Privacy and cookies

The Centre for Data and Artificial Intelligence of the Universidad de Concepción (CDIA), which maintains PuroChile. There is no separate legal representative and no designated prevention officer.

For anything in this policy, including exercising your rights: the contact form.

Only if you accept in the cookie notice; if you decline or do not answer, nothing from Google is loaded.

What is recorded: a cookie (_ga) in your browser with a random identifier, lasting up to a year; the pages you open; the links and buttons you click, where on the page they were and where they led —never what you type—; the date and time, language, type of device and browser, and an approximate location (country and city). Google Analytics does not store your IP address.

Why and on what basis: to learn what is read and used and improve the site, with your consent as the basis (art. 12). Google signals and ad personalisation are turned off: it is not used for advertising.

Who receives it and for how long: Google LLC, as processor. Events carrying an identifier are kept for two months; after that only aggregate figures that identify no one remain.

You can withdraw consent at any time with the «Cookies» button at the foot of every page or the one below: measurement stops and Google's cookies are deleted. Withdrawing it does not make what was measured before unlawful.

What is kept: when you sign in with Google, Google gives PuroChile your name, your email and an identifier of your Google account; nothing else (not your photo, contacts or mail). With that, your account, its status and date are kept; the places and indicators in your tracking matrix, if you build one; a fingerprint of your tokens and session that cannot be turned back into them; how many MCP queries you make per day and per tool; and an activity record of your account (when you signed in, connected Claude or generated a token), without IP, deleted after 180 days. The content of your questions is not kept. If you pre-registered before October 2026, also your organisation and intended use, if you wrote them.

Why and on what basis: to open and manage your account, let you connect the MCP to Claude and write to you about the service if needed. The basis is your own request: the performance of the service you asked for (art. 13, letter c). It is used for nothing else and shared with no one. Google knows you signed in to PuroChile, as with any service where you use your Google account; that is governed by Google's policy.

The session: when you sign in, purochile.ai sets a session cookie (__Secure-pc_sesion) that only recognises you on purochile.ai and mcp.purochile.ai, cannot be read by JavaScript, lasts up to 30 days and is deleted when you sign out; and another (pc_entro) that only says a session is open, so the header can read «My account». Both are strictly necessary for what you asked for and are not used for measurement. During the ten minutes of the trip to Google and back there is also a cookie (__Host-pc_ida) that stops another browser from completing your sign-in.

Where and for how long: in a database run by Cloudflare, Inc., as processor, outside Chile. It is kept while your account exists. You can delete it yourself at purochile.ai/cuenta («Borrar mi cuenta»): everything is erased at once.

Accounts are not aimed at children under 14.

What is kept: your name, your email, the topic you choose and your message, with the date. Why and on what basis: to read it and answer you, because you asked (art. 13, letter c). Only the person who runs PuroChile reads it, and the answer reaches your email from a personal address.

Where and for how long: in the same database run by Cloudflare, Inc., until what you asked for is resolved and no more than a year after; sooner, if you ask.

Every visit to purochile.ai goes through Cloudflare, which needs the IP address, browser, requested address and time to deliver the site and protect it from abuse. The basis is the legitimate interest (art. 13, letter d) in keeping the site available and secure; those records are kept for a few days.

The brake against automated attempts keeps your IP only as a salted hash, which cannot be turned back into it, and deletes it the next day.

Two preferences in local storage, which never leave your device: the look of the charts (painted or classic) and your answer to the cookie notice with its date, so you are not asked again for a year.

Google and Cloudflare process data in the United States and other countries. As of this version there is no decision by Chile's Personal Data Protection Agency recognising an adequate level of protection in the United States; the transfer relies on the contractual data-protection clauses both companies apply to their services (art. 27).

Everything travels encrypted (HTTPS). Access tokens, sessions and the anti-abuse IP are stored as hashes that cannot be read back. There are no passwords to leak: you sign in with Google. The panel where accounts are managed only opens for the administrator's Google account, and every door stops anyone who tries guessing credentials. And only what is needed is asked for: name, email and the Google identifier.

You can ask for access to your data, its rectification, erasure or portability, object to its processing and ask for it to be blocked while your request is resolved. Write to us through the contact form (topic «My personal data») saying who you are, an address to reply to and what you are asking for. It is free.

The answer arrives in writing within 30 calendar days of receiving your request, a period that may be extended once by another 30.

If your request is refused or not answered in time, you can complain to Chile's Personal Data Protection Agency within the following 30 working days.

No automated decisions are made about people and no profiles are built. The only automatic thing is the brake against abuse: a connection that tries to sign in too many times, or requests too much data in a minute, is asked to wait for a while.

Its version and date change, above, and the cookie notice asks you again: a yes given to one version does not carry over to the next.