Prim Privacy Policy

Who processes your data

Prim is an application by Germán Ezequiel Laso Andino, trading as ProfBlu. He is the data controller for your account and for the public catalog it publishes.

Owner: Germán Ezequiel Laso Andino, sole trader (libero professionista).
VAT number (Partita IVA): 04702090988. Italian tax code (codice fiscale): LSNGMN88S04Z600M.
Professional activity not registered in the Italian Business Register (no REA number).
Contact address: Via della Sega 1, 38080 Verdesina, Porte di Rendena (TN), Italia.
Email for anything about your data: socials@profblu.com.

No data protection officer has been appointed: the law does not require one for an activity of this size.

If you use Prim with an account

Prim has no password of its own: your identity is the same centralised account you use across the rest of the platform, and you create it from Prim's «Sign in» button. With that account:

You vote in the catalog's polls. Each vote stores your account identifier, the option chosen and when you voted; there is at most one vote of yours per poll, and no vote is accepted without a real account behind it: there is no anonymous or guest voting.
You mark favourites — a channel, a show, a person, an event: your account identifier and what you marked are stored.
You get alerts on your phone, if you use the app and allow it: we store the push token the phone's system generates for the app (through Expo's push service, which delivers them via Apple or Google), whether the phone is iOS or Android, its language, its time zone and when it was last used; plus which alerts you have switched on and the alerts we send you, with the outcome of each delivery. When you sign out of the app, the phone is unregistered and stops receiving alerts; the record of alerts already sent to you is deleted with your account.

Prim's database does not store your IP address. Two other places do see it, as on any website: the web server writes it in its technical logs together with the page requested and the browser, and those logs delete themselves after 15 days; and the central sign-in stores the IP and browser of each sign-in, for your account's security. What lets you request each page once inside is not stored anywhere: it lives only in the browser's memory while you use the application. And what keeps you signed in without retyping your password is stored in your browser, only while the tab is open, and is deleted when you sign out; in the app, in the phone's secure storage, until you sign out.

You can delete your account from the app (You → Your account → Delete my account). Your account, what you follow, your phones and their push tokens, and your alerts are deleted; your votes are no longer linked to your account, but they still count in each poll's result. Without the app, how to request it is explained at prim.profblu.com/en/delete-account.

Deleting your account does not, today, delete your plays in games, nor the voice notes you sent to a channel (voice notes are not tied to your account: see below). For a voice note, use the deletion link we gave you when you sent it; for your plays, write to socials@profblu.com and we will delete them.

If you only visit the website

We count visits with Umami, a measurement program that runs on a server of ours and sets no cookies or identifiers in your browser. From your IP and your browser it computes a visit identifier that changes every month (the IP is not stored) and records which pages were viewed, which site and campaign you came from, the type of browser, system and device, the language and the approximate country and city. We use it only for aggregate figures: how many people arrive, from where and what they look at. More detail in the cookie policy.

If you play a show's game

Some shows open live games — questions, polls, guessing a word — and the audience plays from their phone, on a Prim page (prim.profblu.com/play/…). If the game allows it, you can join in two ways:

With your Prim account. The first time we ask you for a nickname, which is the name you appear under on the scoreboard. We store your account identifier, the nickname, when you joined and what you answered in each round, with its time.
As a guest, with just a nickname, without an account. We store the nickname, when you joined and what you answered. To recognise you if you reload the page, we give you a random key that is kept in your browser; we do not keep that key, only a fingerprint that cannot be turned back into it.

What is public. Your nickname may appear on the game's scoreboard and podium, on the show's screen and on the channel or episode pages (for example, "Marcos won"). In free-answer rounds, what you write may appear on screen: it first goes through a word filter, and whoever runs the game can hide it. Each channel's "Top players" list only shows accounts that said yes to appearing on it.

How long. Guests' answers are deleted after 30 days; only each round's overall results remain (how many people chose each option, who scored) and the nickname on that game's scoreboard. Answers from people playing with an account are kept as long as the game exists; if you want us to delete yours, write to us with the game's code.

If you send a voice note to a channel

When a channel opens its inbox, a button to send it a voice note appears on its page, on the website (prim.profblu.com/c/<channel>/voice) and in the app. You record with the microphone — your browser or phone asks for your permission first — and send it. If the channel allows it, you do not need an account.

