Privacy Policy
This is an English translation. In case of any difference, the Portuguese version prevails.
We take your privacy seriously. This Policy explains what personal data we process on Best Number One (bestnumberone.com), why, on what legal basis, for how long and what your rights are, under the General Data Protection Regulation (GDPR) and Portuguese Law no. 58/2019. In short: we only collect what the Service needs to work, we do not sell data and we use no tracking or advertising tools.
1. Data controller
Virgula, Unipessoal Lda, Tax ID (NIF) 513485597, registered office at Avenida Marçal Pacheco, n.º 56, 1.º Esq.º, 8100-505 Loulé. Contact: info@bestnumberone.com.
2. Data we process
- Account data: email, username, display name, city, country, language, date of last login and password (stored only in encrypted form, which cannot be read).
- Content: the boards, blocks, titles and links you create; notes, to-dos and block settings (weather city, time zones, news feeds); the background photos you upload or choose; preferences (for example, opening links in a new tab).
- Personal usage statistics: how many times and when you opened each link, to show your “Most used” and suggest links you do not use. Only you can see them; you can turn them off or delete them in your account settings.
- Board sharing: the email of the people you invite to a board, and the result of the weekly check of your links.
- Technical and security data: your IP address is used temporarily and in encrypted form (hash) to limit login, registration and search attempts, for no more than 15 minutes. Our hosting provider may keep technical server logs (IP address, date, page requested) for security and operation.
- Communications: messages you send us and service emails (for example, password recovery).
City and country help us understand, in aggregate, where our users come from and improve the link templates (for example, local sites); they are not shown publicly. We do not ask for sensitive data and we do not build behavioural profiles.
Some blocks and features make our server contact other websites, without sending them any of your data: weather blocks ask the Open-Meteo service for the forecast (only the coordinates of the chosen city); news blocks read the RSS feed you entered; and once a week we check whether your saved links still work. Those websites see our server's address, not yours.
To protect registration and login against bots, your browser solves a small mathematical challenge in the background. We do not use external verification services (such as third-party CAPTCHAs) or cookies for this.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR, art. 6) |
|---|---|
| Creating and managing your account, storing and showing your boards and links | Performance of a contract (point b) |
| Security, preventing abuse and unauthorised access | Legitimate interest (point f) |
| Service emails (password recovery, notices about changes to the Service) | Performance of a contract (point b) |
| Complying with legal obligations and responding to authorities | Legal obligation (point c) |
4. Cookies
We currently use only essential cookies, which the Service needs to work and which do not require consent:
wordpress_logged_in_*,wordpress_sec_*andwordpress_test_cookie— keep you securely logged in;nsh_lang— stores the language you chose.
We do not use analytics, social media or advertising cookies. Fonts are hosted on our own server (no requests to Google). We will never use advertising cookies. If we ever introduce statistics that use non-essential cookies, we will ask for your consent before enabling them and update this Policy.
5. Who we share data with
- Web hosting provider (AlmourolTec, Lda), which stores the data on its servers on our behalf, as a processor, under a contract that complies with art. 28 GDPR. Service emails are sent from the same provider's mail server.
- Payment providers — only if you make a donation: PayPal or your bank process the payment data as controllers, under their own privacy policies. We only receive the data the provider passes on to us (for example, name, email and amount), which we keep for accounting and tax purposes for the legal period.
- Visitors to your public pages — only if you make a board public: anyone with the address can see the board title, your display name, the blocks and the links.
- People you share a board with — they see that board and your display name and, if you allow it, can edit it. They receive an invitation email.
- Public template gallery — only if you propose a board and it is approved: its title, description, your display name and the links are visible on the /modelos/ page and in search engines.
- Authorities, when required by law.
We do not sell or rent personal data. Whenever a provider processes data outside the European Economic Area, we ensure appropriate safeguards (for example, the European Commission's standard contractual clauses).
6. How long we keep data
- Account data and Content: while the account is active. When you delete your account, boards, links and photos are deleted immediately; they may remain in the host's backups until the end of their retention cycle, after which they are erased.
- Security data (encrypted IP): 15 minutes at most.
- Accounts unused for more than 3 years may be deleted after 30 days' notice by email.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and to withdraw consent where consent is the legal basis. Many of these rights can be exercised directly in the Service: edit your name and password in "Account settings", export your links (board "…" menu → Export) and delete your account. For the others, contact info@bestnumberone.com; we reply within one month. You also have the right to lodge a complaint with the Portuguese Data Protection Authority, CNPD (www.cnpd.pt).
8. Security
We use an encrypted connection (HTTPS), encrypted passwords, login attempt limits and restricted access to the server. No system is completely infallible; if a data breach puts you at risk, we will inform you and the CNPD as required by law.
9. Children
The Service is intended for people aged 16 or over. Between 13 and 16, permission from a person with parental responsibility is required. If you become aware that a child under 13 has created an account, contact us and we will delete it.
10. Changes to this Policy
We may update this Policy — for example, if we introduce new features. Relevant changes will be announced by email and/or a notice in the Service before they take effect.
11. Contact
For privacy questions: info@bestnumberone.com. See also the Terms and Conditions.