Legal

Privacy notice

How dgomez.dev handles personal data. Plain language, no boilerplate, and nothing that runs before you allow it.

Last updated
4 August 2026
Controller
David Gómez
Contact
hi@dgomez.dev
Applies to
dgomez.dev

01

In short

This is a personal site. There are no accounts, no advertising, and no tracking that runs without your permission.

Three things can involve your personal data: the contact form, optional analytics, and the technical logs my hosting provider keeps. Each is described below.

02

Who is responsible

David Gómez, an individual based in Bogotá, Colombia, is the data controller for this site.

Write to hi@dgomez.dev about anything in this notice, including requests to see, correct, or delete what I hold about you.

03

The contact form

If you send a message, I receive the name, email address, subject, and message text you typed, plus your answer to the arithmetic question that keeps automated submissions out.

I use this only to read your message and reply to it. I do not add you to a mailing list and I do not pass it to anyone for marketing.

Messages reach me by email through Zoho Mail. I keep correspondence for as long as it is useful to the conversation, and delete it sooner if you ask.

04

Analytics, and where consent is required

I use Google Analytics 4 to see which pages get read and where visitors arrive from. Whether it runs before you say so depends on where you are.

In the European Economic Area, the United Kingdom and Switzerland, it is switched off until you accept. Google Consent Mode is set to denied for analytics storage, ad storage, ad user data and ad personalisation, the Google tag is not loaded at all, and no analytics cookie exists on your first visit. If your location cannot be determined, you are treated as being in this group.

Everywhere else, analytics runs unless you turn it off, which you can do at any time using Cookie settings in the footer. Rejecting there has exactly the same effect as never having accepted.

If you accept, GA4 sets the cookies listed in section 06 and receives your IP address, which Google uses to derive an approximate location and then discards rather than storing. It also receives the pages you view, the referring page, and basic device and browser information. Google Signals, advertising features, and data sharing for advertising purposes are switched off.

If you reject later, the consent signal is set back to denied and the analytics cookies on this domain are deleted. You can change your mind at any time using Cookie settings in the site footer.

05

What is stored in your browser

One small value is kept in your browser's local storage. It is never sent to a server and does not identify you.

Your reading language is not stored: it is part of the address, so /es serves the Spanish version.

Clearing your browser storage removes it, and the consent band will appear again on your next visit.

  • dg-consent-v1 — your cookie decision, with a version number and the time you made it. The version number exists so that I can ask again if this notice changes materially.

06

Cookies

The site sets one cookie of its own, dg-region, which carries no identifier. The only others that can appear are Google Analytics cookies.

_ga

Set by
Google Analytics 4
Purpose
Distinguishes one visitor from another
Duration
2 years
Condition
Only after you accept

_ga_BKB0F9Y6WC

Set by
Google Analytics 4
Purpose
Keeps session state
Duration
2 years
Condition
Only after you accept

dg-region

Set by
This site
Purpose
Records whether your country requires opt-in consent, so the notice is shown to the right people. Holds "eea" or "row" and nothing else.
Duration
24 hours
Condition
Always — it is what decides whether to ask you

07

Why I am allowed to do this

For visitors covered by the GDPR or UK GDPR, these are the purposes, the legal bases, and how long each thing lasts.

Replying to your message

Data
Name, email, subject, message
Basis
Legitimate interest — Art. 6(1)(f)
Retention
While the conversation is useful

Analytics

Data
Pages viewed, referrer, device, approximate location
Basis
Your consent — Art. 6(1)(a) and ePrivacy Art. 5(3)
Retention
The data-retention period set in Google Analytics — 14 months maximum for event data

Remembering your choice, and knowing whether to ask

Data
Consent record, approximate country
Basis
Strictly necessary — ePrivacy Art. 5(3) exemption
Retention
Consent until you clear browser storage; region for 24 hours

Serving the site and keeping it secure

Data
IP address and request metadata in server logs
Basis
Legitimate interest — Art. 6(1)(f)
Retention
As long as Netlify keeps request logs under its own policy

08

Who else touches the data

I use a small number of providers, each acting on my instructions.

  • Google Ireland Limited and Google LLC — analytics, only with your consent.
  • Netlify — serving the site and keeping short-lived request logs.
  • Zoho Mail — delivering messages from the contact form.
  • I do not sell personal data, and I have no advertising partners.

09

Data leaving Europe

I am based in Colombia, and the providers above operate from the United States and the European Union.

Where personal data leaves the European Economic Area or the United Kingdom, those transfers rely on the European Commission's Standard Contractual Clauses and, for Google, the EU–US Data Privacy Framework, as published by each provider.

10

Your rights

If the GDPR or UK GDPR applies to you, you can ask me to confirm what I hold about you and give you a copy, correct it, delete it, restrict or object to how I use it, or send it to another provider. You can withdraw consent at any time — for analytics you can do that yourself with Cookie settings in the footer.

Write to hi@dgomez.dev and I will reply within 30 days. If you are not satisfied, you can complain to the data protection authority in your country.

Visitors in Colombia have equivalent rights under Law 1581 of 2012 and may complain to the Superintendencia de Industria y Comercio.

11

Children

This site is not aimed at children, and I do not knowingly collect personal data from anyone under 16.

12

Changes to this notice

If anything material changes, I will update the date at the top of this page. Where the change affects what you consented to, the stored consent record is versioned so that the choice can be asked again rather than assumed.