Legal Documentation
Privacy Policy
This notice explains what data the portfolio processes, why it is used, which providers process it, how long it is retained, and how you can exercise your rights.
01
Data Collection
I collect only the data you provide or that is needed to operate, protect, and improve the portfolio:
- Forms, comments, and testimonials Contact and hiring forms may include your name, email, and project details. Comments include name, email, text, language, and date. Testimonials are received through an invitation and consent to publish.
- Ask AI and technical data Ask AI sends your question to the configured AI provider to generate an answer. Question history is disabled; the response cache expires after 20 minutes, and Analytics receives neither the question nor a session identifier.
02
Information Usage
Optimization
Only with your consent, Firebase Analytics records navigation and Web Vitals to measure performance and improve the experience. You can reject or revoke consent through the privacy settings.
Communication
I use data to answer requests, assess professional opportunities, moderate comments, manage authorized testimonials, prevent abuse, and maintain service security.
03
Security and Storage
I apply technical and access controls that reflect the current operation. No system can guarantee absolute security:
Transmission
Data is transmitted using HTTPS/TLS between your browser and the configured services.
Hosting
Firebase and Google Cloud host the application and its data; AWS SES processes transactional email.
Access
Operational access is limited to authorized accounts and services with permissions scoped to their function.
04
Rights and retention
Fernando Vargas operates this portfolio from Costa Rica. You may request access, correction, or deletion of your data and manage your consent by emailing [email protected]. Retention: audit tests, 30 days; pending or rejected comments, 90 days; form submissions, 365 days; personal data in published comments, anonymization review after 365 days; expired testimonial invitations, 30 days after expiry; published testimonials, until consent is withdrawn, with an annual review.
05
Preferences, Analytics, and providers
Language, theme, and your Analytics choice are stored in your browser. Analytics remains disabled until you accept. Cloudflare Turnstile processes anti-abuse signals; Cerebras or Google Gemini may process Ask AI questions; Firebase/Google Cloud and AWS SES support hosting, storage, and email. Some providers may process data outside Costa Rica according to their infrastructure. I do not sell personal data or use advertising tracking.
Do you have a privacy request?
Email [email protected] to ask about data processing or exercise your rights.