Privacy policy

Controller and contact

Legal controller and address: PRUEBA. The website publicly identifies Gonzalo Scarpa and the GON! brand, but the legal identity and contact address need confirmation.

For privacy enquiries, email hola@thisisgon.com. Data protection officer, if applicable: PRUEBA.

Data and purposes

Contact: the form collects your name, email and project details, including any optional fields and an attachment of up to 3 MB. These are emailed to respond to your enquiry and consider the project. The precise legal basis still needs confirmation: PRUEBA.

Future updates: if signups are enabled, email, optional name, language, signup and consent dates are saved in Turso. Consent is requested with a checkbox. This repository does not yet send a periodic newsletter or configure a distribution service: PRUEBA.

Unsubscription: Resend sends a single-use confirmation link valid for 30 minutes to verify the address. Turso stores the token hash while valid and the unsubscribe date as a minimal record to prevent accidental reactivation.

Blog reads: an HMAC digest of the IP address is stored per article to avoid counting more than one view in 24 hours. The plain IP is not stored in that table. The current code does not automatically delete old records.

Retention

Retention periods for contact messages, active subscriptions and the minimal unsubscribe record: PRUEBA. The view deduplication records also have no defined deletion period yet. Unsubscribe tokens expire after 30 minutes; expired tokens are removed during later requests.

Providers and transfers

The code uses Vercel to host the site and functions, Turso for the database, Resend for contact and unsubscribe emails, Cloudflare Turnstile to protect the contact form, and CookieYes to manage cookie preferences. Their contractual identities, locations, possible international transfers and safeguards need verification: PRUEBA.

External social links take you to those third-party services when you choose to open them.

Cookies and local storage

CookieYes displays the cookie preference controls. The site also uses local storage to remember language, interaction with some visual elements and the updates form status; session storage is used for transitions and article reads. On signup, the server sets a first-party subscription status cookie for up to 400 days.

Third-party cookie inventory, purposes and durations, and the actual consent configuration: PRUEBA.

Your rights

You may request access, correction, erasure, objection, restriction or portability where applicable by emailing hola@thisisgon.com. You can withdraw consent for future updates through the unsubscribe page. You may also complain to the Spanish Data Protection Agency (aepd.es).

Providing form data is voluntary; the enquiry cannot be processed without the required fields. No individual automated decisions were identified in the code reviewed. Last review and legal validation of this policy: PRUEBA.