Privacy Policy

Last updated: 10 July 2026

Data controller

SpyOnWeb.net is a service operated by Color Vivo Internet (Spain), the data controller responsible for processing your data. For any question about your data or this policy you can write to us at [email protected].

What data we process

We process: (a) your account data when you register (email address and a password stored in encrypted form); (b) the monitors and lookups you run in the service; (c) technical data such as your IP address, user agent and access logs, needed for security, abuse prevention and usage limits; and (d) our own session and preference cookies (theme and language).

Purposes and legal basis

We use your data to provide the service and manage your account (performance of a contract), to send you service communications and alerts for your monitors (performance of a contract), to ensure security and prevent abuse through usage limits and anti-bot protection (legitimate interest) and to comply with our legal obligations.

Cookies

We only use strictly necessary first-party cookies: a session cookie to keep you signed in and your theme and language preferences. We do not use advertising or third-party tracking cookies.

Providers and third parties

To provide the service we work with providers that act as data processors:

• Cloudflare Turnstile: to protect the login and registration forms against bots and automation we use Cloudflare Turnstile. Cloudflare may collect certain visitor information to determine whether a visitor is human; it is not used for advertising. See Cloudflare's Turnstile Privacy Policy: Turnstile Privacy Policy.
• Stackscale (Grupo Aire): infrastructure hosting in European Union data centres (Spain).
• Email delivery: we use email to verify your account and to send you the alerts for your monitors.
• Stripe: payment processor. It will only process data once paid plans are activated; the service currently runs in free mode.
• Sentry: if enabled, we log technical errors to diagnose failures; this may include technical data such as the IP address.

International transfers

Some providers (for example Cloudflare or Stripe) may process data outside the European Economic Area. In those cases the transfer relies on the appropriate safeguards required by the GDPR, such as the European Commission's Standard Contractual Clauses.

Retention

We keep your account data for as long as you keep the account active. Technical and security logs are kept for a limited and proportionate period. If you delete your account, we delete or anonymise your data except for anything we must keep by legal obligation.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email protected]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing does not comply with the regulations.

Minors

The service is not directed at minors and we do not knowingly collect their data.

Changes to this policy

We may update this policy to reflect changes in the service or in the regulations. We will always publish the current version on this page with its last updated date.