Privacy

Privacy
and cookies

This site collects very little: what you write in a form, so I can reply, and — only if you accept — anonymous statistics about which pages get read. Nothing is sold, shared for advertising or added to a mailing list.

Last updated 4 October 2026

Who is responsible

yabintorres.com is run by an individual, not a company. I am the data controller for everything described on this page, under the EU General Data Protection Regulation (GDPR) and Spain’s Organic Law 3/2018 (LOPDGDD).

Name
Yabin Torres
Based in
Barcelona, Spain
Contact
Contact form

Write to me through that form for anything on this page, including the rights listed below.

What I collect and why

When you write to me. The contact and page teardown forms ask for your name, email and message, and the teardown form also for the page you want reviewed and its goal. I use them only to answer you and, if we agree to work together, to prepare that work. Legal basis: steps you ask for before a possible contract, and my legitimate interest in replying to messages (GDPR art. 6.1.b and 6.1.f).

Statistics, only with your consent. If you click “Accept” in the cookie banner, Google Analytics records which pages you visit, roughly where from, the device and browser, and how you arrived. It does not tell me who you are. If you decline or ignore the banner, it never loads. Legal basis: your consent (GDPR art. 6.1.a), which you can withdraw at any time.

Technical logs. Like any server, the hosting provider records IP addresses and requests briefly to deliver the site and protect it from abuse. Legal basis: legitimate interest in keeping the site running and secure (GDPR art. 6.1.f).

I don’t make automated decisions about anyone, and I don’t build profiles.

Who else handles it

A few services do part of the work for me. Each one only receives what it needs for its task.

Vercel Inc. (USA)
Hosts the site and keeps its server logs.
Web3Forms (outside the EU)
Receives what you send through a form and forwards it to my inbox.
hCaptcha — Intuition Machines Inc. (USA)
Checks that a form is sent by a person and not a bot. It only loads on the two pages with a form.
Google Ireland Ltd. / Google LLC (USA)
Google Analytics, only after consent. Google Fonts also serves the typefaces this site uses.

Some of these providers process data in the United States. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses (GDPR art. 45 and 46).

How long I keep it

Messages stay in my inbox while the conversation is useful, and are deleted at the latest two years after the last exchange — unless they become part of a project, in which case they are kept as long as tax and accounting law requires.

Analytics data is kept by Google for a maximum of 14 months, then deleted automatically.

Server logs are kept by Vercel for a short period set by their own policy, and are not used by me.

Cookies

A cookie is a small file a site stores in your browser. This site only uses analytics cookies, and only after you accept them.

yt-cookie-consent
Remembers whether you accepted or declined, so the banner doesn’t ask again. Stored in your browser’s local storage, never sent anywhere. Necessary; kept until you clear your browser data.
_ga
Google Analytics. Tells visits from the same browser apart. Analytics; 2 years. Only after consent.
_ga_5MHWQYG4MV
Google Analytics. Keeps track of the current visit. Analytics; 2 years. Only after consent.

hCaptcha, on the contact and teardown pages, may store technical data needed to tell people from bots. It is part of the form you choose to send, not tracking.

You can change your choice whenever you want: change cookie settings. Declining after having accepted deletes the Google Analytics cookies. You can also block or delete cookies from your browser’s settings.

Your rights

You can ask me to show you the data I have about you, correct it, delete it, limit how I use it, send it to you in a reusable format, or stop using it. Where I rely on your consent, you can withdraw it at any time without affecting what was done before.

Write to me through the contact form. I’ll answer within one month. I may ask you to confirm it’s really you before handing over any data.

If you think I haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority in your own EU country.

Use of this site

The texts, images and case studies on this site are my work or are published with the permission of the organisations involved. Please ask before reusing them. Third-party names and logos belong to their owners.

If this page changes, the date at the top will change with it. These terms are governed by Spanish law.