Legal
Privacy notice
How dgomez.dev handles personal data. Plain language, no boilerplate, and nothing that runs before you allow it.
- Last updated
- 4 August 2026
- Controller
- David Gómez
- Contact
- hi@dgomez.dev
- Applies to
- dgomez.dev
01
In short
This is a personal site. There are no accounts, no advertising, and no tracking that runs without your permission.
Three things can involve your personal data: the contact form, optional analytics, and the technical logs my hosting provider keeps. Each is described below.
02
Who is responsible
David Gómez, an individual based in Bogotá, Colombia, is the data controller for this site.
Write to hi@dgomez.dev about anything in this notice, including requests to see, correct, or delete what I hold about you.
03
The contact form
If you send a message, I receive the name, email address, subject, and message text you typed, plus your answer to the arithmetic question that keeps automated submissions out.
I use this only to read your message and reply to it. I do not add you to a mailing list and I do not pass it to anyone for marketing.
Messages reach me by email through Zoho Mail. I keep correspondence for as long as it is useful to the conversation, and delete it sooner if you ask.
04
Analytics, and where consent is required
I use Google Analytics 4 to see which pages get read and where visitors arrive from. Whether it runs before you say so depends on where you are.
In the European Economic Area, the United Kingdom and Switzerland, it is switched off until you accept. Google Consent Mode is set to denied for analytics storage, ad storage, ad user data and ad personalisation, the Google tag is not loaded at all, and no analytics cookie exists on your first visit. If your location cannot be determined, you are treated as being in this group.
Everywhere else, analytics runs unless you turn it off, which you can do at any time using Cookie settings in the footer. Rejecting there has exactly the same effect as never having accepted.
If you accept, GA4 sets the cookies listed in section 06 and receives your IP address, which Google uses to derive an approximate location and then discards rather than storing. It also receives the pages you view, the referring page, and basic device and browser information. Google Signals, advertising features, and data sharing for advertising purposes are switched off.
If you reject later, the consent signal is set back to denied and the analytics cookies on this domain are deleted. You can change your mind at any time using Cookie settings in the site footer.
05
What is stored in your browser
One small value is kept in your browser's local storage. It is never sent to a server and does not identify you.
Your reading language is not stored: it is part of the address, so /es serves the Spanish version.
Clearing your browser storage removes it, and the consent band will appear again on your next visit.
- dg-consent-v1 — your cookie decision, with a version number and the time you made it. The version number exists so that I can ask again if this notice changes materially.
06
Cookies
The site sets one cookie of its own, dg-region, which carries no identifier. The only others that can appear are Google Analytics cookies.
_ga
- Set by
- Google Analytics 4
- Purpose
- Distinguishes one visitor from another
- Duration
- 2 years
- Condition
- Only after you accept
_ga_BKB0F9Y6WC
- Set by
- Google Analytics 4
- Purpose
- Keeps session state
- Duration
- 2 years
- Condition
- Only after you accept
dg-region
- Set by
- This site
- Purpose
- Records whether your country requires opt-in consent, so the notice is shown to the right people. Holds "eea" or "row" and nothing else.
- Duration
- 24 hours
- Condition
- Always — it is what decides whether to ask you
07
Why I am allowed to do this
For visitors covered by the GDPR or UK GDPR, these are the purposes, the legal bases, and how long each thing lasts.
Replying to your message
- Data
- Name, email, subject, message
- Basis
- Legitimate interest — Art. 6(1)(f)
- Retention
- While the conversation is useful
Analytics
- Data
- Pages viewed, referrer, device, approximate location
- Basis
- Your consent — Art. 6(1)(a) and ePrivacy Art. 5(3)
- Retention
- The data-retention period set in Google Analytics — 14 months maximum for event data
Remembering your choice, and knowing whether to ask
- Data
- Consent record, approximate country
- Basis
- Strictly necessary — ePrivacy Art. 5(3) exemption
- Retention
- Consent until you clear browser storage; region for 24 hours
Serving the site and keeping it secure
- Data
- IP address and request metadata in server logs
- Basis
- Legitimate interest — Art. 6(1)(f)
- Retention
- As long as Netlify keeps request logs under its own policy
08
Who else touches the data
I use a small number of providers, each acting on my instructions.
- Google Ireland Limited and Google LLC — analytics, only with your consent.
- Netlify — serving the site and keeping short-lived request logs.
- Zoho Mail — delivering messages from the contact form.
- I do not sell personal data, and I have no advertising partners.
09
Data leaving Europe
I am based in Colombia, and the providers above operate from the United States and the European Union.
Where personal data leaves the European Economic Area or the United Kingdom, those transfers rely on the European Commission's Standard Contractual Clauses and, for Google, the EU–US Data Privacy Framework, as published by each provider.
10
Your rights
If the GDPR or UK GDPR applies to you, you can ask me to confirm what I hold about you and give you a copy, correct it, delete it, restrict or object to how I use it, or send it to another provider. You can withdraw consent at any time — for analytics you can do that yourself with Cookie settings in the footer.
Write to hi@dgomez.dev and I will reply within 30 days. If you are not satisfied, you can complain to the data protection authority in your country.
Visitors in Colombia have equivalent rights under Law 1581 of 2012 and may complain to the Superintendencia de Industria y Comercio.
11
Children
This site is not aimed at children, and I do not knowingly collect personal data from anyone under 16.
12
Changes to this notice
If anything material changes, I will update the date at the top of this page. Where the change affects what you consented to, the stored consent record is versioned so that the choice can be asked again rather than assumed.