Privacy Policy

Through the contact form on this website, we collect the following personal data:

This data is collected only when you voluntarily provide it by submitting the contact form. **Important: this data is NOT stored on this website.** The data is sent directly through Formspree and is only used so I can respond to your inquiry via email.

• Name
• Email address
• Message or communication content

Additionally, this website may automatically collect certain technical data necessary for its operation, such as IP address, browser type, operating system, and pages visited. This data is collected through the hosting service (Vercel) and is used solely to ensure the proper functioning of the website and for security purposes. This data is not used to identify individual users or for marketing purposes.

The personal data collected is used exclusively to respond to your inquiries and communications sent through the contact form.

We do not use your data for marketing purposes nor do we share it with third parties for other purposes.

The processing of your personal data is based on your explicit consent, which you grant by checking the acceptance box in the contact form before submitting it.

Contact form data is processed through Formspree, a third-party service that acts as a data processor. Formspree is certified and complies with GDPR. **This website does not store any personal data from users.** The data is sent directly to Formspree, which processes it and forwards it to me via email.

This website is hosted on Vercel (Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, United States), which acts as a data processor for hosting and delivering the website. Vercel may collect automatic technical data (IP address, server logs) necessary for the service operation.

You can review our processors' privacy policies:

• Formspree's privacy policy
• Vercel's privacy policy

This website does not store personal data on its servers. Data sent through the form is processed by Formspree and forwarded to me via email. The retention of this data depends on Formspree's configuration and my email inbox.

Data will be retained only for the time necessary to respond to your inquiry. Once the communication is concluded, data will be deleted within a maximum period of 2 years, unless there is a legal obligation requiring longer retention.

The technical cookie used for rate limiting automatically expires after 24 hours. Data stored in localStorage (used as a backup for the cookie) is deleted when the user clears their browser's local storage.

In accordance with the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data and obtain information about its processing
• Rectify inaccurate or incomplete data
• Request deletion of your data (right to be forgotten)
• Object to the processing of your data
• Request portability of your data in a structured format
• Request restriction of processing of your data
• Withdraw your consent at any time without affecting the lawfulness of prior processing
• Not be subject to decisions based solely on automated processing

To exercise these rights, you can contact me at: contact@jjalcantara.dev

I commit to responding to your request within a maximum period of one month from receipt. If the request is complex or there are multiple requests, this period may be extended to two months, with notification to you.

If you believe that the processing of your personal data violates the GDPR, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es or with the supervisory authority in your country of residence.

This website uses one essential technical cookie and localStorage to prevent mass submission of messages through the contact form.

**Technical cookie:**

• Name: contact_form_last_submit
• Purpose: Stores only a timestamp of the last form submission to limit submissions to one every 5 minutes.
• Duration: 24 hours (automatically expires)
• Type: Essential technical cookie (does not require consent under GDPR)

**localStorage:**

This website also uses browser localStorage as a backup for the cookie to ensure rate limiting functionality even if cookies are disabled. The stored data is identical to the cookie (only a timestamp) and is deleted when the user clears their browser's local storage.

**reCAPTCHA:**

This website uses Google reCAPTCHA v3 to protect the contact form against spam and abuse. reCAPTCHA v3 works in the background and analyzes user behavior to determine if it is human or a bot. Google may collect information about your device, browser, and browsing behavior. This information is used solely to provide and improve the reCAPTCHA service. The use of reCAPTCHA is subject to Google's Privacy Policy (https://policies.google.com/privacy) and Google's Terms of Service (https://policies.google.com/terms).

**We do not use tracking, advertising, or analytics cookies.** We do not share this data with third parties and it is only used to ensure the proper functioning of the website.

You can configure your browser to reject cookies or clear local storage at any time, although this may affect the contact form functionality.

I implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

• Encryption of data in transit via HTTPS/TLS
• Security headers configured (CSP, HSTS, X-Frame-Options, etc.)
• Validation and sanitization of all input data
• Rate limiting to prevent abuse
• Restricted access to data only for authorized purposes

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. I cannot guarantee absolute security of data, but I commit to notifying you of any security breach that may affect your personal data.

Contact form data is processed through Formspree, which has servers in the United States. Website hosting is provided through Vercel, also with servers in the United States.

These transfers are made under the appropriate safeguards established in the GDPR:

• Standard contractual clauses approved by the European Commission
• GDPR compliance certifications by processors
• EU-US adequacy framework (when applicable)

Formspree and Vercel have implemented technical and organizational measures to ensure that your personal data receives an adequate level of protection equivalent to that established in the GDPR.

This website is not directed to minors under 16 years of age. We do not intentionally collect personal data from minors under 16 without parental or legal guardian consent. If you are aware that a minor has provided personal data through this website, please contact me immediately at contact@jjalcantara.dev so I can delete such information.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal data is collected, used, shared, or sold
• Right to request deletion of your personal data
• Right to opt-out of the sale of your personal data (we do not sell data)
• Right to not be discriminated against for exercising your privacy rights

To exercise these rights, you can contact me at contact@jjalcantara.dev. We do not sell or share personal data with third parties for commercial purposes.

I reserve the right to update this privacy policy when necessary to reflect changes in data processing practices, legal requirements, or website improvements.

Any material changes will be notified by updating the "Last updated" date at the beginning of this document. It is recommended to periodically review this policy to stay informed about how we protect your data.

If changes are substantial, you will be notified through a prominent notice on the website or by email if possible.

If you have any questions about this privacy policy, about the processing of your personal data, or wish to exercise your rights, you can contact me at:

Email: contact@jjalcantara.dev

As the data controller, I commit to responding to all your inquiries and requests in a timely manner and in accordance with applicable legislation.