cv-site/doc/PRIVACY.md

Privacy & Cookies Policy

Last Updated: November 9, 2025

This website is a personal CV/portfolio site for Juan Andrés Moreno Rubio. This privacy notice explains what data is collected and how it's used.

---

Analytics & Tracking

Matomo Analytics

This website uses Matomo, a self-hosted, privacy-friendly analytics platform to understand visitor behavior.

What is collected:

• Pages you visit
• Language preference (EN/ES)
• Approximate location (country/city level)
• Browser type and operating system
• Referring website (if any)
• Time spent on site
• Clicks on external links

What is NOT collected:

• Personal identifying information (name, email, phone)
• Precise geolocation
• Cross-site tracking data

Cookies used:

• _pk_id: Visitor identifier (13 months)
• _pk_ses: Session identifier (30 minutes)
• _pk_ref: Attribution information (6 months)

Data storage:

• All analytics data is stored on my own server (matomo.drolo.club)
• Data is NOT shared with third parties
• Data is NOT sold or used for advertising

Opt-out:

• Matomo respects "Do Not Track" browser settings
• You can block cookies in your browser settings
• You can use browser extensions to block analytics scripts

---

Other Data Collection

Language Preference

The site stores your language preference (English/Spanish) in localStorage to remember your choice across visits. This is stored only in your browser and is never sent to the server.

No Account System

This website does NOT require accounts, logins, or user registration. No personal data is collected through forms.

---

Contact

If you have questions about this privacy policy or data handling:

Email: Contact information available on the CV itself GitHub: https://github.com/juanatsap/cv-site

---

For Developers Using This Code

If you fork or use this code as a template:

1. Update Matomo Site ID in templates/index.html:

   _paq.push(['setSiteId', '4']); // Change to your Matomo site ID
   

2. Update Matomo Server URL:

   var u="https://matomo.drolo.club/"; // Change to your Matomo instance
   

3. Update this privacy policy with your own contact information and data handling practices.

4. Configure CSP headers in internal/middleware/security.go to allow your Matomo domain:

   "script-src 'self' 'unsafe-inline' ... https://your-matomo-domain.com; "
   "connect-src 'self' ... https://your-matomo-domain.com; "
   

5. Remove Matomo entirely if you don't want analytics - just delete the Matomo <script> block from templates/index.html and remove the matomo.drolo.club entries from CSP headers.

---

Changes to This Policy

This privacy policy may be updated occasionally. Changes will be reflected with a new "Last Updated" date at the top of this document.

---

Bottom line: This site uses self-hosted analytics to understand visitor behavior. No personal data is collected, sold, or shared. You can disable tracking via browser settings or Do Not Track.