[Privacy]

Privacy Policy

How your data is handled on this website. Written in plain language.

Last updated: March 20, 2026

01. Data Controller

This website is operated by Victor Solano. For any privacy-related questions or requests, contact [email protected].

02. Data We Collect

Email Address

If you subscribe to the newsletter, we collect your email address. This is the only personal data we store persistently. Subscription is voluntary and requires confirmation (double opt-in).

Analytics

We use Umami, a self-hosted, cookie-free analytics platform. Umami does not collect any personally identifiable information. It does not use cookies, fingerprinting, or cross-site tracking. All analytics data is aggregated and anonymous.

IP Addresses

IP addresses are processed in-memory for rate limiting purposes only. They are never written to disk, never stored in a database, and are cleared automatically on an hourly cycle.

03. Cookies

This website uses two functional cookies. We do not use any tracking cookies, advertising cookies, or third-party analytics cookies.

Cookie	Purpose	HttpOnly	Duration
vault_subscriber	Identifies confirmed newsletter subscribers to unlock gated vault content. HMAC-signed for integrity.	Yes	1 year
vault_subscriber_ui	Client-readable flag so the UI can display subscriber state without additional server requests.	No	1 year

04. Third-Party Processors

We use Resend to deliver newsletter emails. When you subscribe, your email address is shared with Resend solely for delivery purposes. You can review Resend's privacy policy for details on how they handle data.

No other third-party services receive your personal data. We do not use third-party advertising, social media trackers, or external analytics services.

05. Data Storage

Newsletter subscriber data (email addresses) is stored in a PostgreSQL database on a self-hosted virtual private server (Hetzner, EU/Germany). The server is maintained and secured by the data controller.

06. Data Retention

Email addresses: Stored until you unsubscribe. Upon unsubscription, your email is permanently deleted (hard delete) from all systems.
Rate limiting data: Processed in-memory only and cleared on an hourly cycle. Never persisted to disk.
Analytics: Aggregated, anonymous data retained by self-hosted Umami. No personal data is included.

07. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate data.
Erasure: Request deletion of your data. For newsletter subscribers, unsubscribing triggers an immediate hard delete.
Portability: Request your data in a machine-readable format.
Objection: Object to processing of your data.

To exercise any of these rights, contact [email protected]. We will respond within 30 days.

08. Your Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

Right to Know: You may request details about the personal information we collect and how it is used.
Right to Delete: You may request deletion of your personal information.
Right to Opt-Out of Sale: We do not sell, rent, or trade your personal information to third parties. There is nothing to opt out of.

To exercise these rights, contact [email protected].

09. Children's Privacy

This website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact [email protected] and we will promptly delete it.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this page periodically.

11. Contact

For any questions or concerns about this privacy policy or your personal data, contact Victor Solano at [email protected].