Privacy

The Spanish version of this policy is the binding one.

The essentials

Your photographs are not sent anywhere. Cajista runs inside your browser and stores albums in your computer's local storage. There is no feature that uploads an image to a server, ours or anyone else's.

Who is responsible

• Controller: Francisco Borja Arias Medina, Spanish tax ID 02659960X
• Address: Plaza Patricio Aguado, 2, 28043 Madrid, Spain
• Contact: hola@cajista.com

What data is processed, and what for

• Your albums and your photos. They stay on your machine. We don't receive them, we don't store them and we can't see them.
• Purchase data. When you buy a licence, the payment gateway processes your name, email and billing details as the seller. We keep your email, the language you bought in and the licence attached to it, so we can issue it, send it to you again, warn you before it expires and support you. Legal basis: performance of the contract.
• Licence activation. Activating records a random identifier for the computer — no name, no serial number, nothing that identifies you — so the limit of computers per licence can be enforced.
• Print export authorisation. Every permission leaves a line next to your licence: when it happened, an album identifier, how many spreads it had and a technical fingerprint — an irreversible digest — of which photos were placed. It is what stops you being charged twice for the same album. Neither the fingerprint nor the identifier can bring back a photo, a file name or an album name: they are numbers computed on your machine.
• Your IP address, when you activate a key or ask us to send it again. It is used only to count failed attempts and stop automated sweeps, it lives in the service's memory for a few minutes and it is not written to the database. Legal basis: legitimate interest in security. The server and its proxy also keep the usual technical logs, for a short time and for the same purpose.
• Anonymous usage, if you leave it switched on. Aggregate events with no identifier that could follow you between sessions: that an album was created, in which photo range, whether automatic layout was used, whether an export was attempted and to which destination. Never file names, album names, EXIF data or anything derived from the content of your photos. You can switch it off in the program's settings. Legal basis: legitimate interest in knowing which parts of the program get used.
• Automatic layout. If the calculation runs on our server, all that is sent is a few numbers per photo: an opaque identifier, the width, the height, the capture date and whether it is marked as a favourite. Not one pixel, not the file name. They are processed and not stored.

This website

No tracking or advertising cookies. Visits are measured by our own installation of Umami on our server: aggregate, cookieless and without personal identifiers, so there is no need to ask for your consent or bother you with a banner.

What is stored on your machine

We use no cookies anywhere. What the program keeps in your browser is your own work — the albums and their photos — your settings, your licence key and a marker so the same usage event isn't counted twice. All of it stays there and you can delete it whenever you want by clearing the site's data; save a backup first, because it will take your albums with it.

Who else is involved

• Paddle (Paddle.com Market Ltd, United Kingdom), as the seller and the controller of the payment transaction.
• Resend (United States), used to send licence key emails and expiry warnings.
• The hosting of the licence service, on our own server in the European Union, which also runs the visit measurement.
• Cloudflare R2, where the licence database backup is replicated, in storage with European Union jurisdiction.

Sending email involves an international transfer of your email address to the United States, covered by the safeguards European rules provide — standard contractual clauses and, where applicable, the relevant adequacy framework. The United Kingdom has an adequacy decision from the European Commission. You can ask us for a copy of those safeguards at hola@cajista.com.

For how long

Licence data, while the licence is valid and afterwards for as long as tax and accounting rules require. The export record, as long as the licence it belongs to. Anonymous usage events, twelve months. Failed activation attempts, minutes.

Your rights

You can request access, rectification, erasure, restriction, objection and portability by writing to hola@cajista.com. If you believe we are not handling it properly, you can complain to the Spanish Data Protection Agency.

Changes

If this policy changes, we'll write to the email you bought with. The program's anonymous analytics is not consented to but disclosed — it runs on legitimate interest — and you can switch it off in settings whenever you like; there is no cookie to accept anywhere.

Version 2 · 20 August 2026.