Privacy policy

This site sets no tracking cookies, shows no consent banner and runs no consent manager. That is not an oversight: it is a technical choice, and this page explains what it means.

The data controller is me, Fábio Gomes, in a personal capacity, as the author and publisher of this site. For any question or request: privacy@f-gomes.com.

What this site does not do

It is worth starting with what does not exist, because that is most of it:

• there are no forms, no sign-up, no login and no comments;
• there is no newsletter and no collection of email addresses;
• there is no advertising, no ad networks and no third-party pixels;
• no data is sold, rented or shared with third parties;
• there is no automated decision-making and no profiling;
• browsing sessions are not recorded.

What is collected

To understand which pieces get read, the site measures usage with PostHog, hosted in the European Union: the pages visited, the navigation between them, clicks on articles and on podcast platforms, and any errors the page throws. As on any website, the server also receives your IP address, browser type and the page requested, all needed to deliver the content and for security.

None of this identifies who visits. There is no key linking these records to a name, an email address or an account. The legal basis is legitimate interest — understanding which content is useful, in aggregate — and you may object at any time, through the contact above or by blocking scripts in your browser.

What stays on your device

Two things, both to give you back a choice you made: the language you selected, in a cookie that disappears when you close the browser, and whether you prefer the light or dark theme, kept in the browser until you clear your data.

Usage measurement stores nothing — no cookies, nothing on your device. Visitors are told apart using a temporary identifier that changes every day and cannot follow the same person over time. That is why there is no banner: the law requires consent to store or read information on your device for purposes that are not strictly necessary, and for those purposes this site stores and reads nothing.

Videos and links elsewhere

Podcast episode pages show an image served from here rather than the player: opening one of those pages contacts no Google server. The player only loads after you click play, and from that moment Google receives your IP address. Fonts are served from this domain too, so opening a page makes no request to outside servers.

The site links to Calendly, LinkedIn, GitHub and to the outlets where I publish. Following one of those links takes you elsewhere, where that service's policy applies instead.

Who else has access

PostHog, for the measurement, in the European Union. Vercel, which hosts the site, on global infrastructure — transfers outside the European Union rely on the European Commission's standard contractual clauses. And Google, only if you load a video.

Usage events stay in PostHog in aggregate form, for the retention period configured on the project, with no link to any identified person. Hosting logs follow Vercel's own retention periods.

Your rights

You have the right of access, rectification, erasure, restriction of processing, portability and objection.

An honest note on what that means here: because there is no identification, it is not in practice possible to locate "your data" within the aggregate measurement — no key ties those records to you. Even so, any request sent to privacy@f-gomes.com will get an answer.

If you believe the processing breaches the law, you may lodge a complaint with the Portuguese data protection authority, CNPD (cnpd.pt).

Changes to this policy

Any change to what is collected or stored is reflected here, with the update date above. If it ever becomes necessary to store information on your device for non-essential purposes, a consent request will appear — and this section will say so.