# Privacy & Cookies Policy

**Last Updated:** November 9, 2025

This website is a personal CV/portfolio site for Juan Andrés Moreno Rubio. This privacy notice explains what data is collected and how it's used.

---

## Analytics & Tracking

### Matomo Analytics

This website uses **Matomo**, a self-hosted, privacy-friendly analytics platform to understand visitor behavior.

**What is collected:**
- Pages you visit
- Language preference (EN/ES)
- Approximate location (country/city level)
- Browser type and operating system
- Referring website (if any)
- Time spent on site
- Clicks on external links

**What is NOT collected:**
- Personal identifying information (name, email, phone)
- Precise geolocation
- Cross-site tracking data

**Cookies used:**
- `_pk_id`: Visitor identifier (13 months)
- `_pk_ses`: Session identifier (30 minutes)
- `_pk_ref`: Attribution information (6 months)

**Data storage:**
- All analytics data is stored on my own server (`matomo.drolo.club`)
- Data is NOT shared with third parties
- Data is NOT sold or used for advertising

**Opt-out:**
- Matomo respects "Do Not Track" browser settings
- You can block cookies in your browser settings
- You can use browser extensions to block analytics scripts

---

## Other Data Collection

### Language Preference

The site stores your language preference (English/Spanish) in **localStorage** to remember your choice across visits. This is stored only in your browser and is never sent to the server.

### No Account System

This website does NOT require accounts, logins, or user registration. No personal data is collected through forms.

---

## Contact

If you have questions about this privacy policy or data handling:

**Email:** Contact information available on the CV itself
**GitHub:** [https://github.com/juanatsap/cv-site](https://github.com/juanatsap/cv-site)

---

## For Developers Using This Code

If you fork or use this code as a template:

1. **Update Matomo Site ID** in `templates/index.html`:
   ```javascript
   _paq.push(['setSiteId', '4']); // Change to your Matomo site ID
   ```

2. **Update Matomo Server URL**:
   ```javascript
   var u="https://matomo.drolo.club/"; // Change to your Matomo instance
   ```

3. **Update this privacy policy** with your own contact information and data handling practices.

4. **Configure CSP headers** in `internal/middleware/security.go` to allow your Matomo domain:
   ```go
   "script-src 'self' 'unsafe-inline' ... https://your-matomo-domain.com; "
   "connect-src 'self' ... https://your-matomo-domain.com; "
   ```

5. **Remove Matomo entirely** if you don't want analytics - just delete the Matomo `<script>` block from `templates/index.html` and remove the matomo.drolo.club entries from CSP headers.

---

## Changes to This Policy

This privacy policy may be updated occasionally. Changes will be reflected with a new "Last Updated" date at the top of this document.

---

**Bottom line:** This site uses self-hosted analytics to understand visitor behavior. No personal data is collected, sold, or shared. You can disable tracking via browser settings or Do Not Track.