Privacy policy

In short

• I use no cookies and no ads, and I never sell or share data.
• Audience statistics do not identify you: they keep neither your IP address nor anything in your browser.
• Detailed statistics (clicks, scrolling, time and performance) only start if you accept them.
• What you write in the contact form is only used to answer you.

Data controller

Michael Reyes. You can write to me through the contact form.

Contact form

Data: name, email address, subject, message and the language of the page you write from.

Purpose: answering your message. Legal basis: your consent when you send it (Article 6(1)(a) GDPR) and, if you write about a project, taking steps at your request before entering into a contract (Article 6(1)(b)).

Retention: as long as the conversation lasts; then I delete the message. You can ask me to delete it earlier.

To stop spam, your IP address is turned in memory into a code that cannot be reversed, and it is never stored. Your browser is checked but not stored either.

Audience statistics

Every time you view a page the following is recorded: its address, its language, the domain of the website you came from (only the domain, never the full address), the date and time, and the type of device, browser and operating system, derived from what your browser sends.

To count visitors without identifying you, your IP address and browser are combined with a random key that is deleted at the end of each day. The result is a code that cannot be reversed or linked to that of any other day. Your IP address and browser are never stored, and nothing is stored on your device.

Purpose: knowing which content is read and improving the website. Legal basis: my legitimate interest (Article 6(1)(f) GDPR), which does not intrude on your privacy because it neither identifies you nor follows you from one day to the next or across websites.

If your browser sends the Do Not Track or Global Privacy Control signal, your IP address and browser are not used for statistics: the visit is counted without that code and without the type of device, browser and operating system.

Retention: 13 months.

Detailed statistics, only if you accept them

If you accept them in the statistics notice or in the cookie settings, the following is also recorded: where you click (the position and which element of the page it is, never what you type or where a link leads), how far you scroll on each page, how long it stays visible, the size of the window and performance measurements (Web Vitals).

Purpose: heat maps and checking that the website loads fast. Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time in the cookie settings, and I ask you again after 12 months.

Retention: 13 months.

Short links on go.mreysei.dev

go.mreysei.dev is part of this website: it gathers my links of interest and short links that always lead to destinations I choose. Visits to its pages and links are counted on its own server, with the same rules as the audience statistics and without any script in your browser.

Images and files

Images are served from my own file server, which counts how many times each one is served and on which website it is shown, without storing your IP address or browser.

Who processes the data

Only I do. The website is hosted on DigitalOcean servers, and messages from the form reach me by email through Resend. Both process the data on my behalf and may do so outside the European Economic Area with the safeguards the GDPR requires, such as the standard contractual clauses of the European Commission.

If you choose to play a YouTube or Vimeo video embedded in an article, your browser connects to that service, which receives your IP address and processes your data under its own privacy policy.

I do not share data with third parties, use it for advertising or make automated decisions about you.

Your rights

You can ask me for access to your data, its rectification or erasure, the restriction of its processing or a portable copy, object to its processing and withdraw your consent. To do so, you can write to me through the contact form.

Statistics do not identify you: once the day is over, not even I can link them to you, so I cannot find them to act on a request about them (Article 11 GDPR).

If you think I have not respected your rights, you can lodge a complaint with a data protection authority, such as the Spanish Data Protection Agency (AEPD).

Security

All traffic is encrypted (HTTPS) and only I have access to the data. If this policy changes, the date above changes too.