Privacy notice

Last updated 14 November 2026

This notice explains what personal data this site processes, why, and what you can do about it. The short version: nothing is collected unless you send the contact form, and then only what you type in.

Who is responsible

The data controller is me, a private individual. You can reach me through the contact form. Processing is done in my personal capacity and in line with data protection laws in most jurisdictions.

What is collected and why

Browsing the site. Nothing. There are no analytics, no advertising pixels, no fingerprinting, and no account system. Cloudflare serves the site as a CDN and, like any host, receives your IP address and request headers to deliver the page. I do not have access to logs that identify you.

Contact form. If you choose to write to me, I process:

• the name you enter
• the email address you enter
• the message you write
• your IP address, which the server attaches so I can trace abuse or spam

This data is used for one purpose: reading your message and replying to you. The legal basis is your consent, given when you press send, and my legitimate interest in responding to people who contact me and in keeping spam off my inbox.

Where it goes

The form is submitted to a Cloudflare Pages Function, which checks the Turnstile token and then forwards the submission to HubSpot, a CRM I use to receive and reply to messages. HubSpot creates or updates a contact record with your name, email and message. Nothing is stored on this site itself. The IP address is passed to HubSpot as submission context for abuse tracing.

These providers act as processors and have their own policies:

• Cloudflare, hosting, Turnstile and the function that forwards the form
• HubSpot, storage of the submission and the contact record

HubSpot stores data in the United States or the EU depending on account region. Transfers rely on HubSpot's standard contractual clauses and data processing agreement. I do not sell, rent or share your data with anyone else, and I will not add you to any mailing list or marketing sequence.

Bot protection

The contact form uses Cloudflare Turnstile to tell humans from bots. Turnstile may process your IP address, browser characteristics and set a strictly necessary cookie or local storage entry for that purpose only. It does not track you across sites. This is the only cookie-like thing on the site, which is why the notice in the corner says "functional cookies only". The dismissal of that notice itself is remembered in your browser's local storage, never sent anywhere.

How long I keep it

Your submission and contact record stay in HubSpot for as long as I deem the conversation relevant. Spam is deleted immediately.

Your rights

You can, at any time, ask me to:

• confirm whether I hold data about you and get a copy
• correct it
• delete it
• restrict or object to its processing
• withdraw consent, which does not affect anything done before withdrawal

Send the request through the contact form or reply to any email from me. I will answer within 30 days. If you think I have handled your data badly, you can complain to the Peruvian data protection authority (Autoridad Nacional de Protección de Datos Personales) or, if you are in the EU or UK, to your local supervisory authority.

Changes

If this notice changes, the date at the top changes with it. No one is going to email you about it, because I do not keep a list of people to email.