Privacy notice

Eduardo Leal, an individual based in MONTERREY, NL — MEXICO, is responsible for the personal data collected on this site, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties.

For anything related to this notice, write to contact@eduardoleal.dev.

It depends on what you do on the site:

• If you ask for my CV by email: your email address.
• If you contact me by email, WhatsApp or phone: whatever you choose to share (name, email, number, message).
• While browsing, automatically: pages you visit, clicks, scrolling and time on each section; a recording of your session with every text field masked; technical errors; browser and device type; approximate country and the site you came from. All of it is tied to a random identifier, not to your name.
• To protect the site: technical signals from your browser to tell people from bots, and your IP address, which is only kept in memory for 15 minutes to rate-limit emails.
• If you vote on the blog: it only adds to the post's count. Your vote is remembered in your own browser, not on my servers.

I don't collect sensitive personal data (health, origin, beliefs, orientation), nor financial or payment data.

Necessary purposes, without which I can't give you what you asked for:

• Sending you the CV you requested.
• Replying when you contact me.
• Running the site, keeping it secure and preventing abuse (bots, mass sending, spam).

Secondary purposes, which aren't necessary and which you can object to without changing your experience:

• Understanding how the site is used and improving it: usage metrics, session recording and error tracking.

The button below turns off PostHog (analytics and session recording) in this browser. The choice is stored in your browser; if you clear its data or switch devices, you'll need to choose again. Vercel will still count visits in aggregate, without cookies and without identifying you.

You can also use a content blocker or write to contact@eduardoleal.dev.

I don't sell or rent your data. These providers process it on my behalf and only for what's described here:

• [Vercel](https://vercel.com/legal/privacy-policy): hosts the site, measures its performance without cookies and protects it from bots.
• [PostHog](https://posthog.com/privacy): analytics, session recording, errors and technical logs. Requests go through a proxy on this domain (/ingest).
• [Resend](https://resend.com/legal/privacy-policy): sends the email with the CV.
• [Upstash](https://upstash.com/trust/privacy.pdf): stores the blog content and vote counts, with no personal data.

These providers run servers in the United States, so your data may be processed outside Mexico. I would only share data with authorities if a law or court order requires it.

• Language (cookie, 1 year): remembers whether you prefer Spanish or English. Necessary.
• PostHog (cookie and local storage): keeps your visit's random identifier. Secondary, and switched off by the button above.
• Local storage: remembers your blog vote and where you left the Spotify player.

Vercel Analytics and Speed Insights don't use cookies.

Your email isn't stored in any database: it's used to send the CV, and the email provider keeps a delivery record for a limited time. Messages you send me stay in my inbox or WhatsApp while the conversation is relevant. Analytics data is kept according to each provider's retention periods.

You have the right to access your data, rectify it, cancel it or object to its use, and to withdraw your consent at any time.

To do so, write to contact@eduardoleal.dev with your name, the right you want to exercise and which data it concerns (for example, the address you sent the CV to). I'll reply within the time limits set by law.

If you believe your rights weren't respected, you can turn to Mexico's Secretaría Anticorrupción y Buen Gobierno, the authority on personal data protection.

If anything changes (a new provider or a new form, for example), I'll publish it on this page and update the date above.