Privacy Policy

1. Information We Collect

1.1 Browsing Data

When you visit this website, we automatically collect certain information about your device and interaction with the site, including:

• Pages visited: URLs of pages you view
• Device information: Browser type, operating system, screen resolution
• Geographic location: City and country (without specific IP address)
• Performance: Load times, technical errors

1.2 Locally Stored Data

To improve your experience, we store data in your browser:

• Service Worker Cache: Up to 25MB of pages, images, and fonts for offline browsing
• Preferences: Theme (light/dark), language, cookie consent

This data is not sent to any server and remains only on your device. You can delete it anytime from your browser settings.

2. Cookies and Similar Technologies

2.1 Essential Cookies

Required for basic site functionality. Always active.

• cookie-consent: Stores your cookie preferences
• theme: Remembers your theme preference (light/dark)

2.2 Analytics Cookies (Optional)

Help us understand how visitors use the site. Require your consent.

• Google Analytics 4: Measures visits, session duration, popular pages
• Vercel Analytics: Cookie-less analytics, privacy by design

2.3 Performance Cookies (Optional)

Improve browsing speed by prefetching pages. Require your consent.

• Prefetching: Preloads links on hover for instant navigation

3. Third-Party Services

3.1 Google Analytics 4

We use Google Analytics to understand site usage. Google may process:

• Pages visited and time spent
• Device and browser type
• Country and city (without full IP address)

Google's Privacy Policy: https://policies.google.com/privacy

3.2 Vercel Analytics

Cookie-less analytics that respects privacy. Does not collect personal information.

Vercel's Privacy Policy: https://vercel.com/legal/privacy-policy

3.3 Cloudinary (Image CDN)

Blog images are served from Cloudinary. Does not collect personal data.

Cloudinary's Privacy Policy: https://cloudinary.com/privacy

3.4 jsDelivr (Font CDN)

Web fonts are loaded from jsDelivr. Does not track users.

4. Your Rights (GDPR)

If you reside in the European Union, you have the following rights:

4.1 Right to Access

You can request a copy of the data we have about you (primarily aggregated and anonymous analytics data).

4.2 Right to Erasure

You can delete all locally stored data:

1. Open your browser settings
2. Go to "Privacy" or "Site Data"
3. Search for oscargallegoruiz.com
4. Delete all cookies and stored data

4.3 Right to Object

You can disable analytics cookies anytime through the consent banner or by configuring your browser to block cookies.

4.4 Right to Portability

Analytics data is available in exportable format through Google Analytics (site administrator only).

To exercise these rights, contact: [email protected]

5. Data Retention

• Google Analytics: 14 months (configurable, GDPR max: 26 months)
• Local data (Service Worker): Until you clear your browser cache
• Cookie preferences: Indefinitely (until manually deleted)

6. Security

We implement the following security measures:

• HTTPS: All connections are encrypted
• Content Security Policy: Prevents code injection attacks
• Service Worker Scope: Limited access to this domain only
• No personal data storage: We don't collect emails, names, or contact data through cookies

7. International Transfers

Some data may be processed outside the EU:

• Google Analytics: Data processed in the US with EU standard contractual clauses
• Vercel (hosting): Data processed in US and Europe servers with EU-U.S. Data Privacy Framework certification

8. Changes to This Policy

We may update this privacy policy occasionally. Significant changes will be notified through a prominent notice on the site.

Last updated: January 29, 2025

9. Contact

For questions about privacy, cookies, or to exercise your rights:

• Email: [email protected]
• GitHub: @garbarok