Privacy policy

In short

• I use no cookies and no ads, and I never sell or share data.
• Audience statistics do not identify you: they keep neither your IP address nor anything in your browser.
• Detailed statistics (clicks, scrolling, time and performance) only start if you accept them.
• What you write in the contact form is only used to answer you.

Data controller

Michael Reyes. You can write to me through the contact form.

Contact form

Data: name, email address, subject, message and the language of the page you write from.

Purpose: answering your message. Legal basis: your consent when you send it (Article 6(1)(a) GDPR) and, if you write about a project, taking steps at your request before entering into a contract (Article 6(1)(b)).

Retention: as long as the conversation lasts; then I delete the message. You can ask me to delete it earlier.

To stop spam, your IP address is turned in memory into a code that cannot be reversed, and it is never stored. Your browser is checked but not stored either.

go.mreysei.dev has the same form: what you write there is stored and reaches me just as it does from this website, noting which of the two you write from, and is handled under these same rules.

The telephone of play.mreysei.dev holds the same form too: what you write there is stored and reaches me in the same way, noting that you write from the game, and is handled under these same rules.

Audience statistics

Every time you view a page the following is recorded: its address, its language, the domain of the website you came from (only the domain, never the full address), the date and time, and the type of device, browser and operating system, derived from what your browser sends.

To count visitors without identifying you, your IP address and browser are combined with a random key that is deleted at the end of each day. The result is a code that cannot be reversed or linked to that of any other day. Your IP address and browser are never stored, and nothing is stored on your device.

Purpose: knowing which content is read and improving the website. Legal basis: my legitimate interest (Article 6(1)(f) GDPR), which does not intrude on your privacy because it neither identifies you nor follows you from one day to the next or across websites.

If your browser sends the Do Not Track or Global Privacy Control signal, your IP address and browser are not used for statistics: the visit is counted without that code and without the type of device, browser and operating system.

Retention: 13 months.

Detailed statistics, only if you accept them

If you accept them in the statistics notice or in the cookie settings, the following is also recorded: where you click (the position and which element of the page it is, never what you type or where a link leads), how far you scroll on each page, how long it stays visible, the size of the window and performance measurements (Web Vitals).

Purpose: heat maps and checking that the website loads fast. Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time in the cookie settings, and I ask you again after 12 months.

Retention: 13 months.

Short links on go.mreysei.dev

go.mreysei.dev is part of this website: it gathers my links of interest and short links that always lead to destinations I choose. Visits to its pages and links are counted on its own server, with the same rules as the audience statistics and without any script in your browser.

For each visit to a short link it is also recorded whether it comes from scanning a QR code or from following the link. Retention: 13 months, like the other statistics.

Terminal on terminal.mreysei.dev

terminal.mreysei.dev is part of this website: it is this same portfolio in the shape of a terminal. Visits to its page are counted on its own server, with the same rules as the audience statistics and without any measuring script in your browser.

For each command you type, what is recorded is which one it is, out of the list of commands the terminal knows, and how it ended: whether it worked, gave an error, was turned off or does not exist. Stored with it are the language of the page, the type of device, the daily code of the audience statistics and a random identifier of the visit, which only lives in the open page and is gone when you close it. The line you type and whatever follows the command are never recorded, except the theme or the language you choose, which come from a closed list.

If you type something that is not a command, the text of its first word (or of its first two, when the first is a command with subcommands, such as git) is kept, in lower case, to learn which commands are missing. It is only kept if it has at most 32 characters, nothing but letters, digits, dots, hyphens and underscores, and fewer than six digits, which leaves out an email, a link or a phone number. All that is kept with it is how many times it has been typed and when it was first and last typed. Whatever you type right after sudo, su, passwd, ssh or login is never recorded, and the terminal never asks for a password.

Purpose: knowing which commands are used and which ones to add. Legal basis: my legitimate interest (Article 6(1)(f) GDPR), like the audience statistics. If your browser sends the Do Not Track or Global Privacy Control signal, commands are counted without the daily code, without the type of device and without the identifier of the visit, and a word that is not a command is only counted if it was already kept: a new one is not kept. Retention: 13 months.

Game on play.mreysei.dev

play.mreysei.dev is part of this website: it is this same portfolio in the shape of a game, a pixel-art house where each object opens a part of the content. Its telephone holds the same contact form as this website. Visits to its page are counted on its own server, with the same rules as the audience statistics and without any measuring script in your browser: there are no detailed statistics there.

I also count, in the same way and without knowing who you are, what is opened in the house: when you open an object, the phone, the car or a window, the page tells its server only the name of what you opened, nothing else. The commands you type on the house's computer are the terminal's, counted as its section says, marked as typed in the game.

Forms on form.mreysei.dev

On form.mreysei.dev you answer forms that only I send, through a link: they are not published anywhere, no other website links to them and search engines do not index them. The one asking is me, the controller of this website, and each form says at its top what it is for.

Data: what you answer, the files you attach, the date and time, and the version of the form you answered. The link may carry an internal reference, such as the project I am asking you about, used only to group the answers: you are not asked for it and it is not shown.

What for: what each form says. Legal basis: your consent when you send it (article 6.1.a of the GDPR) and, if the form is about a project with you, the performance of that contract or steps taken at your request before entering into one (article 6.1.b).

Your IP address and your browser are not stored with the answer: the IP is only used in memory to curb abuse, and the server log of form.mreysei.dev keeps neither your IP nor the parameters of the link. Visits to each form are counted per day, without any data about whoever opens it.

Files are stored as private on my file server: they have no public address and only I can download them. If I turn on the notice of a form, I get an email for each answer with the form and the time, never with what you answered.

How long: there is no fixed period. The answers and their files are kept until you ask me to delete them, or until I delete them. You can ask at any time, as the section Your rights explains. A deleted answer may remain for a few weeks in the encrypted backups, which are stored off the server, until those backups are replaced.

Digest on digest.mreysei.dev

digest.mreysei.dev is part of this website: all it does is show articles about subjects I choose. It has no form, no accounts and no comments. Visits to its pages are counted on its own server, with the same rules as the audience statistics and without any measuring script in your browser: there are no detailed statistics there. It asks search engines not to index it.

The articles are written by an AI (Claude, by Anthropic) from sources it finds on the web, listed at the end of each article. They may contain mistakes, and some are published without a person reading them first. Nothing you do or send there reaches the AI.

Images and files

Images are served from my own file server, which counts how many times each one is served and on which website it is shown, without storing your IP address or browser.

Who processes the data

Only I do. The website is hosted on DigitalOcean servers, and messages from the form reach me by email through Resend. Both process the data on my behalf and may do so outside the European Economic Area with the safeguards the GDPR requires, such as the standard contractual clauses of the European Commission.

If you choose to play a YouTube or Vimeo video embedded in an article, your browser connects to that service, which receives your IP address and processes your data under its own privacy policy.

I do not share data with third parties, use it for advertising or make automated decisions about you.

Your rights

You can ask me for access to your data, its rectification or erasure, the restriction of its processing or a portable copy, object to its processing and withdraw your consent. To do so, you can write to me through the contact form.

Statistics do not identify you: once the day is over, not even I can link them to you, so I cannot find them to act on a request about them (Article 11 GDPR).

If you think I have not respected your rights, you can lodge a complaint with a data protection authority, such as the Spanish Data Protection Agency (AEPD) (opens in a new tab).

Security

All traffic is encrypted (HTTPS) and only I have access to the data. If this policy changes, the date above changes too.