Files
cv-site/PRIVACY.md
T
juanatsap a6d439b5ed docs: add comprehensive privacy policy and analytics documentation
New documentation:
- PRIVACY.md: Complete privacy policy covering Matomo analytics, cookies, and data handling
- Clear opt-out instructions and developer guidelines

README.md updates:
- Add Privacy & Analytics section with clear disclosure
- List what's tracked vs. what's NOT tracked
- Add "Privacy-Friendly Analytics" to features list
- Add critical configuration requirements for template users
- Crystal clear instructions: MUST change Matomo Site ID and server URL
- OR remove analytics entirely if not needed

CUSTOMIZATION.md updates:
- Add comprehensive "Analytics Configuration" section (120+ lines)
- Option 1: Configure your own Matomo instance (step-by-step)
- Option 2: Remove Matomo completely (clean removal steps)
- Option 3: Use alternative analytics providers (Google Analytics, Plausible, etc.)
- Include exact file locations and line numbers for changes
- Privacy compliance checklist (GDPR, CCPA, cookie banners)
- Testing instructions to verify analytics configuration

Key highlights for template users:
- MUST change: Site ID (line 644), Server URL (line 642), CSP headers
- MUST update: PRIVACY.md with own contact info
- Complete removal guide if analytics not wanted
- Legal compliance reminders

All documentation is crystal clear with exact locations, code examples, and warnings.
2025-11-09 19:33:20 +00:00

3.1 KiB

Privacy & Cookies Policy

Last Updated: November 9, 2025

This website is a personal CV/portfolio site for Juan Andrés Moreno Rubio. This privacy notice explains what data is collected and how it's used.


Analytics & Tracking

Matomo Analytics

This website uses Matomo, a self-hosted, privacy-friendly analytics platform to understand visitor behavior.

What is collected:

  • Pages you visit
  • Language preference (EN/ES)
  • Approximate location (country/city level)
  • Browser type and operating system
  • Referring website (if any)
  • Time spent on site
  • Clicks on external links

What is NOT collected:

  • Personal identifying information (name, email, phone)
  • Precise geolocation
  • Cross-site tracking data

Cookies used:

  • _pk_id: Visitor identifier (13 months)
  • _pk_ses: Session identifier (30 minutes)
  • _pk_ref: Attribution information (6 months)

Data storage:

  • All analytics data is stored on my own server (matomo.drolo.club)
  • Data is NOT shared with third parties
  • Data is NOT sold or used for advertising

Opt-out:

  • Matomo respects "Do Not Track" browser settings
  • You can block cookies in your browser settings
  • You can use browser extensions to block analytics scripts

Other Data Collection

Language Preference

The site stores your language preference (English/Spanish) in localStorage to remember your choice across visits. This is stored only in your browser and is never sent to the server.

No Account System

This website does NOT require accounts, logins, or user registration. No personal data is collected through forms.


Contact

If you have questions about this privacy policy or data handling:

Email: Contact information available on the CV itself GitHub: https://github.com/juanatsap/cv-site


For Developers Using This Code

If you fork or use this code as a template:

  1. Update Matomo Site ID in templates/index.html:

    _paq.push(['setSiteId', '4']); // Change to your Matomo site ID
    
  2. Update Matomo Server URL:

    var u="https://matomo.drolo.club/"; // Change to your Matomo instance
    
  3. Update this privacy policy with your own contact information and data handling practices.

  4. Configure CSP headers in internal/middleware/security.go to allow your Matomo domain:

    "script-src 'self' 'unsafe-inline' ... https://your-matomo-domain.com; "
    "connect-src 'self' ... https://your-matomo-domain.com; "
    
  5. Remove Matomo entirely if you don't want analytics - just delete the Matomo <script> block from templates/index.html and remove the matomo.drolo.club entries from CSP headers.


Changes to This Policy

This privacy policy may be updated occasionally. Changes will be reflected with a new "Last Updated" date at the top of this document.


Bottom line: This site uses self-hosted analytics to understand visitor behavior. No personal data is collected, sold, or shared. You can disable tracking via browser settings or Do Not Track.