-
No tracking cookies
The statistics store nothing in your browser, so there is no banner.
-
On my own server
Visits are counted on my own server, without Google Analytics or any other middleman.
-
Third parties only on request
Comments and the YouTube video only load when you press their button.
Who is responsible
The website is made and run by Javier Cañadilla Casco, from Madrid, Spain. I am the controller of the data described here, and you can write to me at javier@javiercanadilla.com about any privacy matter.
What this policy covers
This policy covers the javiercanadilla.com website: the portfolio, the blog, the project pages and the demos you can play in the browser. The demos store nothing and send nothing.
The games I publish on Google Play have their own games privacy policy.
There are no forms or accounts on this website, and I do not ask you for any data. If you email me, I only use your address and what you tell me to reply to you.
Visit statistics
To know which pages are read and where visits come from, I use Umami, an open-source analytics tool. It runs on my own server, so the data does not go through any analytics company.
Umami does not use cookies, stores nothing in your browser and does not follow you to other websites. For each page you view, it records:
- Page The address and title of the page you view.
- Source The website you came from, if your browser shares it, and the campaign parameters in the link, if it has any.
- Browser and device Browser, operating system, device type, screen size and language.
- Approximate location Country, region and city, worked out from your IP address.
Your IP address is not stored. When the visit arrives, the server uses it to work out your approximate location and, together with your browser and a key that changes every month, to compute a visitor identifier. This lets me count distinct visitors without knowing who they are, and without being able to follow anyone from one month to the next. The IP is then discarded.
If your browser sends the Do Not Track signal, nothing is recorded.
Hosting
The website is served from GitHub Pages, by GitHub, Inc. Like any web server, GitHub receives your IP address to send you the pages, and may keep it in its logs for security. I have no access to those logs. GitHub processes this data under its privacy statement.
Fonts
The website's fonts are downloaded from Google Fonts, by Google. To send them, Google receives your IP address and technical details of your browser. Google Fonts sets no cookies. Google processes this data under its privacy policy and explains how the service works in its privacy FAQ.
Comments and videos (only on request)
Two third-party services only load when you ask for them with a button. Until then, your browser does not connect to them.
- Comments Project pages have comments by Disqus. When you press “Ver comentarios” (show comments), your browser loads Disqus, which sets its own cookies and collects data about your visit for its service and its advertising. If you comment, what you write and your Disqus profile are published. Disqus processes this data as a controller under its privacy policy.
- Video The trailer on the Nubo page plays from YouTube when you press the play button. It uses privacy-enhanced mode (youtube-nocookie.com), which stores no cookies until you play the video. Google processes this data under its privacy policy.
Cookies and browser storage
This website sets no cookies of its own. It only stores one thing in your browser's local storage, and only if you choose it:
- modo-color If you pick light or dark mode with the button in the top bar, to remember it on your next visit. It never leaves your browser.
Since it only serves something you asked for, it needs no consent. You can delete it from your browser settings. Disqus and YouTube cookies only appear if you load their content, as explained in section 06.
Legal basis and retention
Visit statistics are based on my legitimate interest in knowing how the website is used in order to improve it (Art. 6(1)(f) GDPR). They collect the minimum, do not identify or track you, and are not used for advertising. I keep them for up to 2 years and then delete them. I do not share them with anyone.
Hosting and fonts are based on the legitimate interest in serving the website securely and correctly (Art. 6(1)(f) GDPR). Comments and the video only load when you ask for them, and from then on they are governed by the Disqus and Google policies.
GitHub, Google and Disqus are US companies and may process the data there, with the safeguards each describes in its privacy policy.
Your rights
Under the General Data Protection Regulation (GDPR), you can ask me for access to your data, its rectification or erasure, object to or restrict its processing, or ask for its portability. Visit statistics store neither your IP nor any stable identifier, so I cannot link them to you. To stop your visits being recorded, turn on Do Not Track in your browser or use a content blocker.
If you think I have not handled your request properly, you can file a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos.
Changes to this policy
If I change how data is processed on the website, I will update this page beforehand and change the date at the top.
This policy is also available in Spanish. If the two versions differ, the Spanish one prevails.
Any questions about your data?
Write to me and I will reply as soon as I can.