Privacy policy
Last updated: November 1, 2026
This policy explains what personal data this website collects, why, and what you can do about it. I've kept it short, because the site collects very little.
Who is responsible
This website is run by Pedro Teixeira, a freelance software developer based in Portugal. I'm the data controller for the personal data described here.
Contact: [email protected]
What I collect and why
1. When you send the contact form
What: your name, your email address, your message, and the budget range if you choose one.
Why: to read your enquiry and reply to you, and if we go ahead, to prepare a quote or proposal.
Legal basis: steps taken at your request before a possible contract (GDPR Art. 6(1)(b)). For keeping a record of past enquiries, my legitimate interest in running my business (Art. 6(1)(f)).
How it travels: the form sends your details to my own email service, which I run myself in Portugal. That service emails the message to my Spaceship inbox, with your email address set as the reply address. The service also keeps a record of each message it sends.
2. If you allow analytics cookies
What: visit statistics from Google Analytics 4, such as the pages you view, roughly where you are, your device and browser, and how you arrived at the site. Once you allow analytics it sets cookies named _ga and _ga_*.
Why: to see which pages are useful, so I can improve the site.
Legal basis: your consent (GDPR Art. 6(1)(a) and Portugal's electronic communications privacy law). Analytics only runs after you click "Accept" or turn analytics on. The Google tag loads with Consent Mode, and analytics storage, ad storage, ad user data and ad personalization all stay denied until then. If you reject analytics, it stays off. Before you choose, Google may receive a cookieless ping; that ping does not set analytics cookies. I don't use advertising or ads personalization.
Changing your mind: use Cookie settings in the footer at any time. When you withdraw consent, the site switches analytics off and deletes its cookies.
3. Your cookie choice
What: one entry in your browser's local storage, called cookie-consent, that remembers which categories you allowed.
Why: so the banner doesn't ask you again on every page.
Legal basis: it's strictly necessary to remember your choice, so no consent is needed. It stays until you clear your browser's site data.
4. Technical data when you visit
What: like every website, the servers that deliver this site handle your IP address, your browser details and the pages you request. The site's network and security provider, Cloudflare, sees this traffic so it can deliver the site and protect it from attacks. My server may also keep short technical error logs.
Why: to deliver the site and keep it secure and working.
Legal basis: my legitimate interest in running a secure website (GDPR Art. 6(1)(f)).
The site doesn't load fonts, videos, maps or social media widgets from other companies. It doesn't use advertising or tracking pixels.
Who else handles your data
I don't sell your data or share it for marketing. These service providers process it on my behalf:
| Provider | What for | Data |
|---|---|---|
| Spaceship | Hosting for this website, and the email inbox where contact messages arrive | Contact form details and technical logs |
| Cloudflare, Inc. | DNS, content delivery and security for the site | IP address and request data for every visit |
| Google (Google Ireland Ltd.) | Google Analytics, only if you consent | Analytics cookies and usage data, only after you consent. A cookieless ping may be sent before then. |
Some of these providers may process data outside the European Economic Area, for example in the United States. Where they do, they rely on safeguards the GDPR allows, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
How long I keep it
- Contact messages and replies: up to 2 years after the last contact, unless they lead to a contract, in which case the legal accounting period applies.
- Email service message records: up to 2 years after the last contact, unless they lead to a contract, in which case the legal accounting period applies.
- Google Analytics data: 2 months. That's the GA4 default, and this site doesn't set a different retention period.
- Analytics cookies in your browser:
_gaand_ga_*, for up to 2 years (Google's default cookie lifetime), or until you withdraw consent or clear your cookies. - Your cookie choice: until you clear your browser's site data.
- Technical logs: kept only briefly for troubleshooting, normally no longer than 30 days.
Your rights
Under the GDPR you can ask me to:
- give you a copy of the personal data I hold about you
- correct anything that's wrong
- delete your data
- limit how I use it
- object to how I use it, when I rely on legitimate interest
- send your data to you or another provider in a common format, where that applies
Where I rely on your consent, you can withdraw it at any time. Doing so doesn't affect anything that happened before.
To use any of these rights, email [email protected]. I'll reply within one month.
Complaints
If you think I've mishandled your data, please tell me first so I can put it right. You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt, or to the authority in the EU country where you live or work.
Other things to know
- Sending the form is voluntary. Without your name, email and message I can't reply, so those three fields are required. Budget is optional.
- I don't use your data for automated decisions or profiling.
- This site isn't aimed at children.
- If I change this policy, I'll update the date at the top of this page.