LEGAL

Privacy policy

What data this site handles, who is responsible, and how to exercise your rights. Based on Colombian data-protection law, with information for visitors from Europe.

Source updated: September 12, 2026. English edition: October 10, 2026.

Who is responsible for your data?

The controller is Jorge Andrés Arias García, an individual based in Chapinero, Bogotá D.C., Colombia. Lienzo is the brand and lienzo.tools is the domain; they are operated by one person, not a company.

contacto@lienzo.tools is the designated channel for personal-data inquiries and complaints. Requests and responses use this email address; there is no separate department or intermediary.

This policy follows Colombia's Law 1581 of 2012 and Decree 1377 of 2013, compiled in Decree 1074 of 2015, including the minimum contents in Article 2.2.2.25.3.1.

Data and purposes

Lienzo is static. The operator maintains no application backend or proprietary databases, user registration, forms, analytics, or tracking pixels. You do not need to provide a name, email, or other personal information to browse. Apart from technical hosting logs, which can include IP addresses, the operator does not collect visitor information. If you choose to email, the correspondence described below is received.

On your device

• agp-theme remembers your light or dark theme.
• agp-en-lienzo stores the English My Lienzo alias, saved palettes and CSS, favorites, visits, and badges. It is separate from the Spanish workspace and does not sync automatically.
• agp-lienzo stores the Spanish “Mi lienzo” area's alias, saved items, favorites, and activity. It is not an account.

These localStorage keys stay on your device. They are not transmitted, synchronized, or visible to the operator. Delete workspace data with “Start over” in English or “Empezar de cero” in Spanish where offered, or by clearing site data. File-based editing and QR generation are processed locally, without upload; domain favicon lookup makes the third-party requests described below. English carousel favorites are temporary and reset on reload.

English tools also use lienzo-en-estudio-panel for the settings panel, agp-en-emoji-tono for the selected skin tone, and agp-en-emoji-recientes for recently copied emojis. These preferences stay in your browser and can be cleared with site data.

Third-party services

Domain favicon lookup loads images from Google and DuckDuckGo and can request /favicon.ico from the entered website. Those services receive the requested domain and ordinary connection data such as your IP address. Popular-domain previews can also load when displayed. File editing and QR generation do not require uploading your files or QR contents to those services.

• Google AdSense: where the advertising tag is present, Google and its providers may use cookies and similar identifiers to serve and measure ads. Google is an independent controller, not the operator's processor, and handles that processing under its own policy.
• Google Fonts: where fonts load from Google's servers, it receives your IP address and user-agent. English pages currently use local fonts instead.
• YouTube: embedded videos use youtube-nocookie.com, its privacy-enhanced mode. Loading and playback may communicate technical data to Google; this does not mean no processing.
• MediaFire: article download buttons lead to hosted files. YouTube provides demonstrations and directs traffic to the article; downloads are not hosted on YouTube. Following a MediaFire link takes you to that service and its terms.
• Spline: the Spanish homepage downloads its rendering program from cdn.spline.design; the scene file is hosted on Lienzo. Blog scene previews load when activated.

Email correspondence

Writing to contacto@lienzo.tools supplies your name, email address, message, and attachments. They are used only to handle and respond to the request. They are not shared for marketing, added to a mailing list, or used for unsolicited messages.

The domain mailbox is hosted by Hostinger, also the website's hosting provider, under its service policies. Messages and replies are retained for the time needed to resolve the matter and record its resolution, then deleted. You may request earlier deletion through the same email address.

The purposes are: supporting the site through advertising; remembering theme and local “Mi lienzo” content; delivering fonts, videos, downloads, and 3D previews; and handling correspondence, complaints, and rights requests. Data is not sold, used for the operator's commercial profiles, or used to make automated decisions about you. No other use is made beyond those purposes and the named services.

Advertising

The site's advertising configuration requests non-personalized ads in every region. Google and its providers may still use cookies or identifiers to deliver and measure ads, limit frequency, and prevent fraud. Lack of personalization does not mean lack of processing.

Google's message for the EEA, United Kingdom, and Switzerland provides purpose and provider controls where it is active. Read Google's partner-site information and privacy policy. You can also manage advertising through Google Ad Settings, Digital Advertising Alliance choices, and Network Advertising Initiative choices. Ads may still appear; opting out changes personalization. Browser cookie controls do not disable Lienzo's tools.

Visitors from the EEA, United Kingdom, and Switzerland

The site is operated from Colombia. On pages where Google's advertising message is used, visitors in these regions can consent, decline, or manage options. Consent to advertising storage or access is distinct from purposes for which a provider states a legitimate interest. Review those purposes and object through the options; not all legitimate-interest controls start disabled. Non-personalized advertising is requested globally, but advertising cookies can still require consent management.

Google LLC and Google Ireland Limited are independent controllers, not processors for the site operator. Exercise rights concerning Google's processing with Google. As described in the Spanish source policy, Google relies on the EU–US Data Privacy Framework or standard contractual clauses for applicable transfers to the United States; consult Google's current terms for its processing.

You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal:

• Use “Privacy and cookie settings” in the footer of a page where Google's message is active. It reopens the message and replaces the prior choice. Privacy and cookie pages do not carry the advertising tag, so that control does not appear there. Current English pages also omit the tag.
• Use Google Ad Settings from any page or country.
• Clear site cookies so the message can appear on a later visit to an applicable page.

You may complain to your country's supervisory authority, including Spain's AEPD, the UK's ICO, or Switzerland's PFPDT. Tool inputs and “Mi lienzo” data remain in browser localStorage and are not international data transfers.

Your rights

Article 8 of Colombian Law 1581 of 2012 recognizes the rights to:

• Know, update, and correct personal data, particularly if partial, inaccurate, incomplete, or misleading.
• Request proof of the authorization given for processing.
• Be informed, on request, how your data has been used.
• Revoke authorization and request deletion where processing does not comply with the law or constitutional principles and safeguards.
• Access processed personal data free of charge.
• Complain to the Superintendencia de Industria y Comercio (SIC) about breaches of data-protection law.

For the operator, these requests mainly concern correspondence you have sent, which can be accessed, corrected, or deleted on request. For data controlled by Google, exercise the right with Google. For other requests, the response may explain what the operator does and does not hold.

How to exercise your rights

Email contacto@lienzo.tools with your name, reply address, the right you wish to exercise, and the relevant facts. Supporting screenshots or URLs can help; no special form is required. Jorge Andrés Arias García handles inquiries and complaints directly.

• Inquiries: within ten (10) business days of receipt. If an extension is needed, you will be informed before that period expires, with reasons and a response date no later than five (5) business days after the original deadline.
• Complaints: within fifteen (15) business days from the day after receipt. If an extension is needed, you will receive reasons and a new date no later than eight (8) business days after the original deadline.

If the response is unsatisfactory, you may contact the SIC. Article 16 of Law 1581 requires first completing the inquiry or complaint process with the controller: submit through the designated channel and receive a response, or allow its deadline to expire without one.

Effective date and retention

This policy took effect on August 23, 2026 and remains effective while the site operates, until replaced. Changes are published here with an updated date.

Local data stays until you delete it. Google determines advertising-cookie expiration under its policy. The operator has no proprietary server or database of personal data; email correspondence is kept in the designated mailbox only as long as needed to resolve the matter and record its resolution.

Related information

Read the cookie policy, legal notice, and contact page.