This policy explains what personal data Hmmverse processes, why, and what rights you have. It covers the website hmmverse.com and Hmmverse Factory, the in-house software that publishes Hmmverse videos to Hmmverse's own accounts on YouTube, Instagram and TikTok.
1. Who is responsible
The data controller is Manuel Santos Márquez, who runs Hmmverse from Spain. Contact: studio@hmmverse.com. Full identification details are in the Legal notice.
2. The short version
- The website sets no cookies of its own and uses no advertising or cross-site tracking.
- We only receive personal data about you if you email us.
- Hmmverse Factory only connects to Hmmverse's own accounts. It does not collect data about viewers or any other users.
- We never sell data and never use it for advertising.
3. The website
Hosting and security. The site is served by Cloudflare, Inc. To deliver pages and protect the site against attacks, Cloudflare processes technical data such as your IP address, browser type, the page requested and the time of the request. We do not keep these logs ourselves. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
Visit statistics. We use Cloudflare Web Analytics, which works without cookies, fingerprinting or cross-site tracking and only shows us aggregated figures (pages viewed, referring website, country and device type). Legal basis: our legitimate interest in knowing how the site is used.
Language. To show the site in English or Spanish, the home page checks the country your visit comes from (Cloudflare derives it from your IP address at that moment; it is not stored). If you pick a language with the EN/ES switch, your choice is saved in your browser's local storage under the key hv-idioma. It never leaves your device and you can clear it from your browser settings at any time.
Cookies. We do not set any cookies. Cloudflare may set strictly necessary security cookies (such as __cf_bm or cf_clearance) only when it needs to tell people from bots; these are exempt from consent.
Links to social platforms. Links to YouTube, Instagram and TikTok take you to those platforms, whose own privacy policies apply. We do not embed their players or widgets, so they receive nothing from you while you browse this site.
4. When you email us
If you write to studio@hmmverse.com, we receive your email address, your name and whatever you include in your message. We use them to read and answer you and, if relevant, to manage a collaboration. Legal basis: our legitimate interest in answering messages (Art. 6(1)(f) GDPR) or steps you ask us to take before a contract (Art. 6(1)(b)). Emails are forwarded by Cloudflare Email Routing to a mailbox hosted by Google (Gmail). We keep them while the conversation is active and for up to 12 months afterwards, unless the law requires us to keep them longer.
5. Hmmverse Factory and platform data
What it is and whose data it handles. Hmmverse Factory is software that runs on a computer owned by Hmmverse. It is not offered to the public and has no sign-up: the only accounts it connects to are Hmmverse's own channel and profiles (YouTube @hmmverse.studio, Instagram @hmmverse.studio, TikTok @hmmverse.studio), authorized by their owner through each platform's official sign-in (OAuth). It never accesses anyone else's account.
What it accesses.
- YouTube (Google), through YouTube API Services: upload videos and set their title, description, thumbnail and visibility (
youtube.upload); read information about the channel and its videos (youtube.readonly); read channel analytics such as views, watch time, audience retention, traffic sources and aggregated, anonymous audience demographics (yt-analytics.readonly); read the channel's revenue reports (yt-analytics-monetary.readonly). - Instagram (Meta): read the account's basic profile and media, publish Reels and posts, and read aggregated insights for the account and its media.
- TikTok: read the account's basic profile, upload and publish videos, and read the list of the account's videos and their statistics.
Analytics are aggregated, anonymous statistics produced by each platform. Hmmverse Factory does not collect names, profiles or contact details of viewers or of any other users.
How it uses the data. Only to (a) publish Hmmverse's videos, (b) analyze how they perform to choose the best day and time to publish and to improve future videos, and (c) prepare private reports for the channel's owner. It does not use the data for advertising, does not sell it and does not build profiles of people.
Where it is stored and for how long. Access tokens and statistics are stored on Hmmverse's own computer in Spain, in files that only its owner can read. Data obtained from YouTube is refreshed or deleted at least every 30 days and the authorization is re-checked at least every 30 days, as the YouTube API Services Developer Policies require; we apply the same rule to Instagram and TikTok data. Access tokens are kept until access is revoked.
Who it is shared with. Only with service providers that work for Hmmverse, only to provide the features above and under a duty of confidentiality: Anthropic (the AI assistant Claude, which helps analyze performance; set up so that this data is not used to train its models), Telegram (private notifications to the owner) and a private Git repository and storage device that only the owner can access. Nothing else is shared with anyone.
Google and YouTube. Hmmverse Factory uses YouTube API Services. By using it you agree to be bound by the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy. Hmmverse Factory's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How to revoke access. The owner of an account can remove Hmmverse Factory's access at any time: for Google and YouTube at security.google.com/settings/security/permissions; for Instagram and Facebook under Settings → Apps and websites; for TikTok in the app's security settings, under connected apps and services. Step-by-step instructions are on the Data deletion page.
Deletion. You can ask us to delete data at any time by writing to studio@hmmverse.com. We do it as soon as possible and within 7 days. If access is revoked from a platform's settings, we delete the related data within 7 days of noticing it, and never later than 30 days.
Legal basis. The accounts belong to Hmmverse itself; to the extent personal data of the account owner is involved, it is processed to provide the service the owner requested and in our legitimate interest in managing our own channel.
6. International transfers
Some of the providers mentioned (Cloudflare, Google, Meta, TikTok, Anthropic and Telegram) may process data outside the European Economic Area, for example in the United States. Transfers rely on the EU–US Data Privacy Framework when the provider is certified, or on the European Commission's standard contractual clauses or other safeguards allowed by the GDPR.
7. Your rights
You can ask for access to your data, its rectification or erasure, the restriction of its processing, its portability, and you can object to its processing, by writing to studio@hmmverse.com. We answer within one month. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).
8. Children
The website and the channel are not directed to children. We do not knowingly process personal data of children under 14.
9. Security
We use HTTPS on the whole site, two-step verification on every account involved and access restricted to the owner, among other reasonable technical and organizational measures.
10. Changes to this policy
We will publish any change on this page with a new date. If Hmmverse Factory starts using data in a way this policy does not cover, its owner will be asked to accept the new policy before that happens.