Privacy policy

Who is responsible

This site is operated by Tiago S. Carvalho. For anything related to your personal data, contact blog@tiagoscarvalho.com.

What is collected

• Newsletter email address — only if you submit the subscribe form, on the basis of your consent. Until an email provider is connected, submissions are not stored anywhere: the form reports that signup is unavailable and discards the address.
• Theme preference — your light/dark choice is saved in your browser’s local storage only. It never leaves your device.
• Server logs — the hosting platform records standard technical request data (such as IP address and user agent) for security and operations.

The site does not use analytics, advertising trackers, or cookies requiring consent — which is why there is no cookie banner.

First-party analytics

This site runs its own privacy-focused analytics on this domain only — no Google Analytics, no advertising trackers, no third-party cookies, and no cookies or browser storage at all. When active, it records aggregate usage: the page path (without query strings), the referring site's hostname, approved campaign tags (utm parameters), country, device category, browser and operating-system family, approximate time on page, and events such as downloads, outbound clicks, internal searches and 404s.

IP address and full user agent are processed transiently on the server — never stored or logged in their original form — to derive a rotating, pseudonymised identifier (a keyed hash that changes every 24 hours). During that short window the data is aggregated and pseudonymised; the identifier is then deleted during daily aggregation, raw events are kept for at most 7 days, and only aggregate statistics remain (for 25 months). There is no cross-site tracking and no permanent individual browsing history. Visitor counts are estimates within a 24-hour window, not identification of individuals.

If your browser sends Do Not Track or Global Privacy Control, no analytics events are collected from your visit.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, withdraw consent at any time (for the newsletter, every email will include an unsubscribe option once the service is live), and lodge a complaint with your supervisory authority (in Portugal, the CNPD). Requests: blog@tiagoscarvalho.com.

Pending decisions

The following will be completed here before the features go live:

• Newsletter provider (data processor), its location, and the retention period for subscriber emails.
• Whether double opt-in confirmation is enabled at signup.