/privacy

Controller

Marcos Portales, marcosportales2002@gmail.com. That's the address for anything about your data.

What I use them for

Only to reply to you. No newsletter, no profiling, nothing else.

Legal basis

Your consent, article 6.1.a of the GDPR. By sending the form you agree that I use your data to reply, and you can withdraw it anytime by writing to me. The spam limit rests on my legitimate interest, article 6.1.f, not on your consent.

What data

Name, email, and the message text. Nothing more than what you write. Separately, the IP address, which only the spam limit uses.

Who else sees them

The site runs on Vercel Inc. (hosting) and messages leave through Resend Inc. (mail delivery). The email lands in a Google inbox.

All three sit outside the European Union. Your data travels to the United States to provide the service.

Security

To slow spam there is a limit: 5 submissions every 15 minutes from the same IP address. That is my legitimate interest, article 6.1.f of the GDPR, and it does not need your consent.

Of your IP address I only look at whether it is the same one as the previous submissions. It lives in the memory of the server handling the request, and I drop it when the next request arrives past the window. It never outlives that server. I do not write it to any file or any log, and I do not pass it to anyone else.

How long I keep them

Twelve months from when you write to me. After that I delete them.

Your rights

You can ask me for access, rectification, erasure, objection, restriction, and portability. I answer at the same address.

If you think I'm doing it wrong, you can complain to the Spanish Data Protection Agency (AEPD) at aepd.es.

Automated decisions

None. No program decides anything about your rights. The only automation is the spam limit.

Minimum age

Fourteen, article 7 of the LOPDGDD. If you are younger, ask at home before writing to me.

Cookies and storage

The site sets no cookies. Vercel Web Analytics counts visits without cookies and without identifying you.

Your browser only keeps two localStorage keys, both for the interface: theme, which remembers whether you prefer day or night, and world-sticker, which remembers whether you closed the world sticker.

There is no consent banner because there is nothing to consent to.