Privacy and cookies
Last updated: 2026-07-25
This site is a personal portfolio. It sells nothing, has no forms and creates no user accounts. What follows is everything that happens to your data when you visit, in plain language.
Who I am
Diego Iglesias, freelance software engineer, working from Dublin, Ireland. I am the controller of the data described here.
For anything about this policy: hello@diegoiglesias.io.
What I collect
Nothing you hand over on the site: there are no contact forms, no sign-up, no newsletter. If you message me on WhatsApp or by email, you start that conversation yourself and I keep it for as long as we are in touch or working together.
Automatically, and only if you accept analytics cookies, aggregate usage data is collected: pages viewed, time on site, device and browser type, approximate country and where you arrived from.
The host (Azure Static Web Apps, by Microsoft) logs requests including your IP address for technical and security reasons. Those logs are not under my control and are not used to profile you.
Cookies
The site sets no first-party cookies, no advertising cookies, no social cookies and no cross-site tracking.
The only ones that can ever be set are Google Analytics, and only if you press "Accept" on the notice. Reject and nothing from Google loads: no script, no cookieless pings. Ignore it and the same applies.
Your cookie choice and your light or dark preference are stored in your own browser. They are not cookies and they never leave your device.
You can change your mind at any time with the button at the end of this page, or by clearing site data in your browser.
Legal basis
Analytics is processed on the basis of your consent (GDPR article 6(1)(a)), given when you press "Accept" and withdrawable at any time, with no effect on the site or on anything processed before.
Server logs are processed under legitimate interest in keeping the site running and secure (article 6(1)(f)).
Who it is shared with
Nobody, other than the providers needed to run the site:
Microsoft Azure — hosting and CDN.
Google Ireland Limited — Google Analytics 4, only with your consent. IP handling is anonymised and no advertising signals are enabled (ad_storage, ad_user_data and ad_personalization are always denied).
I do not sell or hand over data to third parties for commercial purposes.
Third-party content
The projects section shows external sites inside a frame (heliocentrium.com and tipsteracademy.es). Once loaded, those sites may set their own cookies under their own policies, which I do not control.
Links to WhatsApp, Instagram, LinkedIn and TikTok take you off this site; each platform’s own policy applies from there.
Typefaces are served from my own origin, so loading them sends nothing to Google.
International transfers
Google may process analytics data outside the European Economic Area. Google Ireland Limited acts as the EU entity and relies on the European Commission’s standard contractual clauses, together with additional technical measures, to cover those transfers.
How long it is kept
Analytics data is retained according to the Google Analytics property settings, capped at 14 months for user-level data. Aggregates remain in the reports.
Email and WhatsApp conversations are kept while we are in touch and, if a project goes ahead, for the statutory tax and accounting retention periods.
Your rights
You can ask me for access to your data, for it to be corrected or deleted, for processing to be restricted or objected to, and for portability. Write to hello@diegoiglesias.io and I will reply.
If you believe I have handled your data badly, you can complain to the competent supervisory authority: in Ireland, the Data Protection Commission (dataprotection.ie); in Spain, the Agencia Española de Protección de Datos (aepd.es).
Changes
If I change this policy I will update the date in the header. If the change affects cookies, the notice will ask you again.