Privacy policy

This privacy notice explains what personal data carlosgotlib.com collects, why we use it, who we share it with and how you can exercise your rights. It is issued under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties and also takes into account the EU General Data Protection Regulation (GDPR) for visitors from Europe.

Controller

Carlos Gotlib, based in Mexico City, Mexico, is the controller of your data. For any privacy matter, write to hola@carlosgotlib.com.

What we collect and why

Newsletter: your email address, language, the page you subscribed from and the date. We use them to send you the newsletter and the resources you request. Every email includes a one-click unsubscribe link.
Contact form: your name, email, company or organization, type of request, your message and, for invitations, the date and city of the event. We use them only to reply and follow up. To stop spam we store an encrypted fingerprint of your IP (not the IP itself) with the message and use Cloudflare Turnstile.
Our own site statistics (no cookies): which pages are visited, which site you came from, approximate country, region and city, device type, browser, operating system, screen size, browser language and how long the page is visible. We don't store your IP address or use cookies: each visitor is represented by a code that changes every day and can't be used to identify you. We also count bot visits (search engines, AI tools and social networks).
Google Analytics: if you accept it (or where consent isn't required), Google Analytics uses cookies (_ga and _ga_*) to measure site usage in aggregate. We don't use it for advertising: ads and personalization features are turned off.
Clicks on the links page and blog reads: counted anonymously (which link or post, when, and the language).
Browser preferences: the theme (light or dark) and your cookie choice are stored in your own browser and never sent to our servers.

Newsletter, contact and statistics data are needed to provide those services. Statistics and Google Analytics are secondary purposes that help us improve the content, and you can object to them (see "Cookies and how to turn them off").

Cookies and how to turn them off

The site doesn't use first-party cookies to measure visits. The only third-party cookie is Google Analytics. If you visit from the European Union, the European Economic Area, the United Kingdom or Switzerland, we ask for your permission before turning it on. From any country you can change your choice with the "Cookies" link at the bottom of every page, delete cookies in your browser, or install the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout).

Social media

The site shows the public videos from Carlos Gotlib's own YouTube, Instagram and TikTok accounts. To do that it connects, with Carlos's own permission, to those networks' official APIs and reads only information about his own videos (title, cover, link, date and public metrics such as views and likes). It doesn't read anyone else's data or post anything on anyone's behalf. Carlos can revoke the connection at any time from the site's admin or from each network's settings; doing so deletes the stored permissions.

Who we share your data with

We don't sell or rent your data. Only these providers process it, on our behalf and to run the site: - Vercel (site hosting and approximate location from IP). - Neon (database). - Resend (email delivery). - Cloudflare Turnstile (spam protection on the form). - Google Analytics (aggregate statistics, only under the conditions above).

These providers may store data on servers in the United States or other countries, with contractual safeguards. We may also disclose data when a competent authority requires it by law.

How long we keep it

Subscribers: while you remain subscribed. If you unsubscribe, we keep only your email marked as "unsubscribed" so we never write to you again.
Contact messages: while useful for follow-up, and no longer than 3 years.
Our own statistics: 14 months.
Google Analytics: 14 months.

Your rights

You can access, correct or delete your data, object to its use, withdraw your consent and limit its use or disclosure. If you are in Europe you also have the right to data portability and to lodge a complaint with your data protection authority. If you are in California, we don't sell or share your personal information for advertising.

To exercise them, write to hola@carlosgotlib.com with your name, the email you used, which right you want to exercise and, if applicable, what to correct. We reply within 20 business days and, where appropriate, act on it within the following 15 business days. To unsubscribe from the newsletter, the link in each email is enough. If you believe we didn't handle your request properly, you can contact Mexico's data protection authority.

Security

We use encrypted connections (HTTPS), restricted admin access with two-factor authentication and providers with recognized security standards. No system is infallible; if we detect a breach that affects you, we'll tell you.

Children

The site isn't directed at children under 16 and we don't knowingly collect their data. If you believe a child has given us their data, write to us and we'll delete it.

Changes to this notice

If we change this notice, we'll publish the new version here with its update date. If the change is significant and we have your email, we'll let you know.