Privacy policy.

Introduction

At Mis Plumas we value your privacy above all. This policy explains how we handle data inside our app dedicated to bird-breeding management.

Information we collect

The app lets the user enter local information for managing their aviary:

• Bird data (rings, species, sex, dates, notes).
• Pair management and their broods.
• Pedigree trees generated from your entries.
• Bird photographs (stored locally or referenced from your gallery).
• Breeder address book (optional module): the breeders you choose to save —name, aviary, breeder code, phone, email, country and area—, your private notes and your rating. It is stored on your device and in your backups; if you use cloud sync, it also travels with the rest of your aviary (see “Cloud sync”). The app does not read your phone contacts; when importing, it only receives the contact you pick.

Use of information

All collected information is used exclusively for the internal operation of the app:

• Calculating breeding statistics.
• Pedigree visualization and genetic calculations.
• Bird inventory management.
• Scheduling local notifications (hatching alerts, etc.).

Required permissions

To offer a complete experience, we request the following permissions:

• Storage / files: to let you store bird photos and make manual backups of your database.
• Notifications: to alert you of important events in your breeding calendar.
• Location (optional): to calculate daylight hours and find nearby listings. Search uses your position only at that moment and does not store it; if you publish a locality, the app uses the approximate centre of the selected municipality, never your home location.

Backups

The app includes a backup feature. When you choose to export a copy, a local file is generated on your device. You decide where to share or save that file (Google Drive, email, etc.). We do not have access to those backups.

Website and contact form

The public website uses neither advertising nor analytics trackers. If you send the contact form, we process the name, email, subject and message you provide so we can reply. To prevent abuse, your IP is transformed into a hashed identifier for temporary rate limits and, when enabled, the anti-spam challenge may be served by Cloudflare Turnstile or hCaptcha, which receive the technical data needed to verify it. Do not use the form to send your PIN or sensitive health information.

Security

Your data lives on your device, so its security also depends on that of your own device: we recommend keeping your operating system up to date. If you enable cloud sync, also see “Security and transparency” in that section.

Changes to this policy

We may update this policy occasionally. Any change will be notified through the app itself.

Cloud sync (optional)

If you enable the Cloud sync module (off by default), we process this data to provide the service (Art. 6(1)(b) GDPR). Abuse prevention and moderation also rely on our legitimate interest in keeping the service safe (Art. 6(1)(f)):

• Account: your identifier (federation code + breeder number, or email) and your PIN, stored as an irreversible hash. The recovery email is optional and is used to verify the address, reset the PIN and send security notices.
• Aviary data: the information you enter (birds, pairs, clutches, health, finances, etc.) and, if you allow it, photos, videos and documents.
• Sync diagnostics: each device occasionally sends the technical state of its sync —app version, operating system, when it last synced, error codes and counts per record type, such as how many changes are waiting to upload—, without any of your aviary data. It is only used to help you when something does not sync.
• Transfers between accounts: “Let other breeders find me” allows someone who knows your breeder number to send you an offer. The bird record, message and selected attachments are shared only with the specified account.
• Listings and breeder profile: if you enable publishing, other authenticated accounts can see your public name, country and the fields you choose to show —area or locality, breeder credential and logo— together with published offers or wants. A listing projects only the selected bird data, text, modality, price/ring/photo when authorised, and the approximate municipality position if enabled. These are not open or indexable web pages.
• Breeder address book: the breeders you save in your address book —name, aviary, breeder code, phone, email, country and area—, your private notes and your rating are synced between your devices and Mis Plumas Web like the rest of your aviary. This is data about other people that you enter yourself: it is not shown to other users or used for any other purpose, and with regard to it Mis Plumas acts as a processor on your behalf. Only save contact details you have the right to keep (for example, because that person gave them to you).
• Contact and interaction: email and phone are never part of the bulk catalogue; they are delivered on demand to an authenticated account that taps Contact, only if you left that channel visible and under anti-abuse limits. We also process blocks, reports, per-account deduplicated view/share totals and, when used, a star rating tied to an accepted transfer. There is no in-app chat and we do not process payments.

The misplumas.es/cesiones/… web link is only a bridge to open or download the app: it displays no listing or breeder data.

Where: on Mis Plumas' own server hosted in the European Union (Hetzner Online GmbH, Germany/Finland, as infrastructure processor). Transactional emails are sent through Mailtrap (Railsware). There is no advertising.

Security and transparency: data travels encrypted (TLS) and access is restricted. We do not apply end-to-end encryption: the server operator could technically access data for maintenance, security or incident support; it is not used for advertising.

Retention: for as long as your account exists. Whatever you delete from your aviary remains in the multi-device trash for 30 days and is then permanently deleted. On Mis Plumas Web, signing out removes the copy of your aviary from the browser, address book included; the cloud does not change. Technical server backups are kept for a maximum of 90 days and then deleted. Withdrawn listings leave the active catalogue immediately; minimum moderation, security and anti-abuse records are kept while needed to protect the service.

Transfers: a pending offer expires after 30 days. The optional ZIP is retained for at most 90 days after acceptance; when the recipient confirms the import, it is deleted 30 days after that confirmation, or sooner if the 90 days run out first. The structured history remains while at least one participant account exists and is deleted once both are gone.

Your controls and rights: you can withdraw listings, disable publishing, hide each optional field, block breeders and delete your account and all its content from the app (Settings → Data → Cloud sync) or through the public account deletion page. You can exercise your rights of access, rectification, portability and your other GDPR rights through Contact. If you do not enable cloud sync, your aviary data is not sent to Mis Plumas; only what you decide to send through independent services such as the website contact form will be processed.