Privacy notice

This English version is a courtesy translation. The Spanish version is the only legally binding one and prevails in case of any difference: read the Spanish version.

1. Data controller

Jorge Avila Meléndez ("we"), an individual whose address for receiving notices is Av. Insurgentes 4001 Interior 615, col. Colinas de San Jerónimo, Monterrey, Nuevo León, México, C.P. 64630, is responsible for processing the personal data of the people who use Prisma (prisma.jorgeavila.com).

Privacy contact: jorge.avila.m [arroba] gmail [punto] com.

2. Data we process

• Identification and contact data: name, email address and, if you choose to upload it, your profile photo. The photo is cropped to 256 px and its metadata is removed (for example, the location phone photos store).
• Access and security data: password (stored only as an encrypted, irreversible hash), IP address, browser, sign-in dates, the "Keep me signed in" keys (also as a hash), the log of changes to your account and the version of the terms you accepted, with date and IP.
• If you sign in with Google: your Google account identifier, your name and your email, with Google's confirmation that the email is yours. We don't receive your Google password or any other data from your account.
• From your use of Prisma: your feeds, the creators you add, their priorities and tags; which videos you watched and up to which minute; the feeds you follow and the stars you give; the Ideas, updates and replies you publish; the reports you make; your player preference; and usage events and daily activity statistics.
• From the waitlist, if you sign up: name, email, the topics you want to follow (if you write them) and the IP address you signed up from.
• From the contact form: your name, your email and your message, which reach us by email.
• If you visit without an account: IP address, browser, the pages you open and the public-feed videos you play.

We don't process sensitive personal data or payment data: Prisma is free. Please don't include your own or other people's personal data in what you publish.

3. Purposes

Necessary for the service:

• Creating and managing your account and giving you access.
• Running your feeds, building your video queue and remembering your progress.
• Showing other people what you decide to publish (public feeds, Ideas and replies), with your name and photo.
• Sending you service emails: verifying your email, recovering your password and invitations.
• Answering your messages and requests.
• Keeping things secure, preventing abuse and moderating reported content.
• Measuring how Prisma is used with internal statistics to run and improve it. These statistics never leave Prisma.
• Complying with legal obligations.

Waitlist: keeping your place, emailing you the invitation to Prisma in the order you signed up, and learning which topics interest you so Prisma covers them. You can ask us to remove you from the list at any time.

Optional (you can say no): measuring visits to public pages with Google Analytics, only if you accept it in the cookie notice. Saying no doesn't affect the service.

Optional (you can say no): sending you emails to help you get started and remind you of what piles up in your feeds (“Getting started”, “Your week on Prisma” and “We miss you”), and measuring with a parameter in their links whether they were useful. You can turn them off in your profile or with the link in each email; saying no doesn't affect the service.

We don't sell your data or use it for advertising. Prisma doesn't show ads.

4. What is public and what is private

Your feeds are private unless you make them public. Anyone can see a public feed, its Ideas and its replies, even without an account, and they may appear in search engines. Your name and photo are shown next to what you publish.

What you watch and up to which minute, your ratings and your reports are private: they are not shown to other people.

5. Who we share your data with

• Hosting provider: hosts the app, its database and its backups, and sends the service emails. It is required to protect your data.
• YouTube (Google): videos are played with YouTube's official player, so your browser connects directly to YouTube. When you create your account you choose whether to play "with your YouTube account" (on by default; you can change it anytime in your profile): the player then uses youtube.com, and YouTube can link what you watch to your Google account and record it in your history. If you turn it off, and for people who visit without an account, we use privacy-enhanced mode (youtube-nocookie.com). We don't send YouTube your name or your email. The Google's privacy policy applies.
• Sign-in with Google: if you choose "Sign in with Google", Google confirms your identity and shares with us only your name, your email and your account identifier. You can unlink it from your profile.
• Google reCAPTCHA: if active, it checks forms (sign-in, registration, password recovery, contact, Ideas and replies) to stop bots.
• Google Analytics: only on public pages, when not signed in, and only if you accept.
• Authorities: when a competent authority requires it under the law.

6. International transfers

Prisma and its database are hosted in a data center of our hosting provider, which may be outside Mexico, and Google's services operate from several countries. These transfers are necessary to provide the service and are made with providers that are required to protect your data.

7. Your rights (ARCO and more)

You can access your data, correct it, cancel it or object to its processing, as well as revoke your consent or limit its use. Write to jorge.avila.m [arroba] gmail [punto] com with your name, your account's email, what you are requesting and, where applicable, the document that proves your identity or representation.

We'll respond within 20 business days at most and, if it applies, we'll carry it out within the following 15 business days.

You can do many things yourself in Prisma: edit your name and photo, change your password, sign out of all your devices, export or delete your feeds, and choose how videos play. To close your account or leave the waitlist, write to us.

If you're not satisfied with the response, you can turn to the Mexican authority on personal data protection.

8. Retention

• Your account data, while it is active.
• Usage events (with IP and browser), 12 months.
• The copy of emails in the sending queue, including contact messages, 90 days.
• The waitlist, until you sign up or ask us to remove you from it.
• Backups are deleted automatically after 30 days.

If you close your account, we deactivate it and delete or anonymize your personal data, except the security log and what the law requires us to keep, for as long as necessary.

9. Security

We use encrypted connections (HTTPS), passwords and session keys stored as encrypted hashes, protection against forged forms, a limit on sign-in attempts, a change log and backups. No measure is foolproof: if we detect an incident that affects you, we'll let you know.

10. Cookies

We only use essential cookies to keep your session and your preferences. Analytics only loads if you accept it. Details in the cookie policy.

11. Changes

If we change this notice we'll let you know in Prisma. This notice is governed by Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations.

Last updated: October 8, 2026.