Privacy
What data I touch, and what I don't.
Short and plain: no cookies, no third parties and no personal data.
Who processes your data
This site is personal: it's run by Urtzi Alfaro, based in Madrid. There's no company behind it, so the data controller is the same person who signs the letters.
Analytics
Analytics are served by this same site: self-hosted Umami, on the same origin as the website. It uses no cookies, stores no personal data and shares nothing with third parties.
What gets recorded
- the page you visit and where you came from
- the language your browser announces
- anonymous events, such as a download or a subscription
Where it runs
On a server of my own at Hetzner (European Union), the same one that serves the website. Hetzner is the only infrastructure provider.
How long it's kept
Session identifiers are rotated every month, so a visit can't be linked to one from a month ago.
How to avoid it
There's no consent banner because there are no cookies to consent to. Analytics honour the browser's Do Not Track signal.
The newsletter
If you subscribe, I store three things: your email, the letter's language and the sign-up date. Nothing else.
The model is double opt-in, but the confirmation email is not sent yet: today, when you subscribe, your address is only stored.
What I store
- your email address
- the language you chose
- the sign-up date
How to erase it
Unsubscribing takes one click, from the link every letter carries. As none has been sent yet, today the way to erase your address is to write to me.
The newsletter is served from the same server at Hetzner (EU).
Third parties
No third-party analytics, no fonts served from a CDN, no advertising pixels. The site loads not a single script from another domain.
Your rights
You can ask for access, rectification or erasure of your data whenever you like.
Contact address pending: it goes live once the mailbox is active.