Privacy Policy

1. Controller

The data controller is:
pathways digital SL
C/ Gremi de Sabaters 21, 07009 Palma, España
Email: support@awesomelist.link

2. Scope

This policy applies to the website https://awesomelist.link and related communications we send when you contact us.Awesomelist indexes publicly available third-party content (mainly GitHub repositories and READMEs). Those third parties process data under their own policies.

3. Categories of data

Depending on how you use the site, we may process:

• Usage and device data — IP address (often truncated or hashed by analytics tools), browser type, operating system, referrer, pages viewed, approximate location derived from IP, timestamps, and similar technical identifiers.
• Contact data — email address and message content if you email us or open a GitHub issue about the project.
• Cookie and similar identifiers — where analytics or tag-management tools set cookies, local storage, or equivalent technologies.

We do not intentionally collect special-category data, and we do not require an account to browse the public index.

4. Purposes and legal bases

We process data for:

• Providing and securing the website (Art. 6(1)(f) GDPR — legitimate interests in operating a reliable public service and preventing abuse).
• Measuring reach and improving the product via analytics (Art. 6(1)(f) GDPR and, where cookies or similar technologies require consent under ePrivacy rules, Art. 6(1)(a) GDPR).
• Responding to support, takedown or legal requests (Art. 6(1)(b), (c) and/or (f) GDPR as applicable).

5. Analytics and measurement tools

We use or may use the following tools. Exact tooling may change as we iterate; this section describes the categories of processors involved.

Plausible Analytics (self-hosted)

Privacy-oriented web analytics that we operate on infrastructure under our control. Plausible is designed to avoid persistent cross-site tracking cookies and typically processes aggregated pageview metrics, referrers and coarse device/browser information. Data stays on our self-hosted instance subject to our retention settings.

Umami Analytics (hosted)

Hosted analytics for aggregate traffic statistics (pages, referrers, devices). Depending on configuration, Umami may process IP-derived information and technical logs on the hosting provider’s systems under their terms and data-processing arrangements.

Google Analytics 4 (GA4)

Google Analytics 4 (Google Ireland Limited / Google LLC) measures website usage, including page views, events, approximate demographics/interests where enabled, and device/network signals. GA4 may use cookies or similar identifiers. Google may process data in the United States or other countries with appropriate transfer mechanisms. See Google’s privacy documentation for details on GA4 data use.

Google Tag Manager (GTM)

Google Tag Manager loads and manages measurement and marketing tags on the site. GTM itself is a container; tags configured inside it (including GA4 or other vendors) may set cookies and transmit data to those vendors according to their configuration. We are responsible for tags we enable in the container.

Cloudflare Web Analytics

When enabled, Cloudflare’s privacy-oriented beacon collects high-level performance and traffic metrics with limited personal data, delivered via Cloudflare’s network.

6. Cookies and similar technologies

Strictly necessary technologies may be used to deliver the site securely. Analytics and advertising-related cookies or similar identifiers (especially GA4 and tags loaded via GTM) are used only where legally permitted, including with consent where required. You can control cookies through your browser settings; blocking some cookies may affect measurement accuracy.

7. Recipients and international transfers

Recipients may include hosting and CDN providers (including Cloudflare), analytics providers listed above, and professional advisers or authorities where legally required. Where personal data is transferred outside the EEA/UK, we rely on adequacy decisions, Standard Contractual Clauses, or other lawful transfer tools as applicable to each vendor.

8. Retention

Analytics data is retained according to each tool’s configuration and our operational needs, generally only as long as useful for measurement and security (often rolling windows of months, not indefinite profiles). Support emails are kept as long as needed to handle your request and related legal obligations.

9. Your rights

Under the GDPR you may have the right to:

• access your personal data;
• rectification or erasure;
• restriction of processing;
• data portability;
• object to processing based on legitimate interests;
• withdraw consent where processing is consent-based, without affecting prior lawful processing.

To exercise these rights, email support@awesomelist.link. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) atwww.aepd.es, or with your local supervisory authority in the EEA.

10. Children

The service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have, contact us and we will delete it where required.

11. No sale of personal data

We do not sell personal data. Sponsored placements on the site are advertising inventory, not sales of your personal information.

12. Third-party links

Outbound links (including GitHub repositories, sponsored and affiliate links) lead to services we do not control. Their privacy practices are their own.

13. Changes

We may update this policy from time to time. The “Last updated” date above will change when we do. Continued use of the site after changes constitutes notice of the updated policy where permitted by law.