Privacy Policy and Data Protection

What we keep (and why)

Just enough for the place to work. If you have an account: your email or phone number, which is your key to get in (there are no passwords here), your Magikito name and handle, and whatever you add to your profile: where you're from, a bio, your social handles. If you buy: name, address and phone so the parcel arrives. And what you bring: audio, text, examples and votes.

We do not sell your data or hand it to anyone for advertising. We use it for what this page says and nothing else. What we do share with a few trusted processors (payments, shipping, email, artificial intelligence) is explained below, with names.

Your voice and what you contribute

When you record and publish something (a story or a joke in the Estudio, your voice on an expression, or an improvement to a dictionary entry from the form or from the guardian Magikito's chat), it is published on Magikitos publicly, with your Magikito name and handle as visible authorship, and anyone can listen to it, read it and share it. We transcribe it to show the text next to the voice. Stories also go out on our podcast (RSS feeds that podcast apps pick up), so they can be heard outside this website too.

Before you send anything we ask your permission once, with a checkbox that says exactly this, and we remember it on your account so we don't ask again. What you record in the Estudio and don't publish stays as a private draft. If you want something already published taken down, ask from Settings or write to [email protected] and we remove it within one month at the latest, no questions asked.

All community audio is from real people, verified, never AI-generated. You can read the details in our moderation policy .

Magikito companions resting together in the forest

Your account, your name and your setines

You don't need to sign up to take part: the first time you bring something we draw a Magikito name and handle for you, and your contribution is published under them. That anonymous identity lives in your browser; if you don't claim it with your email and leave nothing behind, it is recycled after seven days. If you claim it, your contributions travel with you.

Your profile is public: name, handle, where you're from if you said so, your bio and socials if you added them, what you've contributed and your setines, which measure what you've brought (they are not money and cannot be redeemed for anything). What moves most enters public rankings by month, year and all time. Other people can send you a private message from your profile: you receive it inside your account and, if you have it switched on, an email with the beginning of the message. You can block anyone. If you enable push notifications, your browser gives us a technical address to deliver them, which you can revoke at any time.

Artificial intelligence: what it does and what it doesn't

We use AI models for specific jobs: transcribing the audio the community publishes (with Groq and, if that fails, OpenAI), reviewing every dictionary contribution (a model decides whether what you propose fits the entry and drafts the guardian Magikito's reply), setting aside what can't be published from the Estudio, titling and categorising jokes and stories, translating the site into six languages, drawing illustrations and profile portraits (OpenAI), cleaning background noise from voices (ElevenLabs) and laying a music bed under stories.

What we do NOT do: we don't build profiles about you or make automated decisions about you or your account. Automated decisions are about content (whether an expression fits, whether an audio can be published); you can always appeal them from the notice itself or by writing to us, and a person reviews them. When you write to us on WhatsApp, by email or through the form, a person reads and answers you. We don't train models on your data or your audio.

The text and audio being processed travel to those providers only to do that job, as our processors. OpenAI explains its side in its privacy policy and Groq and ElevenLabs have their own.

Who we share your data with

Only with those needed to make something work, each for its own task: Stripe takes the payment (we never see your card), Packlink gets your name, address and phone so the parcel arrives, SendGrid delivers our emails and tells us whether they were opened or a link was clicked, Cloudflare serves the site and checks you're a person (Turnstile), Meta carries WhatsApp messages if you write to us there, and OpenAI, Groq and ElevenLabs process text and audio as described above.

Some of them are outside the European Union. With those we use the safeguards the law requires (the European Commission's standard contractual clauses) and send them only what's necessary. None of them may use your data for their own purposes.

Cookies & Tracking (the forest breadcrumbs)

We only use technical cookies: the ones needed for your session, the cart and the shop to work. None for advertising and none from third parties. That's why you won't see a cookie banner: there is nothing to accept.

We don't use Google Analytics or any third-party tracking tool. We measure on our own: which pages are visited, how much of an audio is listened to, what gets shared. That data never leaves here.

If you block cookies in your browser, the shop and your session will stop working properly. That's the only thing you lose.

How we measure

Your browser stores an anonymous identifier (a random code, not your name) so we don't count the same device twice. With it we measure visits, listens and reads, and those events are deleted after 400 days. If you're signed in, that measurement is linked to your account, which is what lets us, for example, not count your own listens in the ranking of what you brought.

The mushrooms you rate a joke, a story or an expression with are stored with that same device identifier, so each device votes once per piece and can change its vote. The mushrooms you give an audio reply work the same way. After 400 days we delete the identifier and the vote remains only as a number in the average. Your browser remembers what you voted so it can mark it for you.

Payments and orders

Payments go directly through Stripe, which is super secure and reliable. We never see or store your card details. Not the number, not the CVV, nothing. Everything goes straight between your bank and Stripe, without us touching any of that sensitive information.

To ship your order, your name, address and phone go to Packlink and the carrier. Your order emails (confirmed, shipped, delivered) are also copied to us, so we can help if something goes wrong. If you want to know more about how Stripe works, take a look at Stripe's privacy policy.

How long we keep things and how they get deleted

What you publish stays published as long as you want: that's what gives this place its value. Your account, your accepted contributions, your setines and the rankings are kept while the account exists. Everything else expires on its own: measurement after 400 days, read notifications after 180, chats with the guardian Magikito after 90, rejected contributions after 180, email logs after 400 and the device identifier on mushroom votes after 400.

You can delete your account yourself from Settings, in one click and instantly: your personal data, your messages and your votes are erased. What you published on a page of its own (joke and story audio, expressions and voices) stays in the house without your name, because other people already use it; if you want it gone too, request the deletion of your content from Settings (or write to us) and we remove it within one month at the latest, as the law sets. The audio replies you left on someone else's piece are deleted outright, because a reply only means something with the name of whoever gave it.

Your rights

You have the right to access your data, correct it, erase it, restrict how we process it, object to that processing and take it elsewhere. Whatever you cannot do yourself from Settings, ask us by writing to [email protected] and we handle it within one month of receiving it at the latest, which is what the General Data Protection Regulation sets. You can also complain to the Spanish Data Protection Agency (AEPD) if you think something is not right.

The controller of this data is Magikitos, in Taramundi (Asturias, Spain), and the email above is how to reach us about anything on this page.

This place is meant for people aged 14 and over. If you're younger, ask an adult to be with you before leaving your voice or creating an account; if we notice an account belonging to someone younger without that, we remove it.

Contact & Questions (let's chat)

If you have any questions about this privacy policy, about how we handle your data, or you simply want us to explain things in a different, clearer way, write to us. We love chatting and clearing up doubts. Honestly.

You can reach us at [email protected] or through the contact form. A person answers you, usually the same day.

Thanks for trusting the Magikitos and for taking the time to read this. We look after your data as if they were our own forest secrets. With respect, with care and with all the seriousness they deserve.

Last reviewed: September 5, 2026