Firmario privacy

Last updated: October 17, 2026

Firmario (this site, the app at /app/ and the guest pages at /f/) is a Facilon brand, run by Alberto Curcio Linares (Costa Rica). Contact: support@esfacilon.com.

No accounts

Neither you nor your guests create an account. To manage your book you get a private key kept on your phone (localStorage) and in your private host link; our server only stores an encrypted fingerprint (SHA-256) of that key.

What we keep

Your book: the occasion, names, title, date, the note for guests and the cover photo (shrunk on your phone before upload). Anyone with the link can see the guest page; the link is long and random and isn’t listed by search engines.
Guests’ messages: the name, the message and an optional photo (shrunk on their phone), with the date and approximate country. Only the host sees them, on the dashboard and in the book they download; nothing is published.
Messages imported from WhatsApp: the exported chat is read only on your phone; we never upload it. We only keep the messages you choose to include (name, text and date).

The PDF book

The book is put together on your phone. We don’t keep the PDF.

How long

Everything in a book is deleted automatically about 4 months after it’s created (or 60 days after the event date, whichever is later) on the free plan, or 1 year later with the Full book. You can delete messages or the whole book sooner, any time.

Abuse protection

To stop spam we limit how many requests come from one connection. That count happens in Cloudflare’s memory and isn’t stored; to limit free books per day we keep an encrypted fingerprint of the connection (not the IP address) for 2 days.

Reports

If someone reports a book, we keep the reason and comment, with the date and approximate country, only to review it.

Purchase

Once purchases open, payments will be processed by Creem (creem.io), our reseller. We receive a random purchase code, the order number, the product and the amount, plus an encrypted fingerprint of the email you paid with (to restore the purchase), not the email itself. We never receive your card details.

Where and cookies

Data is stored on Cloudflare (Workers KV). We count visits with Cloudflare Web Analytics, without cookies. Technical cookies remember your language (fi_lang, fi_choice, fi_geo, fi_paylang). No ads, and we don’t sell data.

Your rights

To see, fix or delete data, write to support@esfacilon.com. If you’re a guest and want your message deleted, ask the host or write to us with the book’s link.