Privacy policy

Last updated: 27 September 2026

Controller

Jorge Cardete Llamas, jorgecardete@gmail.com.

What data I process and why

• Newsletter. Your email, to send you new articles. The list is managed by Substack. If you tell me, also how you found the site, to learn which channels work. Legal basis: your consent when subscribing.
• Analytics. Pages visited, clicks, device, approximate country and where you came from (website, search engine or campaign). Cookies are used only with your consent. Without it, visits are counted anonymously, without storing anything in your browser. Legal basis: consent and, for anonymous counting, legitimate interest in understanding how the site is used.
• Advertising. If you accept advertising cookies and arrive from an ad, the network that showed it is told that a visit or sign-up happened, to measure and optimise campaigns. If you subscribe, your hashed email (SHA-256) is also sent, never in plain text. Legal basis: your consent.

Who it is shared with

Processors acting on my behalf: Vercel (hosting), PostHog (analytics, EU servers), Substack (newsletter) and, only with advertising consent, Google, Meta, LinkedIn, TikTok, Reddit, X and Microsoft. Some are based in the US; transfers rely on the EU-US Data Privacy Framework or standard contractual clauses.

How long

Your email, until you unsubscribe (every email has a link). Analytics data, for up to 2 years.

Your rights

You can access, rectify, erase, object to, restrict or port your data by writing to jorgecardete@gmail.com. You can withdraw cookie consent at any time from cookie settings. If you believe your rights have not been respected, you can complain to the Spanish Data Protection Agency (AEPD).