PRIVACY, plainly.

Who is responsible?

Fran Acosta is responsible for personal information handled through this website. For a privacy question or request, email [email protected].

What I receive.

If you use the contact form, I receive your name, email address, topic and message. You may also choose to provide a company or team name and a relevant link. If you email me directly, I receive the information in that email.

When you visit the site, Cloudflare may process technical information needed to deliver and protect it, such as your IP address, browser information and request details. Please do not send passwords or sensitive personal information through the form.

If you accept analytics cookies, I also receive information about how the site is used, such as the pages you view, the site you came from, your approximate location, and your device and browser type. I do not receive your name or email address from analytics.

Why I use it.

I use the information you send to read your inquiry, reply and, where relevant, discuss a potential project or working relationship. Where your request concerns a possible agreement, this may be necessary to take steps before entering a contract. For other inquiries, my legitimate interest is to respond to people who contact me.

Technical data is processed to operate and secure the site, based on my legitimate interest in providing a reliable website. I do not use contact-form submissions to add you to a marketing list or sell your information.

I use analytics only to understand which pages are useful and to improve the site. The legal basis is your consent: analytics does not run until you accept, and you can withdraw consent at any time in Cookie settings, which stops further collection. Withdrawing does not affect the lawfulness of processing before you withdrew.

Who helps deliver it.

Cloudflare ↗ hosts and protects the site, loads the analytics tool through its Zaraz service only after you agree, and its Turnstile service checks contact-form submissions for spam and abuse using technical signals from your browser. Resend ↗ delivers contact-form messages to my email inbox; my email provider is also involved when I receive and answer them. Google ↗ provides Google Analytics and receives analytics data only if you accept.

These services may process data outside the European Economic Area. Resend states that its primary storage is in the United States and describes transfer safeguards in its data-processing terms ↗. Cloudflare describes its international processing and safeguards in its GDPR information ↗. Google Analytics data may be processed on servers in the United States, under the transfer safeguards Google describes in its data processing terms ↗.

How long it stays.

I keep inquiries that do not become a project or working relationship for up to 12 months after our last exchange. If we work together, relevant correspondence and records may be kept for as long as needed to manage that work and meet legal or accounting obligations. Service providers may retain technical and delivery records for their own shorter periods.

Analytics data in Google Analytics is kept for 14 months at the user and event level. This setting does not apply to standard aggregated reports.

Your data, your rights.

Depending on the circumstances and applicable law, you may ask to access, correct or erase your information, restrict its use, object to processing, or receive a portable copy. Email [email protected] and I will respond to your request. Where I rely on your consent, you can withdraw it at any time in Cookie settings. You can also lodge a complaint with your local data protection authority.

Cookies & analytics.

The site uses a small amount of strictly necessary storage to remember your cookie choice and to run its security and spam protection. That does not need consent. Analytics cookies are set only after you accept. Every cookie below is first party, which means it belongs to this website’s own domain.

If you accept, I use Google Analytics, loaded through Cloudflare Zaraz, to understand which pages are visited, how people arrive and how the site performs. Google Analytics 4 does not log or store individual IP addresses. I do not use analytics data for advertising, and advertising features are turned off.

You can change your choice at any time in Cookie settings, which is also in the footer of every page. Rejecting or withdrawing stops further collection and removes the analytics cookies from your device.

You can also block or delete cookies in your browser settings. If you block strictly necessary storage, the site may ask for your choice again.

This page may change when the site or its services change. The date at the top shows when it was last updated.