Privacy Notice

Who runs this site

This is the personal portfolio of Cordero Core, an individual based in Seattle, Washington, United States. For anything privacy-related, use the contact form and choose the General inquiry type.

What this site collects

The contact form. If you submit it, the following is stored: your name, email address, organization (if you provide one), your message, and — recorded automatically with the submission — your IP address and country. Submissions are stored in a database and a copy is delivered to my inbox by email.

The newsletter. Signing up for my letters stores your email address, when you signed up, the exact consent wording you saw, and — recorded automatically for abuse forensics — your IP address and country. Nothing is sent until you confirm from your own inbox (double opt-in). Every letter carries a working unsubscribe link; unsubscribing stops all sending immediately, and you can ask for full deletion via the contact form.

Bot protection. The contact form and the newsletter signup use Cloudflare Turnstile to distinguish people from bots. Turnstile evaluates connection and browser signals and may set strictly-necessary cookies to do so; it is not advertising or analytics tracking. Its processing is described in Cloudflare’s privacy policy.

Hosting. This site is served by Cloudflare, whose infrastructure maintains standard server logs (such as IP addresses) for security and operations under its own policies.

What this site does not do

No analytics. No advertising. No tracking cookies of its own. No social-media pixels. Your information is never sold, rented, or shared for anyone else’s marketing — full stop.

Why it’s collected

To read and respond to your inquiry, and to send the newsletter you explicitly signed up for (consent in both cases), and to keep the forms usable by preventing spam and abuse (a legitimate interest). IP and country are kept with submissions solely for abuse and spam forensics. Nothing is used for profiling or automated decisions.

Where it lives and who touches it

Submissions and newsletter records are stored on Cloudflare infrastructure in the United States (Cloudflare D1) and delivered by Cloudflare’s email service to my inbox. Cloudflare acts as a service provider under its standard data protection terms. No other third party receives your information.

How long it’s kept

Contact submissions are retained for up to 24 months from submission, in line with standard practice for business correspondence, then deleted. If an inquiry becomes an ongoing engagement, related correspondence may be kept for the duration of that engagement and as required for legal or accounting records. Newsletter records are kept while you’re subscribed; after you unsubscribe, your address is retained only as a do-not-mail marker unless you ask for full deletion.

Your rights and choices

You can ask what I hold about you, ask for a copy, ask me to correct it, or ask me to delete it — via the contact form. I honor these requests regardless of where you live, including rights under the EU/UK GDPR and the California Consumer Privacy Act where they apply. You won’t be treated differently for exercising them. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local supervisory authority.

Security

Traffic to this site is encrypted (TLS). Stored submissions are accessible only to me, protected by Cloudflare’s infrastructure security and scoped credentials. No system is perfectly secure, but the attack surface here is deliberately small.

Links elsewhere

This site links out — Medium, Substack, LinkedIn, GitHub, ORCID, X, and others. Once you leave, their privacy policies govern, not this one.

Changes

If the site’s data practices change, this notice will be updated and the effective date revised. Meaningful changes won’t be applied retroactively to information collected under an earlier version.