privacy

i wrote a whole post about how the consent banner is the loading screen of the modern web. it would be rude to then hand you one. so here is the entire privacy policy, in plain language.

the short version

this site sets no cookies, runs no analytics, and loads nothing from anyone else. there is no banner because there is nothing to consent to.

what runs on this page

everything. the fonts, the stylesheet, the one javascript file — all served from krtffl.dev. no cdn, no google fonts, no tag manager, no embedded video, no social widgets. open your network tab and count the domains: there is one.

what gets stored on your device

one thing, and only if you ask for it:

• k-theme — a localStorage entry holding "light" or "dark", written when you hit the theme toggle (or press t). it exists so the site doesn’t flash the wrong colour scheme on your next visit. it is not an identifier, it never leaves your browser, and nothing reads it but the stylesheet.

under the eprivacy directive — article 5(3), article 22 of the spanish lssi — storage that’s strictly necessary to deliver something you explicitly asked for doesn’t require consent. you asked for dark mode; this remembers dark mode. clear your site data and it’s gone.

what the server knows

krtffl.dev is static files on cloudflare pages. cloudflare, as the host, processes your ip address to actually deliver the page and to absorb attacks. that’s their processing, under their privacy policy ↗ , and it’s the same thing every web server on earth does. i don’t run logging on top of it, i don’t have an analytics dashboard, and i genuinely do not know how many of you are reading this.

the form at the bottom of posts

the reply box composes an email in your email client and sends nothing on its own — if you never hit send, i never see it. the subscribe box currently has no endpoint wired up: it validates the address in your browser and stops there. if that changes, this page changes with it.

the support button

the ko-fi link is a plain link. no script, no cookie, no pixel — nothing about ko-fi touches this page until you click through. once you’re on ko-fi.com you’re on their site under their privacy policy ↗ , and they handle the payment end to end. i never see your card details, and the only thing that reaches me is a name and whatever note you choose to leave.

outbound links

links to github, ko-fi, didacperezescrich.com and anywhere else are ordinary links. those sites have their own rules. i have no control over them and no visibility into what you do once you leave.

your rights, briefly

since i hold no personal data about you, there’s nothing to request, correct, or delete. if you’ve emailed me, i have that email in my inbox like any other — ask and i’ll delete it.

questions, or think i’ve got something wrong here: [email protected] .