Privacy

Updated 16 October 2026. e-ID (👤.to, e-id.to, eid.to) is run by Adrian Galilea, in Spain, who decides what is done with your data (the controller). Write to gardener@untitled.garden for anything on this page.

What e-ID keeps, and why

Your account

When you sign in with GitHub or Google, e-ID receives your email, your name, your picture and your id there. You add the rest: your address (username), a line about you, your country, your links and their notes. This is needed to give you an account and your page (the contract between us). Your page and card are public by design: anyone, search engines included, can see what you put on them, and read them as data (/you/card.json, .vcf, .svg).

To sign you in, a session is kept: a random token and its dates, in a cookie and in the database. Not your IP address, not your browser. The token GitHub or Google gives e-ID is used once, when you link them, to read your public profile there, and then discarded.

Vouches

A vouch you write is shown with your name and picture on the page you wrote it on, if its owner pins it. You can remove it at any time, and so can the page's owner.

Visits

e-ID counts its own visits, with no third party and no cookie: which pages were seen, how a page was reached (the site you came from), your country, the size of your screen, how fast the page loaded, and which of a person's short links (/you/gh) were opened. To tell one visit from another within a day, your IP address and browser are mixed with a secret that changes every day and is then deleted, so nobody, e-ID included, can recognise you on another day. Your IP address and browser are never stored. Owners see only totals for their pages, never anyone's visit. This is e-ID's legitimate interest in knowing how it is used; you can object by writing to the address above.

Previews of your links

To show what is behind your links (your GitHub profile, your website's title, a video, a post), e-ID reads those public pages from GitHub, Telegram, YouTube, X and your website, and keeps what it read for a day.

How long

Your account and page: until you delete them.
Visits: 180 days (each page's events, 30 days); after that only daily counts per page and per person, with nothing about who.
When you delete your account, everything above goes at once, including your counts. Your address and your old ones are held from anyone else for 90 days, so links to them open nobody else's page; nothing else of yours is kept. The vouches you wrote on other people's pages stay there, signed by “a former e-ID member”, with no name or picture.

Who else handles it

Vercel (hosting, United States): every page is served by it. Data leaves the EU under the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
Turso (the databases, in Ireland).
GitHub and Google, when you sign in with them.

e-ID sells nothing and shows no ads.

Cookies

Two, both only when you sign in: the session, which keeps you signed in, and one with your address and picture so the page can show who you are. Nothing that follows you, so there is nothing to consent to.

Your rights

You can see, correct, take away or delete your data, restrict its use or object to it. Most of it you can do yourself: edit your card, delete your account from the account menu, and take your data with you: everything on your card is at /you/json (your name, address, country, the line about you, your links and their notes). What is not in it (your account's email, the vouches you wrote, the numbers of your page) is yours too: write to gardener@untitled.garden for it, or for anything else on this page, and you get an answer within a month. You can also complain to the Spanish data protection authority, the AEPD.

Age

e-ID is for people 16 and older.