida laboral) may show specially protected data, such as trade union membership (through its subscription) or sick leave. The legal basis is that consent (arts. 6.1.a and 9.2.a of the Reglamento General de Protección de Datos, the GDPR). You can withdraw it whenever you like by not uploading any more documents: as nothing is stored, there is nothing left to erase.

In a rental, the tenancy agreement and the other papers contain personal data about you and about third parties, such as the landlord, any guarantor or the agency: names, DNI numbers, the address of the property or bank accounts. That is why we also ask for your explicit consent before you upload them, with the same legal basis. The person uploading the documents cannot consent on behalf of other people: their data is processed on the basis of legitimate interest (art. 6.1.f RGPD, the GDPR), only while the model is reading, and is neither copied nor stored. The model is instructed not to copy that data and the server discards anything that still contains it; nothing is stored.

For an employment contract, the contract, the payslips and the employment history may show specially protected data, such as a disability, a period of sick leave or trade union membership through its subscription. That is why we also ask for your explicit consent before you upload them, with the same legal basis. The model is instructed not to copy that data and the server discards any text that still contains it; nothing is stored.

For credit, the agreement and the other papers contain your personal data and, if there is linked insurance, they may contain health data from its questionnaire. That is why we also ask for your explicit consent before you upload them, with the same legal basis. The person uploading the documents cannot consent on behalf of other people: their data is processed on the basis of legitimate interest (art. 6.1.f RGPD, the GDPR), only while the model is reading, and is neither copied nor stored. If another person's health data appears, the model does not copy it either. The model is instructed not to copy that data; nothing is stored.

For insurance, the policy and the notice may contain data about you and about third parties, such as whoever drives or lives in the home, and sometimes health data. That is why we also ask for your explicit consent before you upload them, with the same legal basis. The person uploading the documents cannot consent on behalf of other people: their data is processed on the basis of legitimate interest (art. 6.1.f RGPD, the GDPR), only while the model is reading, and is neither copied nor stored. If another person's health data appears, the model does not copy it either. The model is instructed not to copy that data; nothing is stored.

For a mortgage, the deed contains your personal data and that of the guarantors and, if there is linked life insurance, it may contain health data. That is why we also ask for your explicit consent before you upload it, with the same legal basis. The person uploading the documents cannot consent on behalf of other people: their data is processed on the basis of legitimate interest (art. 6.1.f RGPD, the GDPR), only while the model is reading, and is neither copied nor stored. If another person's health data appears, the model does not copy it either. The model is instructed not to copy that data; nothing is stored.

For bills, the documents contain your personal data and your supply point code. That is why we also ask for your explicit consent before you upload them, with the same legal basis. The person uploading the documents cannot consent on behalf of other people: their data is processed on the basis of legitimate interest (art. 6.1.f RGPD, the GDPR), only while the model is reading, and is neither copied nor stored.

The documents are processed by Amazon Web Services EMEA SARL (Luxembourg), as processor: the server (AWS Lambda) is in Spain and the AI model is used through Amazon Bedrock with a profile that only works in European Union regions. Amazon Bedrock does not store the documents or what the model replies, does not use them to train models and does not share them with Anthropic. AWS's processor agreement includes the European Commission's standard contractual clauses.

So that readings and payments are made by people, before each reading and each payment the page loads Cloudflare Turnstile, which checks that you are not a robot without using cookies. Cloudflare, Inc. receives the IP address and technical data from your browser for that check, and only when you choose to upload a document or pay for the pass. The legal basis is the legitimate interest in preventing abuse of the service (art. 6.1.f of the Reglamento, the GDPR); Cloudflare participates in the EU-U.S. Data Privacy Framework.

The report pass is paid for on the page of Stripe Payments Europe, Ltd. (Ireland). eslojusto.es does not see or store your card or Bizum details: it only asks Stripe whether the payment has been made and for what amount, and records alongside the payment how many readings you have made with the pass, with nothing of what they read. Stripe asks for your email and, depending on how you pay, also your name, your country or your phone number. That data stays in the eslojusto.es Stripe account, which can see it in the Stripe dashboard to deal with a problem with the payment or a refund, and it is kept for as long as accounting and tax rules require. The legal basis is the purchase contract (art. 6.1.b) and the accounting and tax obligations (art. 6.1.c). Stripe may process the data in the United States; Stripe, Inc. participates in the EU-U.S. Data Privacy Framework and its agreement includes the standard contractual clauses. Stripe keeps the payment data for as long as those obligations and the anti-money laundering rules require of it; it explains this in its privacy policy. The terms of the purchase are in the legal notice.

No cookies

This website does not use cookies, and the measurement does not write anything to your device or to any other browser storage, because everything lives in the page's memory. Only what you ask for is stored: your choice of theme, if you press its button, and, if you read documents or buy the pass, what “What is stored and where” explains. That is why you do not see any cookie notice.

Why it is measured

The legal basis is legitimate interest (art. 6.1.f of the Reglamento General de Protección de Datos, the GDPR), which here is knowing whether the tool is used, at which step people get stuck and what fails, in order to improve it. The minimum needed for that is measured, without identifying you and without advertising.

If your browser sends the do-not-track signal (Global Privacy Control or Do Not Track), nothing about your visit is measured. You can also object to this measurement (art. 21 of the Reglamento) by blocking the address eu.i.posthog.com with a content blocker. The review works the same.

Controller, contact and rights

eslojusto.es is a project by Endika Iglesias, the controller of this processing. For any question about your data, write to hola@eslojusto.es. If you have written to that address, you can ask there for the data from your email to be accessed, rectified or erased. If you have paid for the pass, also the data of your payment in Stripe, except for any that must be kept under accounting and tax rules.

What is measured does not identify you, so there is no way to find your events to show them to you or erase them (art. 11 of the Reglamento). If you believe something is not being done properly, you can lodge a complaint with the Agencia Española de Protección de Datos (AEPD, the Spanish data protection authority).