Last updated: 12/10/2026
potterhead.net is an unofficial, non-profit fan site. We only collect the data needed to run your account and the website.
1. Data controller
- Controller: Rubén Sánchez Navas
- Contact (also to exercise your rights): potterheadapp@gmail.com
We process your data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
2. What data we process, why, and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Creating and managing your account (sign-up, login, profile) | Username, email address, password (stored hashed) | Performance of the user relationship (Art. 6(1)(b) GDPR) | While you keep your account; deleted on request |
| Saving your quiz results to your profile (Sorting Hat, Patronus, wand, character) | Quiz type, result, house, date (max. 50 results) | Performance of the user relationship (Art. 6(1)(b)) | While you keep your account |
| Site security and technical operation | IP address, browser, date and time of access (server logs) | Legitimate interest in securing the Site (Art. 6(1)(f)) | As per the hosting provider’s policy, normally no more than 12 months |
| Answering your enquiries or notices | Name, email and message content | Consent / legitimate interest (Art. 6(1)(a) / 6(1)(f)) | As long as needed to handle them and then for the limitation period of any possible liability |
| Comments (if enabled) | Name, email, IP and comment content | Consent (Art. 6(1)(a)) | Until you ask for removal |
| Non-essential cookies (if enabled) | See Cookie Policy | Consent (Art. 6(1)(a)) | See Cookie Policy |
We do not make automated decisions with legal effects about you. Quiz results are for fun and are not used to build profiles for commercial purposes.
Providing a username and email is necessary to create an account; if you do not provide them, we cannot register you.
3. Recipients and processors
We do not sell or share your data. The following may access it as processors, solely to provide their service:
- Web hosting provider: which hosts the website and its databases.
- Google Fonts (Google): the Site may load typefaces from Google servers, which means your IP address is disclosed to Google when you visit the Site.
- Any WordPress plugins installed (security, SEO, caching, analytics, etc.), which process data only on our behalf.
- Authorities or courts where there is a legal obligation.
Some of these providers may be located outside the European Economic Area (for example, in the USA). In that case, transfers rely on an adequacy decision (such as the EU-US Data Privacy Framework) or standard contractual clauses.
4. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent where processing is based on it, by writing to potterheadapp@gmail.com and stating which right you are exercising (we may ask you to prove your identity).
If you believe we have not handled your data properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es) or your local data protection authority.
5. Children
The Site is not aimed at children under 14 and we do not knowingly collect their data without parental or guardian consent. If you believe a child under 14 has registered without permission, write to potterheadapp@gmail.com and we will delete the account.
6. Security
We apply reasonable technical and organisational measures to protect your data (hashed passwords, restricted access, updates). No system is infallible; if a breach poses a risk to your rights, we will notify you as required by law.
7. Changes to this policy
We may update this policy to reflect legal or Site changes. The current version will always be published here with its update date.