Legal

Privacy policy

Owner-approved launch policy; not separately reviewed by counsel. This policy describes the live site today and should be re-reviewed whenever deployed tools or data practices change.

Last updated: August 2, 2026

The short version

This site is a personal publishing platform. It does not sell personal information, run advertising tags, or embed third-party social scripts. Optional analytics load only after you choose to allow them.

What this site collects

  • Contact form: the inquiry type, name, email address, and message you choose to send. When you submit, Cloudflare Turnstile processes technical challenge data to prevent abuse; a same-origin server-side function validates your submission; and Resend, an email delivery provider, delivers the message to Jose's mailbox. Your email address is used only as the reply address for that message. It is not used for marketing and is not added to any list. The message also includes bounded, syntactically constrained source details for the visit that produced the inquiry, such as UTM campaign fields, an advertising click ID when present, the landing-page path, and an approved external referrer origin when available. Unsafe campaign values and unknown referrer hosts are omitted. If you allowed analytics, this can include the stored first-touch and last-touch source; otherwise it is limited to the current visit.
  • Newsletter: none. This site does not collect email addresses for a newsletter or mailing list.
  • Optional analytics: after you select “Allow analytics,” Google Tag Manager loads the Google Analytics 4 tag. GA4 processes page views, broad device and browser details, approximate location derived from IP, campaign/referrer details, BrightBlitz outbound clicks, and a lead event only after the contact endpoint confirms successful delivery. Name, email, and message text and raw campaign values are not sent as lead-event parameters. All campaign and click parameters, unknown query parameters, fragments, arbitrary paths, and unknown referrer hosts are removed from the analytics page context before analytics can load. The site does not deploy advertising tags.
  • Search optimization: Search Atlas OTTO loads a site-optimization script separately from optional Google analytics and regardless of your Google analytics choice. When its script and API are requested, Search Atlas receives technical request data such as IP address and user agent. Before OTTO executes, this site removes campaign and click parameters, unknown query parameters, fragments, and arbitrary paths from the current page URL. Because OTTO runs in the page, it can access the incoming referring URL supplied by your browser. Search Atlas's public privacy policy lists "referring URL" among the information its Services may collect. We have not independently confirmed whether this OTTO runtime transmits or stores that incoming referrer.
  • Server logs: standard web hosting logs (IP address, user agent, requested URL) retained by the hosting provider for security and troubleshooting.

Cookies and local storage

Before you make a choice, Google Tag Manager and Google Analytics 4 do not load. The site stores your analytics choice in first-party local storage. If you allow analytics, it also stores a bounded first-touch and last-touch source record for a fixed period of up to 90 days and GA4 may set analytics identifiers. Later visits do not extend that expiry. Declining leaves Google analytics storage denied and deletes the first-party source record. Cloudflare Turnstile separately processes technical challenge data when you use the contact form for security.

Retention

The first-party attribution record expires after 90 days. Google Analytics 4 event-level retention is configured for 14 months. Contact submissions remain in Jose's mailbox only as long as reasonably needed to respond, maintain business records, or meet legal obligations.

How your information is used

Contact form submissions are used only to respond to your inquiry. There is no newsletter, no mailing list, and no marketing use of anything you send.

Sharing

Personal information is not sold or rented. Commercial inquiries you explicitly direct to BrightBlitz are shared with BrightBlitz to respond to you. For the contact form, Cloudflare Turnstile processes technical challenge data to prevent abuse and Resend, an email delivery provider, delivers your message to Jose's mailbox, as described above.

If you allow analytics, Google processes measurement data through Google Tag Manager and Google Analytics 4 as described above. It is used for site and campaign measurement, not for an advertising audience on this site.

Search Atlas processes the technical site-optimization request data described above independently of your optional Google analytics choice. Search Atlas's public privacy policy governs its handling of information it collects through its Services.

Your choices

You can request a copy or deletion of any personal information held about you by writing to jose@joseponcejr.com. Use the “Analytics choices” control at the bottom of any page to allow or decline optional analytics at any time. Withdrawing consent deletes the first-party source record and reloads the page when necessary to remove an active tag runtime.

Changes

Material changes to this policy will update the date above and be noted on this page.