Legal
Privacy and GDPR
Bubble is a public crash terminal. It does not open accounts. It does not sell data. Contact is on X: @creainteractiva.
Controller
Creainteractiva publishes this terminal. For privacy questions write via X at @creainteractiva. There is no mailing list and no account inbox.
What is processed
Market prints from Yahoo Finance and the St. Louis Fed (FRED), plus a digitized JPMAM still for hyperscaler debt. The social desk adds Wikipedia pageviews, Hacker News Algolia, Google and YouTube related searches, Google News RSS, and Google Trending RSS. Those series are public. They are not personal data. The crowding census, crash overlays, and correlation matrices are computed from those prints on the server and cached for the UTC day.
What is stored on your device
Nothing until you choose. After Accept: localStorage only, as named above. No identifier. No sale to brokers. Clearing site data removes every key, including consent — the banner will ask again. Preference storage is consent under GDPR Article 6(1)(a). The consent record is Article 6(1)(c) / 6(1)(f) so we can remember that you answered.
What is not collected
Name, email, phone, payment, location, government ID, portfolio, or “know your customer” files. There is no sign-in. There is no newsletter. Server logs, if the host keeps them, are the ordinary web kind (time, path, user-agent) for keeping the terminal up — not a marketing file.
Your rights
If you are in the EEA or UK you can ask for access, correction, erasure, restriction, objection, and portability of personal data we hold. Because this terminal does not keep an account file, the honest answer is usually: we do not hold one. Write @creainteractiva anyway if you want that confirmed. You can withdraw preference consent any time with Manage cookies, or by choosing Necessary only. You can complain to your supervisory authority. Spain: AEPD. This is not legal advice.
Transfers and processors
Yahoo and FRED are the market-data sources. Google Fonts serves IBM Plex. The app is served from the host that fronts this preview. We do not run a separate analytics vendor on the desk. If a host in another country sees ordinary request logs, that is infrastructure, not a marketing transfer of a profile.
Children
The terminal is not directed at children. It does not knowingly collect data from anyone under 16.
Changes
If the desk starts keeping accounts, this page will say so before that ships. Until then the contract is: public prints, local preferences only with consent, contact on X.