Privacy Policy

Last updated: 24 August 2026

LaGuía is a programming guide for live streams. We show which creators are on air and when they broadcast, and we take you to watch them on the platform where they stream.

This policy states exactly what data we handle. It is written so it can be checked against what the site actually does, rather than to cover every imaginable case.

What we do NOT do

Starting here, because this is usually the real question:

• We do not sell or share your data with third parties for commercial purposes.
• We do not host or record the streams. LaGuía links to and displays the platform's official player; the video never passes through our servers.
• We show no advertising and use no ad networks.
• We use no advertising trackers and do not profile people to sell audience segments.
• We never ask for your TikTok account in order to post anything on your behalf.

What data we handle

If you only browse the guide, without an account

You can use all of LaGuía without signing up. In that case:

• A local identifier in your browser. We store a random identifier in your own browser (local storage) to remember which broadcasts you flagged. It is not tied to your name or email, and it disappears if you clear the site's data.
• Server logs. IP address, date, time, requested page and user agent, for security and troubleshooting. Kept for 30 days at most.

If you set a reminder

To tell you when a broadcast is about to start, we need a way to reach you. We store only the one you chose:

• an email address, or
• a browser push subscription, or
• a phone number, if you pick WhatsApp.

Alongside that we store which broadcast it refers to and which language you want the notice in.

If you choose email, there is double confirmation. We send nothing until you click the confirmation link. An unconfirmed reminder never produces a message.

The cap is two notices per broadcast: one about fifteen minutes before and one when it starts. That limit is enforced by the database query itself, not by our good intentions. Reminder data is deleted once the broadcast ends.

If you create a creator account

• Name and email address.
• If you use a password, it is stored hashed, never in clear text.
• If you sign in with Google or TikTok, we receive that account's identifier and the basic profile data the platform hands us.
• The schedule you publish: titles, times, category and language.

If you connect your TikTok account

We use TikTok Login Kit with a single permission: user.info.basic.

From TikTok we receive:

• your user identifier (open_id and union_id),
• your display name,
• your profile picture URL.

What we use it for, and only that: confirming that the TikTok account you claim is really yours, and keeping the identifier so the link survives if you later change your username.

What we do NOT do with that permission: we do not post, comment, follow anyone, read your messages, download your videos, or access your audience data. The user.info.basic scope does not allow it, and we request no other.

You can disconnect the account at any time from your dashboard. When you do, we delete the identifier and any picture we had stored.

The channels in the catalogue

Only creators who joined themselves appear. We list nobody by our own decision: to be on LaGuía you sign in with the account of the platform you stream on, which at the same time confirms the account is yours.

That means we process no data belonging to anyone who did not ask to be here. The legal basis for everything in the catalogue is performance of the contract you accept when you register and your consent, not a legitimate interest of ours over third-party data.

If you ever ask to leave, we delete the channel and keep only the username on a suppression list, so we can honour that decision should we ever list accounts again. That list holds only the username, nothing about the person.

If you upload a picture for your channel

It is stored in our file storage. We record your explicit consent at the moment you upload it, because using a person's image requires permission. You can delete it whenever you want.

Cookies and storage

LaGuía uses the minimum:

| What | What for | | --------------- | ------------------------------------------------ | | Session cookie | Keeping you signed in if you have an account | | Language cookie | Remembering whether you chose Spanish or English | | Local storage | Your reminders when you have no account |

None of them is for advertising or cross-site tracking.

The TikTok player

This matters, so we state it plainly. Channel pages display TikTok's official player, which is content loaded from TikTok's servers.

That means TikTok receives your IP address and may set its own cookies when you visit one of those pages, exactly as if you had opened tiktok.com. That processing is TikTok's and is governed by their privacy policy, not by this one.

We use the official player rather than copying the video precisely so that views and metrics stay where they belong: with the creator and their platform.

Who we share data with

Only with providers the service needs, and only what each one requires:

| Provider | What for | What it receives | | ----------------------- | ------------------------------------------------ | ----------------------------------------------------------------------- | | TikTok | Player, identity verification and account checks | Your IP when a player loads; Login Kit data if you connect your account | | Amazon Web Services | Servers and file storage | Everything we store, on their infrastructure | | Cloudflare | Content delivery and protection | Connection data for each visit | | Resend | Sending email | Your email address and the message content |

If we ever enable WhatsApp notices, the messaging provider will receive the phone number you gave for that purpose.

We may also hand over data if compelled by a valid legal order.

How long we keep it

• Reminders: deleted once the broadcast ends.
• Server logs: 30 days at most.
• Creator account: as long as the account exists. Delete it and this goes with it.
• Suppression list: kept indefinitely, because it is the only thing that guarantees a removal stays honoured. It holds only the username.

Your rights

You can ask us for access to your data, correction, deletion, objection to processing, and portability. You can also withdraw consent where you gave it.

Write to [email protected]. We respond within 30 days at most.

If you are a creator and simply want to disappear from the catalogue, saying so is enough: we will not make you open an account for that.

Minors

LaGuía is not aimed at children under 14, and we do not knowingly collect data from anyone under that age. If you spot otherwise, tell us and we will delete it.

International transfers

Our servers and providers are in the European Union and the United States. Where data is transferred outside the European Economic Area, we rely on the European Commission's standard contractual clauses or an equivalent mechanism.

Security

All traffic is encrypted with HTTPS. Passwords are hashed. Database access is restricted to the server's internal network and is not exposed to the internet.

No system is infallible: should a breach affect your data, we will tell you and notify the relevant authority within the deadlines the law sets.

Changes

If we change something material, we update the date at the top and, when the change genuinely affects you, we tell you through whatever means we have.

Contact

LaGuía — [email protected]

If you want to complain to a data protection authority, you may do so with the one in your country of residence.