What we store. The voice note, converted to a lightweight format and within the maximum length the channel set; how long it lasts; your name and city, only if you typed them (they are optional); when you sent it and when you accepted the notice. Also, so that nobody sends more than one voice note per minute and so that the channel can block anyone who abuses it, we keep a fingerprint of who sent it: it is computed from your account if you are signed in; if not, from a random identifier that the website or the app keeps on your device; and if there is neither, from your IP address. Your account, that identifier or your IP are not stored as such: only the fingerprint.
What for. So that the channel's team can listen to it and, if they want, put it on air. Before sending it you tick "I agree it may go on air". While it is in the queue to go on air, the name you left and the voice note are available to the show's screen; your city is not.
Turning it into text with AI. When Prim has transcription switched on, the voice note is sent to OpenAI, which turns it into text; with that text, a second request to OpenAI summarises what it is about and its tone, and flags anything worth listening to before putting it on air. So that it spells proper names correctly, the names of the channel, its shows and their hosts go along with the audio. We do not send it your name, your city or the fingerprint. The AI flags, but does not decide: what goes on air is chosen by a person on the channel.
Who sees it. The channel's team — its verified owner and the editors they added — in their inbox, together with what the AI said. The team can download a day's voice notes with their text; from then on, that copy is in the channel's hands. The voice note is kept in Prim's file storage (see Where it is processed).
How long. 90 days from when you sent it; then the voice note, its text and its topics are deleted. Those that went on air stay with the episode they played in, because they are part of that broadcast. What has already played in a broadcast cannot be removed from that broadcast by Prim: that belongs to the channel.
How to delete it. When you send it we give you a deletion link (prim.profblu.com/voice/…). Keep it: with it you delete the voice note yourself whenever you want, whatever its state, even if it already went on air. The voice note and everything the AI said are deleted; all that is recorded of the deletion is when it happened and for which channel, never who asked. If you lost the link, write to socials@profblu.com with the channel, the day and the approximate time.

If the show connected its WhatsApp

A show can connect its WhatsApp Business number to Prim, and only through the official route of Meta, the company behind WhatsApp. If it did, the messages you send to that number also reach Prim: voice notes, texts and photos. If the show did not connect it, Prim receives nothing from WhatsApp.

For each message we store its content, your WhatsApp profile name, your phone number, encrypted, and a fingerprint of your number, which lets the channel block you. The channel's owner sees your full number; their editors, only part of it.
Voice notes are turned into text and summarised like those from the inbox; texts and photos are not.
The team can reply with a short text from the same number, within the 24 hours WhatsApp allows.
They are kept for 90 days, like those from the inbox, except voice notes that went on air, which stay with their episode.
There is no deletion link on WhatsApp: to delete what you sent, write to socials@profblu.com with your number and the show.
What happens inside WhatsApp is governed by WhatsApp's privacy policy, not this one.

Advertising placed by the channels themselves

The verified owner of a channel, a show or a person — whoever proved that page is theirs — can place an advertising piece on their own page: an image, a line of text and a link. It always carries the word "Advertising" next to it. Before it is shown, someone at Prim reviews it and approves or rejects it. Prim does not sell that space, does not charge for it and does not act as an intermediary: the space belongs to the page's owner, and what they advertise is their responsibility.

What we measure. How many times each piece was seen (it counts once it has been on screen for a second) and how many times it was clicked, added up per day. We do not store who saw it or who clicked it: not your account, not your IP, no identifier. The piece sets no cookies and stores nothing in your browser.
When you click it. The link first goes through Prim (prim.profblu.com/out/…), which adds up the click and takes you to the advertiser's page. We add some tags (UTM) to that address that tell the advertiser the visit came from Prim and from which ad; they carry no data about you. Once you reach their page, their privacy policy and cookies apply.
The image is downloaded from our image storage, like the site's other photos.
If you are an owner and place a piece: we store which account uploaded it, with which verification, its dates and its history (when it was submitted, who approved or rejected it and why). With that we show you your figures and tell you when it is approved or rejected.

