Privacy Policy
This policy explains what data this website processes, why, and for how long.
1. Controller
This website is operated by Fran Aragón, Prague, Czech Republic. Contact: info@franaragondev.com.
2. Contact Form
If you use the contact form, your name, email address and message are sent by email (via the Brevo email service) so that I can reply. They are not stored on this website.
3. Analytics (Only With Consent)
If you accept analytics, the site uses Google Analytics 4, Vercel Web Analytics and Speed Insights, and its own visit statistics. The visit statistics record the pages and sections you view, active time on the page, actions such as sending the contact form, opening the CV or following an external link, the referring website's domain (never the full address), campaign tags in the link, your device type, browser and operating system, and an approximate location (country and region) derived by the hosting provider from your IP address. The site's own analytics application does not store your raw IP address: it is only used briefly, in hashed form, to prevent abuse. Hosting and infrastructure providers such as Vercel may process or log IP addresses as part of operating the service. The site's own visit statistics use no fingerprinting and no identifiers that persist between visits. Google Analytics may use cookies or other identifiers to recognise a browser across visits, as described in Google's documentation and in the Cookie Policy.
4. Purpose and Legal Basis
Analytics are used to understand which content interests visitors and where traffic comes from. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time as described in the Cookie Policy. The contact form is processed to answer your request (Art. 6(1)(b) and (f) GDPR).
5. Retention
Details of a single visit are kept for up to 6 hours after the visit's last activity; after that, only aggregated weekly counts remain, for up to 120 days. Short visit summaries (approximate location, device, pages viewed, traffic source) are sent to the site owner's private Telegram chat and kept there until deleted. Google Analytics data is kept according to the retention setting of the Google Analytics property.
6. Service Providers
Vercel (hosting and approximate geolocation), Upstash (analytics database), Telegram (delivery of visit summaries to the site owner), Google (Google Analytics) and Brevo (email delivery). Some of them may process data outside the European Economic Area under appropriate safeguards.
7. Your Rights
You have the right to access, rectify, erase or restrict processing of your data, to object, and to withdraw consent, as well as to lodge a complaint with a supervisory authority (in the Czech Republic, the ÚOOÚ). Because the visit statistics are not linked to your identity, it may not be possible to identify the records that relate to you.
8. Cookies
The storage technologies used by this site are described in the Cookie Policy.
9. Policy Changes
This policy will be updated whenever the data processing described here changes.
Last updated: October 2026