Privacy notice

Overview

This personal website is operated by Pedro Pérez Herrera. It is designed to collect as little personal information as practical. There is no public email address, user account, advertising profile, newsletter or sale of personal information.

Information is processed for three narrow purposes: displaying the website, responding to a message you choose to send, and measuring site use when you explicitly allow analytics.

Contact form

If you submit the contact form, the site receives your name, email address, inquiry type, message, selected language and confirmation that you read this notice. If you consented to analytics, it may also receive sanitized campaign labels such as source, medium and campaign.

This information is used only to review your inquiry, respond, maintain an appropriate business record and protect the form from abuse. Submitting the form does not subscribe you to marketing messages.

The submission is written to a private server log before a plain-text notification is sent. Neither the private notification address nor the form contents appear in analytics.

Optional analytics

Google Analytics 4 and Microsoft Clarity load only after you select “Accept analytics.” If you decline, neither service is loaded and this site sends them no data.

When accepted, GA4 measures page views, scrolling, selected calls to action, language changes, form starts, non-sensitive error codes and successful contact submissions. Clarity provides heatmaps and session recordings. The entire contact form is explicitly masked, and names, email addresses, messages and submission identifiers are never sent as event properties.

Advertising storage, remarketing, Google Signals, cross-domain tracking and custom user identification are disabled.

Your choice is stored in your browser so it can be respected on later visits. You can reopen the analytics settings from the footer at any time.

Security and abuse prevention

Cloudflare Turnstile is loaded only when you interact with the protected form. The server validates its short-lived token and does not retain that token after verification.

For rate limiting, the server creates a keyed, one-way hash of the connection IP address. The raw IP is not written to the contact record. Hosting access logs may be retained separately by the hosting provider under its own operational policies.

Service providers

The site may use the following providers for the limited purposes described here:

• The cPanel hosting provider: website delivery, server logs, private storage and local email notification.
• Cloudflare Turnstile: automated abuse prevention for the contact form.
• Google Analytics 4: consented traffic and conversion measurement.
• Microsoft Clarity: consented heatmaps and masked session recordings.

These providers may process data in countries other than your own. Their handling of information is also governed by their applicable terms and privacy documentation.

Retention

• Contact submissions: normally up to 12 months, unless the conversation becomes an active relationship or a longer period is reasonably required for legal or business records.
• Rate-limit and security records: up to 30 days.
• Browser consent choice: until you clear site data, change the choice or the consent version changes.
• GA4 and Clarity data: according to the configured retention controls in those services.

Your choices and requests

You can use the contact form and select “Privacy request” to ask about, correct or request deletion of information associated with a previous message. Enough information may be requested to verify that the record belongs to you.

You can decline analytics without losing access to any public content or the contact form. Turnstile remains necessary when the form is used because it protects the endpoint from automated abuse.

This notice may be updated when the site’s data practices change. The effective date and version at the top will be revised when that happens.