The public catalog of people, measured and commented on

Prim measures audience for YouTube, Twitch and Kick channels: how many minutes each broadcast was watched, aggregated by time slot, never linked to who was watching. From the YouTube comments we analyse to extract a show's topics, we store what YouTube already makes public about each comment: the commenter's display name, channel identifier and link and profile picture, the text, its likes, its date and edit date, and the replies with the same data. It is not data you give us: it is the same data YouTube publishes in its API, and only that — we do not store your email, your IP, or anything not already public on YouTube. From live chat we store only aggregate figures — messages, emotes, subscriptions, donations per minute: never the text of a message nor the identity of who wrote it.

For creators: how catalog profiles are built

Prim publishes a catalog of media personalities — hosts, panelists, regular guests of the shows we measure. It is important to state clearly how it is built, because this data is not requested from you: we gather it from public sources (Article 14 GDPR, which governs precisely this case: when personal data is not obtained from the data subject themselves).

Where it comes from. From the shows we measure (who hosts, who takes part, who was a guest) and from a web search tool (Exa), with which we find public information about the person — their biography, their photo, their social media. The biography, photo and social links are filled in automatically when the profile lacks them, and an AI model checks that the photo is a portrait of that person; we correct it by hand when we spot a mistake or when you ask us to. Other findings (interviews, events, press pieces) stay pending human review before they are published.
What is published: name (or the alias by which you are known, if we cannot find your full name), a short biography, a photo, your public social media (Instagram, X/Twitter, TikTok, YouTube, Twitch, Kick) and your public track record in the shows we measure: where you work, where you have been a guest and whether you are live. The biography is summarised by a language model from the public page it comes from (the summary generated by the Exa search engine) and, if that source is not in the catalog's language, it is translated with another language model (OpenAI). Next to the biography we say that an AI wrote it and link where the original text came from.
What we do not do: we do not publish private contact details, an address, or any special category of data under Article 9 GDPR.
How to request a correction or the removal of your profile. At the end of every profile there is an «Is this your profile?» notice with the email address socials@profblu.com and the subject already filled in with the profile's address. Tell us what you want — correcting a fact, replacing the photo, or removing the profile — and we do it. If you request removal, we record in the system that it must not look for information about you again and we remove the biography, photo and social links from your profile. Your name may still appear in the credits of the shows you took part in, because it is part of each broadcast's public information. There is no public self-service form for this today — only the email address; if we build one, this page will say so before it exists.

Why, and on what legal basis

To publish the catalog: legitimate interest in offering public, truthful information of general interest about the activity of people with a public profile in the media we measure, with the possibility of objection and removal described above.
To measure audience and extract topics: legitimate interest in analysing public content (videos, broadcasts, comments) to produce aggregate statistics and summaries.
To count website visits: legitimate interest in knowing how the site is used, with the cookie-free measurement described above.
For your account, your votes, your favourites and your plays: because it is what is needed to provide those features you yourself activate.
To receive your voice note, keep it and let it go on air: your consent, which you give by ticking the box before sending it. You can withdraw it whenever you want by deleting the voice note with its link.
To turn voice notes into text and summarise them with AI: the legitimate interest of the channel and of Prim in sorting many voice notes and in flagging what is worth listening to before putting it on air. If you do not want this, delete the voice note.
For the fingerprint, the one-per-minute limit and blocking: legitimate interest in preventing abuse.
For the messages you send to a show's WhatsApp: the show's legitimate interest in receiving what you chose to send it that way.
To measure the channels' advertising: legitimate interest in giving the owner figures for their piece, added up per day and without knowing who is watching.

We do not sell or share your data with anyone for commercial purposes. Prim does not sell advertising: the only advertising shown is what each owner places on their own page, described above, and it uses none of your data.

Where it is processed, and who else sees it

Hetzner (Hetzner Online GmbH, Germany) hosts the server, the database, the backups and the image storage (profile photos, logos and covers). Umami runs on that same server.

To enrich the catalog we consult Exa (web search and biography summaries) and OpenAI (topic extraction, biography translation and checking that a photo is a portrait of the person). To place event venues we consult Google Places. All three are in the United States; we send them only what each task needs — names, already-public texts and photos, place names — never your account data. To measure audience and comments we consult the public YouTube, Twitch and Kick APIs.

