Privacy policy
Last updated: 15 October 2026
This policy explains how FabricAI processes personal data when you use events.fabricai.es, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Controller
FabricAI, Spain. Contact for any data protection matter: info@fabricai.es.
2. Data about users of the service
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Account: username, name, organisation, email, password (stored only as a hash), permissions | giving you access to the service | contract (art. 6.1.b GDPR) | while the account exists |
| Session: a random token (stored as a hash), IP address, browser, times | keeping you signed in securely | contract (art. 6.1.b) | 14 days, or until you log out |
| Sign-in attempts: username, IP address, browser, success or failure | security, preventing abuse | legitimate interest (art. 6.1.f) | 180 days (failure counters: 15 minutes) |
| Use of the service: pages visited, countries selected, events opened, search questions, data-API requests, IP address | administering the service, capacity, security, improving it | legitimate interest (art. 6.1.f) | 180 days |
We do not use analytics, advertising or tracking tools, and we do not sell or share personal data for marketing.
3. Who receives the data
- Hosting: a hosting provider in the European Union, as processor. All data are stored in the EU.
- Language-model providers, as processors: the text of your search questions is sent to a language model to interpret the question and write the answer. Write no personal data in a search question. Some providers may be outside the European Economic Area; transfers are covered by the European Commission's Standard Contractual Clauses.
- OpenStreetMap Foundation (United Kingdom, covered by an EU adequacy decision): when a page shows a map, your browser loads map tiles from OpenStreetMap's servers, which receive your IP address and browser details.
Fonts and software libraries are served by our own server: no data go to font or code delivery networks.
4. People named in the events
The archive is compiled from publicly available news reports. An event can name public actors (governments, armed groups, officials, organisations) and, when the reports do, other people involved (for example victims or people arrested). These data are processed to document and study political violence and peace, a purpose of public interest, on the basis of legitimate interest (art. 6.1.f GDPR) and of the freedom of information (art. 85 GDPR). The archive records events, not profiles of people; no automated decision is taken about any person. Informing each person individually is not possible (art. 14.5.b GDPR); this notice serves that purpose. Anyone named in an event can ask for it to be corrected or removed by writing to info@fabricai.es.
5. Your rights
You can ask for access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interest, by writing to info@fabricai.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the authority of your country.
6. Security
Connections are encrypted (HTTPS); passwords and session tokens are stored only as hashes; repeated failed sign-ins are blocked; access to data is limited to the administrator.
7. Changes
We will publish any change to this policy on this page, with its date.