Privacy Policy

This site makes no decisions based solely on automated processing, including profiling.

Your IP address isn't included in the performance data or the error reports I receive, but the servers your browser connects to see it regardless, since they couldn't respond to you otherwise. Vercel states that its performance metrics aren't linked back to a specific visit or IP address, and the error reporting system is configured not to collect it at all.

When you email me, I process the message in order to reply to you, which is exactly what you're asking me to do. The legal basis is legitimate interest under Article 6(1)(f) of the Regulation (EU) 2016/679 (GDPR), or pre-contractual measures under Article 6(1)(b) if what you're proposing is a work engagement.

Performance metrics and error reports also rest on legitimate interest: knowing whether the site loads quickly and whether it's working correctly. That interest outweighs the impact on your privacy precisely because the measurement is anonymous, leaves nothing on your device and doesn't allow you to be identified.

Your language and theme are stored because you yourself requested them, by using the language selector or the theme toggle: this is what Article 22.2 of Spanish Law 34/2002 (LSSI-CE) treats as a service explicitly requested, requiring no consent.

I don't ask for any consent because no processing described on this page depends on it. If there ever were one, I'd ask before I started processing your data, not after, and you'd be free to withdraw it at any time.

I rely on external providers. Neither one receives your data for its own commercial purposes.

Both providers listed above are US companies, so the data they process may leave the European Economic Area. These transfers rely on the standard contractual clauses approved by the European Commission under Implementing Decision (EU) 2021/914 and, where applicable, on Implementing Decision (EU) 2023/1795, which recognises an adequate level of protection for data transferred under the EU-US Data Privacy Framework, as stated by each provider in its privacy policy linked above.

Emails stay in my inbox for as long as the conversation is still relevant, then I delete them. Performance data and error reports are kept by each provider according to its own retention periods, and neither allows me to trace them back to you. Your language and theme stay on your device until you clear this site's data from your browser.

You can ask me to access your data, correct or delete it, object to its processing, request that it be restricted, or ask for the portability of whatever you've sent me. Write to dpo@somoscuatro.es and I'll reply within a month, as required by Article 12 of the GDPR.

In practice this only concerns emails you've sent me: performance measurement and error reporting are anonymous, so I can't isolate one person's data or verify it's genuinely theirs.

If you think I haven't handled your data properly, you can lodge a complaint with Spain's data protection authority, the AEPD, or with the data protection authority in the country where you live.

If I add a service in future that processes data differently from what's described here, I'll update this page and change the "last updated" date above before switching it on.