Privacy
The short version: this site uses no cookies and doesn't track you. I only keep what you give me in the contact form or when you subscribe to the newsletter, and only for that.
Who handles your data
Me, Gonzalo Lluch, from Madrid (Spain). For anything about your data: gonzalolluch@gmail.com.
What data and why
- Contact. Your name, email, message, language and the page you write from. To read it and reply.
- Newsletter. Your email, language and the page you signed up from. Also the dates you signed up, confirmed and, if it comes to that, unsubscribed, and which posts I've sent you. To send you an email when I publish a new post. I don't check whether you open the emails or which links you click.
- Spam protection. Both forms use Cloudflare Turnstile to check you're a person. It only loads when you use a form, and it receives technical data from your browser and your IP address. It's not for ads or tracking.
- Stats. Cloudflare counts visits without cookies and without identifying you.
Legal basis
Your consent: writing to me, or subscribing and confirming, is giving it. You can withdraw it any time: use the unsubscribe link in any newsletter email, or ask me.
How long
- Contact messages: one year at most in the database. Then they're deleted automatically. Each message also reaches me by email at info@gonzalolluch.com, and I keep that copy for as long as the conversation needs it.
- Unconfirmed sign-ups: deleted after 30 days.
- Newsletter: as long as you're subscribed. If you unsubscribe, I stop writing to you and keep the record of your sign-up, your unsubscribe and what I sent, to be able to show you asked. If you want it fully deleted, tell me.
- Backups: 30 days.
Who else sees it
I don't sell it or pass it on to anyone. These providers store and process it on my behalf:
- Supabase: the database, on servers in the European Union (Ireland).
- Resend: email delivery, from the European Union (Ireland).
- Cloudflare: website hosting, Turnstile, stats and backups.
They're US companies. If any data leaves the European Union, it's covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Your rights
You can ask me for access, correction, deletion, objection, restriction or portability of your data by writing to gonzalolluch@gmail.com. If you think I haven't handled it well, you can complain to the Spanish Data Protection Agency (aepd.es).
Cookies
None. Your browser only remembers whether you prefer dark mode and, while you browse, where you left the windows. It never leaves your device.