For phone alerts, the push token and the text of each alert go through Expo's push service, which delivers them via Apple (APNs) or Google (FCM).

Voice notes from the inbox and what arrives through WhatsApp (voice notes and photos) are kept in Prim's file storage, Hetzner Object Storage (Hetzner Online GmbH, Germany), the same one used for images. When transcription is switched on, the voice note and its text go to OpenAI through its European address; we do not send it your name, your city or your number. If a show connected its WhatsApp, messages arrive through Meta; if it did not, Meta is not involved. And the team of the channel you sent the voice note to listens to it and reads it, as explained above.

There is nobody else. Prim uses no third-party advertising tools: no pixels, no ad networks, nothing that follows what you watch in order to show you ads.

For how long

Catalog profiles: as long as the person has a public profile in the media we measure, or until they request removal.
Your account, votes, favourites and the alerts we sent you: as long as your account exists.
YouTube comments and audience figures: today they are kept with no fixed term, because the topics and history of each show are computed from them. If you want us to delete a comment of yours, write to us.
Inbox voice notes and WhatsApp messages, with their text and topics: 90 days; those that went on air, with their episode. You can delete them earlier whenever you want.
The note of each requested deletion (only when and for which channel, never who): no fixed term.
A channel's block list (fingerprints only): until the channel removes them.
Guests' answers in games: 30 days. Those of people playing with an account: as long as the game exists.
The channels' advertising figures: no fixed term; they are daily totals that identify nobody. The pieces and their history: as long as the page exists.
The web server's technical logs (IP, page requested, browser): 15 days.
Umami visit figures: no fixed term; they do not store your IP.
Encrypted database backups: 35 days. What you delete also disappears from them when the last backup that contained it expires.

Your rights

You may exercise the rights the General Data Protection Regulation gives you: access, rectification, erasure, portability, objection, restriction and withdrawal of consent without affecting what was done before. If you are a cataloged person, see the For creators section above. To delete a voice note, use the link we gave you when you sent it. For everything else, write to socials@profblu.com. We reply within the legal deadline, one month at most.

You may complain to a supervisory authority: in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it); in Spain, the Agencia Española de Protección de Datos (www.aepd.es); or the authority of the EU country where you live.

Minors

Prim's catalog deliberately does not include minors. If you find that a profile belongs to a minor, write to us and we will remove it.

Security

Communications are encrypted (TLS). Access to data depends on each person's role. If we detect a breach that affects you, we will tell you, and the supervisory authority within the 72 hours the law sets.

Changes

If we change what we do with data, we change this text and move the revision date.

Words we use

Fingerprint: a summary computed from a piece of data (your account, a random identifier, your IP or your phone number) mixed with a secret Prim key. It lets us recognise that two submissions come from the same place without storing the data.
File storage: where images and voice notes are kept, separate from the database.
Verified owner: whoever proved to Prim that a channel, a show or a person's page is theirs.
UTM: tags added to a web address so the destination site knows where the visit came from.
AI provider: the company whose models turn voice notes into text and summarise them; today, OpenAI.

Technical detail, if you want it

Voice notes: up to 3 MB is accepted and they are stored as Opus in Ogg, mono, at 32 kb/s. One per minute per sender, to any channel.
Fingerprint: SHA-256 of a secret salt plus user:<account>, device:<identifier> (the one the website stores as prim.voices.device and sends in the X-Prim-Device header) or ip:<IP>; on WhatsApp, phone:<number>. The number is also stored encrypted with AES-256-GCM.
Deletion link: it carries a pvd_… key that travels only in the receipt; the database keeps its SHA-256.
AI: transcription with OpenAI's audio API at eu.api.openai.com, and an analysis with strict output (summary, topics, tone and alerts). Each channel has a spending cap per 24 hours.
Advertising: views and clicks in a table with one row per ad, day and type, with its count. The click goes out through /out/<id> with utm_source=prim&utm_medium=sponsored&utm_campaign=ad-<id> and the link carries rel="sponsored nofollow".
Games: a guest receives a pgg_… key only once; the database keeps its fingerprint. A daily task deletes guests' answers older than 30 days, and another one voice notes older than 90 days that did not go on air.