Privacy policy

Which personal data this site processes, why, and how to exercise your rights. Written under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties and, where it applies, the EU General Data Protection Regulation.

Last updated:

Controller

Norman Sánchez, contact: hello@normansanchez.dev.

Data processed

The site processes data from your interactions and the technical data needed to operate. Usage analytics starts only if you accept:

  • Blog sign-in with GitHub or LinkedIn: name, profile photo, email address and account identifier shared by those services.
  • Comments and reactions you publish on the blog, with their date.
  • Messages you send by email from the contact forms: they open in your own email client, so the site does not store them.
  • Technical access data (IP address, browser, date and page) that the hosting provider logs for security and operations.
  • With your permission, PostHog and Vercel Analytics record visited pages, device, language, traffic source, actions and performance. PostHog uses a pseudonymous identifier and, if you sign in, your account identifier. We do not send emails, contact messages, comments or prompts to analytics.

Purposes

  • Identify you so you can comment and react on the blog.
  • Show your name and photo next to your comments and reactions.
  • Reply to the messages you send.
  • Keep the site secure and available.
  • Measure portfolio usage and errors to improve it, only if you accept analytics.

Legal basis

Your consent when you sign in, write or accept analytics, and a legitimate interest in site security for technical data. Declining analytics does not restrict your use of the portfolio. Your data is never used for advertising or sold.

Processors and transfers

These providers process data on the site's behalf and may store it outside Mexico:

  • Vercel Inc. (United States): hosting, technical logs and optional cookieless analytics.
  • Supabase Inc. (United States): blog authentication and database.
  • PostHog Inc. (United States): optional usage, performance and error analytics.
  • GitHub and LinkedIn: only if you choose to sign in with them, under their own policies.

Retention

Account data, comments and reactions are kept until you ask for their deletion. Hosting logs are deleted on the provider's schedule.

Your analytics preference is stored in your browser until you clear the site data. After you accept, PostHog stores analytics identifiers in cookies and local storage; submitted data is retained according to the project and provider settings.

Your rights

You can access, correct, delete or object to the processing of your data, ask for portability or withdraw consent by writing to hello@normansanchez.dev. I will reply within 20 business days. If you are in the EU you can also complain to your data protection authority.

Changes

Any change to this policy will be published on this page with its new date.