Privacy Policy & Telemetry Disclosure
1. Core Principles & System Boundaries
This portfolio operates under a strict principle of data minimization: technology should support human flourishing without consuming human attention or quietly harvesting behavioral trails. We do not run third-party advertising trackers, pixel beacons, or behavioral retargeting networks. Data processing is confined solely to what is required to render the user interface, maintain runtime security, and process explicit communication.
2. Direct Ingress Telemetry (Contact Inquiries)
When you transmit an inquiry via the communication ingress form (/api/contact), the following discrete attributes are processed:
- Identity Attributes: Name, Electronic Mail address, and optional Telephone digits.
- Inquiry Attributes: Selected Focus Domain and System Scope payload message.
- Security Attributes: DOM Honeypot status and transient cryptographic token challenge validation.
Inquiry payloads are utilized strictly to evaluate project fit, coordinate consulting engagements, or respond to your query. Information is never distributed, syndicated, or sold.
3. Client-Side Persistence & Cookies
We do not use tracking or profiling cookies. Client persistence is strictly limited to first-party functional keys stored in your browser’s localStorage:
| Key Identifier | Classification | Functional Purpose |
|---|---|---|
| theme | Essential UI | Persists dark/light mode preference across navigation. |
| cfs_consent | Essential Compliance | Records your acknowledgement of this telemetry policy. |
4. Third-Party Infrastructure Security
To protect public ingress endpoints from denial-of-service, automated scraping, and payload poisoning, we deploy Cloudflare Turnstile.
Turnstile operates without reading private biometric data or issuing tracking cookies. It performs a non-invasive cryptographic proof-of-work check to determine human agency. Validation requests are handled pursuant to Cloudflare’s standard privacy standards.
5. Inquiries & Data Rights
You retain the right to request a full transcript or permanent deletion of any past inquiry data transmitted under your electronic mail identity. To execute a data review or erasure request, initiate an inquiry via the main ingress channel or direct electronic mail to contact@cfscastillo.com.