The boundary of what doesn't fit here.

• Controller: Humberto Franco Díaz de León (natural person, self-employed), NIE (Spanish foreign-resident ID number) X6230664X. Address for notification purposes: P.O. Box 21001, 28080 Madrid (Spain). Email: hola@radarnocturno.com.
• Legal basis for moderation processing: legitimate interest (art. 6.1.f GDPR), counterbalanced by the right of reply (section 7) and the principles of data minimisation and storage limitation (section 9).
• Sensitive data: the context of using Radar Nocturno may reveal art. 9 GDPR data (sex life, orientation), and the optional profile tags a user voluntarily declares also constitute data of this category. Its processing is based on the explicit consent given at sign-up (art. 9.2.a) and is detailed in the Privacy Policy.
• Data subject rights: to exercise the rights under art. 15-22 GDPR, write to hola@radarnocturno.com or consult the Privacy Policy.
• Complaint: any user has the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.

Radar Nocturno is a tool for adults who decide when and how to go out in Madrid's alternative nightlife. This policy protects our people, the venues that work with us, and the integrity of the product. It defines the boundary of what doesn't fit here.

1. Anonymity is not impunity. Your real name not appearing does not mean you can cause harm without consequences.
2. Human decision, not algorithmic. Every sanction is made by a person. There are no automatic bans triggered by keywords.
3. Proportionality. The sanction is adjusted to the severity of the conduct and to repeat offences.
4. Individual transparency. Whoever receives a sanction knows the reason and can respond.
5. Reporter privacy. Reports are handled confidentially. We do not disclose who reported whom.

Any of the following is grounds for immediate sanction.

1. Receipt. Every alert enters the queue at /admin/moderacion.
2. Triage. Classification by severity: emergency, high, medium, low, informational, false positive. Target timeframes (mainland Spain business hours, Mon-Fri, excluding national holidays):
   • Emergency: we respond as soon as a human is available — target of 4 hours during daytime hours (9am-10pm), never more than 24 hours.
   • High / medium / low: up to 72 business hours.
   • Timeframes may be extended in August and on national holidays, with notice given to the reporter.
3. Investigation. Reading of the messages involved in the specific report, not the full history. Every access is logged in an internal audit log.
4. Human decision. Made by the operator. During a justified absence, non-emergency cases remain in the queue until they return. Emergency cases are escalated to the technical incident channel as a backup.
5. Notification. An email to the reported user with the reason and the sanction applied. An email to the reporter confirming that action has been taken, without details of the specific sanction (for privacy).
6. Record. Immutable log in the database: timestamp, report ID, decision, reason, sanctioning staff member, evidence retained.
7. Minimal-intrusion guarantee. The team does not read the full DM history except under a judicial order. Every read from the panel is audited.

Level 2 and higher sanctions also apply to any new account we detect as a reopening by the same account holder, to the extent it is technically identifiable.

• Anyone who receives a level 2 or higher sanction can request a review by writing to hola@radarnocturno.com within 30 days of the notification.
• The reply must include the reason for the request and any context the team may not have considered.
• We commit to responding within 7 business days, extendable to 15 with a reasoned notice to the requester.
• The decision on the reply is final.

We will publish an aggregated moderation report once the volume makes it statistically useful (a minimum of 50 resolved reports per half-year). The report will contain: total number of reports, breakdown by category, number of sanctions applied by level, and number of replies and resolutions. No user-identifiable data.

Until the half-yearly report is activated, any user can request statistics about their own case via hola@radarnocturno.com.

In the event of a mass incident or one of public relevance, affected users are notified directly by email, and by a general announcement if warranted.

The email hash is built with SHA-256 and a global salt (pepper) value kept server-side. The AEPD has held in recent rulings that a hash with a pepper is still personal data while the salt exists. For this reason, level 3 periods are finite and level 4 periods are subject to proactive review. These periods are consistent with §4.2 of the Privacy Policy.

Substantial changes to this policy are announced to active users by email with 14 days' notice. Minor wording corrections may be applied without prior notice.

Radar Nocturno cooperates with Spanish law enforcement (Fuerzas y Cuerpos de Seguridad del Estado), the AEPD, and judicial authorities when a formal request requires it. We only hand over data when a formal request requires it.

We notify the affected user when the law allows it and there is no judicial secrecy order, non-disclosure order, or reasonable risk of obstruction of justice.

Single contact mailbox: hola@radarnocturno.com.