Privacy notice
Last updated:
This page explains what this site collects about you, why, who else handles it, how long I keep it, and how to have it deleted. It describes how the site works today.
Who I am
I'm Eduardo Aire Torres. I run this site on my own, and I'm responsible for the personal data it collects.
My address for legal notices is Boulevard Manuel Ávila Camacho 571, Col. Periodista, 11220, Miguel Hidalgo, Ciudad de México, México. The fastest way to reach me is hola@eduairet.com.
What I collect
When you send the contact form, I get:
- Your name
- Your email address
- Your message
- The language of the page you used
When you email me directly, I get your email address, your name if your email shows it, and what you write.
Like any website, the services that run this site also see technical details, such as your IP address and your browser. The sections below say who sees what.
I don't ask for sensitive data, such as your health, religion or political views. Please leave it out of your message.
You don't have to give me anything. Without a name, an email and a message, though, the form can't send and I can't reply.
Why I use it
I use your name, email and message only to read your message and reply to you. I keep a backup copy so your message isn't lost if an email goes missing. I check each send with reCAPTCHA to keep out spam.
That's all. I don't use your data for marketing or advertising, and I don't sell it. Every use above is needed to answer you, so there are no optional uses to turn off.
reCAPTCHA gives each send a score. If the score is too low, the form doesn't send and asks you to try again or email me. A very high score also means you get a short "thanks" email. Nothing else about you is decided automatically.
If EU law applies to you, the legal basis is my legitimate interest in answering the messages people send me and keeping out spam (GDPR Article 6(1)(f)).
Who else handles it
These companies help run the site. Each one gets only what it needs:
- Amazon Web Services (AWS) delivers your message to my inbox through Amazon SES. When reCAPTCHA is very sure you're a person, SES also sends you a short "thanks" email that includes nothing you wrote. Amazon DynamoDB keeps the backup copy. AWS privacy notice (opens in a new tab)
- Google hosts my inbox in Google Workspace, so your name, email and message are stored there. Google reCAPTCHA checks that a person is using the form. It loads when you first click or tab into one of the form's fields, and it collects details about your browser and device for that check. Google privacy policy (opens in a new tab)
- Adobe serves the site's font on every page through Adobe Fonts. Your browser downloads the font from Adobe, so Adobe receives your IP address. Adobe says it doesn't store your IP address or set cookies, and that it counts which fonts each website uses so it can pay the type designers. Adobe Fonts privacy notice (opens in a new tab)
- Vercel hosts the site. Like any host, it receives your IP address and browser details when you open a page. It uses them to send you the page, block bots, and limit how often one IP address can send the form. Vercel privacy notice (opens in a new tab)
I don't share your data with anyone else, unless a law or a court order requires it.
Where it's stored
All four companies are based in the United States, so your data leaves Mexico. AWS keeps the backup copy in its us-east-1 region, in Virginia, USA. The other services may handle your data in the United States or in other countries where they have servers.
If you write from the European Union, your data goes to the United States. All four companies are certified under the EU-U.S. Data Privacy Framework, which the European Commission recognizes as giving adequate protection.
How long I keep it
- The backup copy: 90 days. After that date, DynamoDB deletes it on its own, usually within a few days.
- Emails in my inbox: while we're in touch. I delete them when you ask me to.
- The Vercel logs I can see: one hour. They never include what you wrote. Vercel may keep its own records longer, as its privacy notice explains.
- reCAPTCHA data: as Google's terms describe.
- Your theme choice: until you clear your browser's storage.
How to limit what I get
- Email me at hola@eduairet.com instead of using the form. Then no backup copy is saved, and reCAPTCHA doesn't load unless you click or tab into one of the form's fields.
- Block third-party fonts in your browser. The site still works and uses a font from your device instead.
- Ask me at any time to delete your messages, as explained below.
Your rights
You can ask me to:
- Show you the data I have about you, and send you a copy in a common format
- Correct it
- Delete it
- Stop using it, or withdraw your consent
Email hola@eduairet.com from the address you used. Say what you'd like and, if you can, roughly when you wrote. If I can't tell the request is yours, I'll ask you to confirm it. It's free, and I'll answer and act on it within 20 business days. When I delete your data, I'll let you know.
Complaints
If you're not happy with my answer, or you don't get one in time, you can complain:
- In Mexico, to the Secretaría Anticorrupción y Buen Gobierno (opens in a new tab), within 15 business days of my answer, or once the 20 business days pass without one.
- In the European Union, to the data protection authority of your country. The European Data Protection Board (opens in a new tab) lists them.
Changes to this notice
If I change what the site collects or how I use it, I'll update this page and the date at the top when the change goes live.