Privacy policy
Last updated: July 2026
1. Data controller
The controller responsible for processing the personal data collected at stair-tfg.me is Alejandro Varela Vázquez, in the context of an academic project (Final Degree Project, UDC). Contact: avarela@stair-tfg.me.
2. Data collected
When creating an account, only an email address and a password are collected; the password is stored encrypted (hashed) and never in plain text. No other personal data (name, address, payment details, etc.) is required to use the platform.
3. Purpose of processing
The data is used exclusively to create and manage the user account, keep the session active (via an in-memory access token and a technical httpOnly session-refresh cookie), and grant access to features such as training or simulating models.
4. Legal basis
Processing is based on the user's consent, given at registration, and on the need to perform the requested service (account management).
5. Cookies
STAIR uses two cookies, both technical and necessary for the site to function, and therefore exempt from the requirement to request prior consent: NEXT_LOCALE, which is set on any visit — even without being logged in — to remember the chosen language (Path=/, SameSite=Lax, no HttpOnly); and refresh_token, which is only set when logging in, to renew the session without asking for the credentials again (HttpOnly, Secure, SameSite=Lax, Path=/api/v1/auth, 7-day expiry). No analytics, advertising or third-party tracking cookies are used.
6. Data retention
Data is retained for as long as the account remains active. The user may request deletion of their account and associated data at any time by writing to avarela@stair-tfg.me.
7. Disclosure to third parties
Personal data is not disclosed or sold to third parties. As this is a non-commercial academic project, there are no data transfers for advertising or monetization purposes.
8. User rights
The user may exercise their rights of access, rectification, erasure, objection, restriction of processing and portability by writing to avarela@stair-tfg.me, stating the right they wish to exercise.
9. Right to lodge a complaint with the supervisory authority
If you believe that the processing of your personal data does not comply with applicable regulations, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain, or through its electronic office at www.aepd.es.
10. Security
Passwords are stored encrypted and access to data is restricted. No system is completely immune to security incidents; if unauthorized access is suspected, it is recommended to change the password and contact the controller.