juanatsap
a6d439b5ed
New documentation: - PRIVACY.md: Complete privacy policy covering Matomo analytics, cookies, and data handling - Clear opt-out instructions and developer guidelines README.md updates: - Add Privacy & Analytics section with clear disclosure - List what's tracked vs. what's NOT tracked - Add "Privacy-Friendly Analytics" to features list - Add critical configuration requirements for template users - Crystal clear instructions: MUST change Matomo Site ID and server URL - OR remove analytics entirely if not needed CUSTOMIZATION.md updates: - Add comprehensive "Analytics Configuration" section (120+ lines) - Option 1: Configure your own Matomo instance (step-by-step) - Option 2: Remove Matomo completely (clean removal steps) - Option 3: Use alternative analytics providers (Google Analytics, Plausible, etc.) - Include exact file locations and line numbers for changes - Privacy compliance checklist (GDPR, CCPA, cookie banners) - Testing instructions to verify analytics configuration Key highlights for template users: - MUST change: Site ID (line 644), Server URL (line 642), CSP headers - MUST update: PRIVACY.md with own contact info - Complete removal guide if analytics not wanted - Legal compliance reminders All documentation is crystal clear with exact locations, code examples, and warnings.
100 lines
3.1 KiB
Markdown
100 lines
3.1 KiB
Markdown
# Privacy & Cookies Policy
|
|
|
|
**Last Updated:** November 9, 2025
|
|
|
|
This website is a personal CV/portfolio site for Juan Andrés Moreno Rubio. This privacy notice explains what data is collected and how it's used.
|
|
|
|
---
|
|
|
|
## Analytics & Tracking
|
|
|
|
### Matomo Analytics
|
|
|
|
This website uses **Matomo**, a self-hosted, privacy-friendly analytics platform to understand visitor behavior.
|
|
|
|
**What is collected:**
|
|
- Pages you visit
|
|
- Language preference (EN/ES)
|
|
- Approximate location (country/city level)
|
|
- Browser type and operating system
|
|
- Referring website (if any)
|
|
- Time spent on site
|
|
- Clicks on external links
|
|
|
|
**What is NOT collected:**
|
|
- Personal identifying information (name, email, phone)
|
|
- Precise geolocation
|
|
- Cross-site tracking data
|
|
|
|
**Cookies used:**
|
|
- `_pk_id`: Visitor identifier (13 months)
|
|
- `_pk_ses`: Session identifier (30 minutes)
|
|
- `_pk_ref`: Attribution information (6 months)
|
|
|
|
**Data storage:**
|
|
- All analytics data is stored on my own server (`matomo.drolo.club`)
|
|
- Data is NOT shared with third parties
|
|
- Data is NOT sold or used for advertising
|
|
|
|
**Opt-out:**
|
|
- Matomo respects "Do Not Track" browser settings
|
|
- You can block cookies in your browser settings
|
|
- You can use browser extensions to block analytics scripts
|
|
|
|
---
|
|
|
|
## Other Data Collection
|
|
|
|
### Language Preference
|
|
|
|
The site stores your language preference (English/Spanish) in **localStorage** to remember your choice across visits. This is stored only in your browser and is never sent to the server.
|
|
|
|
### No Account System
|
|
|
|
This website does NOT require accounts, logins, or user registration. No personal data is collected through forms.
|
|
|
|
---
|
|
|
|
## Contact
|
|
|
|
If you have questions about this privacy policy or data handling:
|
|
|
|
**Email:** Contact information available on the CV itself
|
|
**GitHub:** [https://github.com/juanatsap/cv-site](https://github.com/juanatsap/cv-site)
|
|
|
|
---
|
|
|
|
## For Developers Using This Code
|
|
|
|
If you fork or use this code as a template:
|
|
|
|
1. **Update Matomo Site ID** in `templates/index.html`:
|
|
```javascript
|
|
_paq.push(['setSiteId', '4']); // Change to your Matomo site ID
|
|
```
|
|
|
|
2. **Update Matomo Server URL**:
|
|
```javascript
|
|
var u="https://matomo.drolo.club/"; // Change to your Matomo instance
|
|
```
|
|
|
|
3. **Update this privacy policy** with your own contact information and data handling practices.
|
|
|
|
4. **Configure CSP headers** in `internal/middleware/security.go` to allow your Matomo domain:
|
|
```go
|
|
"script-src 'self' 'unsafe-inline' ... https://your-matomo-domain.com; "
|
|
"connect-src 'self' ... https://your-matomo-domain.com; "
|
|
```
|
|
|
|
5. **Remove Matomo entirely** if you don't want analytics - just delete the Matomo `<script>` block from `templates/index.html` and remove the matomo.drolo.club entries from CSP headers.
|
|
|
|
---
|
|
|
|
## Changes to This Policy
|
|
|
|
This privacy policy may be updated occasionally. Changes will be reflected with a new "Last Updated" date at the top of this document.
|
|
|
|
---
|
|
|
|
**Bottom line:** This site uses self-hosted analytics to understand visitor behavior. No personal data is collected, sold, or shared. You can disable tracking via browser settings or Do Not Track.
|