Last updated: July 27, 2026
1. Data controller
ViciousByte ("we") is the controller of the personal data collected through viciousbyte.com and its associated services, in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties published in the Official Gazette on March 20, 2025 (the "Law").
For anything related to this notice you can write to contacto@viciousbyte.com.
2. Data we collect
Contact data: name, email, phone, company and the message you send us through the contact or support form.
Account data: first name, last name, email, phone and company when you create an account. Your password is stored only in encrypted (hashed) form.
Payment and billing data: payments are processed directly by Mercado Pago; we do not store card numbers. We may keep transaction identifiers and, if you provide them, tax data (RFC, CURP or ID) to issue invoices.
Usage data: navigation metrics (pages visited, device and browser type, language, timezone and screen resolution) collected by our own analytics and, only with your consent, by Google Analytics 4. We do not collect your geographic location.
We do not collect sensitive personal data (health, ethnic origin, beliefs, union membership, political opinions, biometric data or sex life). If a future service required it, we would request your separate express consent.
3. Purposes and consent
Primary purposes (necessary for the relationship you request; processed under your implied consent when you provide the data): (a) providing the services and subscriptions you purchase; (b) processing payments and issuing invoices; (c) handling contact and support requests; (d) sending operational communications about your account or purchases; (e) preventing fraud and protecting platform security; and (f) complying with legal and tax obligations.
Secondary purposes (not necessary; they require your consent, which you may grant or refuse without affecting the service): (g) usage analytics through Google Analytics 4 and our own metrics for site improvement; and (h) promotional communications. The cookie banner is the mechanism to grant or refuse this consent, and you may withdraw it at any time (see section 4).
If we intended to process your data for purposes other than those described here, we will inform you and obtain your consent again where the Law requires it. We do not sell or rent your personal data to third parties.
4. Cookies
Essential cookies (always active): authentication session (auth_token, auth_status), language preference (NEXT_LOCALE) and the record of your consent decision (vb_cookie_consent). They are required for the site to work.
Analytics cookies and storage (only with your consent): Google Analytics 4 (_ga and related) and anonymous identifiers from our own analytics. You can accept or decline them from the cookie banner; your decision is honored across the site and you can change it by clearing your browser cookies.
5. Processors and transfers
To operate the site we share data with providers acting as processors: Railway (hosting and infrastructure), Mercado Pago (payment processing), Google Analytics (analytics, consent-based), transactional email providers and Sentry (error monitoring). These providers only process the data needed to deliver their service.
Beyond these cases, we do not transfer your data to third parties except under a lawful request from a competent authority.
6. Retention
We keep your data while your account is active or while needed for the purposes described, and afterwards for the periods required by applicable legal and tax obligations.
7. Your rights (ARCO) and how to exercise them
You may at any time exercise your rights of Access, Rectification, Cancellation and Objection (ARCO), withdraw your consent, and request limitation of the use or disclosure of your data, by writing to contacto@viciousbyte.com from the email associated with your data. To process your request we may ask for proof of identity, a clear description of the data and the right you wish to exercise, and a means to deliver our response. We will respond within the timeframes set by the Law.
If you believe your data protection rights have been violated, you may turn to the Secretaría de Anticorrupción y Buen Gobierno — the authority competent in personal data protection under the 2025 Law — or to the competent federal courts.
8. Security
We apply reasonable administrative, technical and physical safeguards: encryption in transit (HTTPS/TLS), httpOnly session cookies, restricted infrastructure access and error monitoring. No system is infallible, but we continuously work to protect your information.
9. Minors
Our services are intended for people over 18. We do not knowingly collect data from minors; if we detect such records, we will delete them.
10. Changes to this notice
We may update this notice to reflect legal or operational changes. The current version will always be published on this page with its last-updated date.
