Privacy Policy
Last updated: October 2026
I'm Sergio Pereira and this is my personal site. Here is exactly what happens to your data when you visit it or when you write to me.
1. What I don't do
No analytics, no tracking cookies, no pixels, no ad networks, and no automated decisions or profiling. I don't load fonts or scripts from third-party servers either, except one on the contact page. It's Cloudflare Turnstile, which checks that the form isn't being sent by a bot. Everything else is served from this domain. You can check it yourself with the developer tools. The only things stored in your browser are the site's own preferences: light or dark theme, whether you view the code in React or Vue, and the position of the components menu. They never leave your device.
2. What I collect
When you visit the site, the hosting service logs technical connection data, such as your IP address. On the contact page, Cloudflare Turnstile analyses your IP address and technical data from your browser to check that you are not a bot. If you use the contact form, I collect what you type: first name, last name, email, how you found me and your message. Writing to me is voluntary, but every field is required to send it. If you email me directly, I collect your address and whatever you tell me.
3. What for
I use what you write to reply to you and, when it comes through the form, also to learn how people find my site. Nothing else. There is no mailing list, I don't share your data with anyone and I don't use it for any other purpose. The legal basis is your consent, given when you tick the box or write to me, and you can withdraw it at any time. The technical visit logs and the form's bot check keep the site secure and running, which is a legitimate interest.
4. Where it goes
Your data passes through four providers that process it to deliver their service. Vercel hosts the site, Cloudflare checks that the form isn't being sent by a bot, Resend delivers the form messages and my email provider receives them. Cloudflare also uses those technical signals to improve its bot detection. The form is processed and sent from servers in Ireland, but all four companies are based in the United States, so your data may leave the European Economic Area. Those transfers rely on the EU-U.S. Data Privacy Framework or on standard contractual clauses approved by the European Commission.
5. How long I keep it
Vercel's technical logs are deleted automatically after a short time. Resend keeps a copy of each form message for 30 days and then deletes it. I keep messages, whether they come through the form or by email, for as long as the conversation lasts and, at most, one year. If you would rather I deleted them sooner, just ask.
6. Your rights
You can ask me to access your data, correct it, delete it, restrict its use, take it with you, object to my using it or withdraw your consent at any time. Write to and we will sort it out. If you think I have handled it badly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).