Privacy Policy

Last updated: 14 August 2026

RecapYear is operated by Luis Cristian Aurrecoechea Di Giacomo, a sole trader in the United Kingdom, trading as RecapYear (“we”, “us”), the data controller for this site.

Postal address: 6 Southgate Drive, Towcester, Northamptonshire, NN12 6JQ, United Kingdom. Contact: hello@recapyear.com.

We are registered with the UK Information Commissioner’s Office (ICO) as a data controller under registration reference ZC220305. You can look it up on the ICO’s public register at ico.org.uk.

This policy explains what personal data we handle on recapyear.com, why, and your rights under UK GDPR and the Data Protection Act 2018.

What we handle

• The CSV you upload — the stats you use to build recaps. In the free flow it is read in your browser and never reaches our servers. In the Pro batch export it is sent to our server, turned into share links in memory, and returned to you — we do not store it.
• Share links — the highlight shown on a /w/… page is encoded inside the link itself. We keep no database of recaps.
• Your licence key — checked against Polar when you unlock Pro. It is kept in your browser, not in an account on our side.
• Payment data — handled entirely by Polar; we never see or store card details.
• Aggregated usage analytics via Plausible — cookieless and does not identify you.
• Email — only what you send us at hello@recapyear.com.

Your users’ data — you are the controller, we are the processor

The rows in your CSV are your customers’ data, not ours. You decide what to upload and you remain the controller of it; we only process it to generate the recaps and share links you asked for, and we delete it as soon as the response is produced. Upload aggregate stats, not sensitive personal data — the product needs only a name or handle plus numbers.

The Article 28 terms that govern that relationship are set out in our Data Processing Agreement — it applies automatically, there is nothing to sign.

Note that a share link is public to anyone who has it: whatever you put on a card can be seen by anyone the link reaches. Don’t put anything on a card you wouldn’t want shared.

Lawful basis

• Generating recaps and delivering your export — performance of a contract / your request.
• Support and replying to you — your request / legitimate interests.
• Any marketing email — your consent, which you can withdraw at any time. (Our analytics is cookieless and needs no consent.)

How long we keep data

• CSV content: never stored — discarded once your cards or export are produced.
• Recaps and share links: not stored; they live in the link.
• Customer and transaction records (held by Polar as merchant of record): around 7 years (UK tax law).
• Technical logs: short retention; never the contents of your CSV.

Processors

Polar (payments, Merchant of Record), Google Cloud (hosting), Plausible (cookieless analytics) and Microsoft 365 (email). Some process data outside the UK under appropriate safeguards (UK IDTA / SCCs / adequacy). We don’t sell your data.

Your rights

You can access, correct, delete, restrict or object to processing, withdraw consent, and request portability. Email hello@recapyear.com. You may also complain to the UK ICO (ico.org.uk).

Cookies and browser storage

We set no cookies at all. But the law here covers anything stored on your device, not just cookies, so here is exactly what we keep in your browser:

• Your licence key — so your Pro unlock survives a page reload. Without it you would have to paste your key on every visit.

That is the whole list — one item. It stays in your browser, is never sent to us as a profile, and you can clear it at any time from your browser settings. Because each is strictly necessary to deliver something you asked for, no consent banner is required. Our analytics (Plausible) is cookieless and stores nothing on your device. We use no advertising, tracking or profiling technology of any kind — if that ever changes, we will ask for your consent first.