Privacy

Reactive Systems SL (CIF B10872950), Calle de las Revistas 7, 07817 Ibiza, Illes Balears, Spain, runs hypeibiza.com and decides what is recorded. Contact: [email protected].

Page views through Google Analytics 4, only if you accept analytics in the cookie bar. Basis: your consent (art. 6.1.a GDPR). You can withdraw it on the cookies page.

Outbound clicks to shops: the time, the product, the shop, the kind of page you came from and whether the browser is a phone or a desktop. No IP address, no name, no cookie. Basis: our legitimate interest in knowing which shops and pages are used (art. 6.1.f). Kept 90 days, then deleted.

Your language and country choice, in two cookies on your device, one year. Basis: necessary to show the site as you asked.

Server logs at our host (IP address, URL, time) for abuse and rate limiting, kept up to 7 days. Basis: legitimate interest in keeping the site up (art. 6.1.f).

Barcode lookups: the number you scan or type is sent to barcodes.gg to find the product. Nothing else about you goes with it.

Email alerts: the address you typed, the products and sizes you asked us to watch, your language, and your alert preferences. Purpose: to send the alerts you asked for. Basis: consent (art. 6.1.a), withdrawn by the unsubscribe link in every mail. Kept until you unsubscribe, then the address stays 12 months on a suppression list so we do not mail it again. The confirmation time and the id of the confirmation mail are the consent log. The weekly digest is marketing under LSSI art. 21 and is sent only when you explicitly request the weekly email; a product price or restock alert is not marketing.

No accounts, no editorial newsletter, no purchase data, no profiling, no sale of data. What you buy at a shop stays between you and the shop, under the shop's own privacy policy.

Railway Corp. (hosting, United States), Cloudflare, Inc. (network and DNS, United States), Google LLC (Analytics, only with your consent), Amazon Web Services EMEA SARL (email via SES, region eu-west-1, no transfer outside the EU). Transfers outside the EU rest on the EU-US Data Privacy Framework or standard contractual clauses.

Under the GDPR you can ask for access, correction, deletion, portability, or object to processing. Write to [email protected]; we answer within one month. You can also complain to the Spanish supervisory authority, the AEPD (www.aepd.es).