AR.

Privacy

What this site collects, and why.

This is my personal portfolio. I want to know which pages people read and which links they follow, and nothing more. This page explains exactly what happens when you visit, in plain language. Last updated October 15, 2026.

The short version

  • If you agree, the site uses Google Analytics to count page views and clicks on links that lead to other websites. It sets cookies to do this. If you decline, or don't answer, it never loads.
  • If you use the contact form, I keep your name, email address, and message so I can reply.
  • I don't sell your information, show ads, or use it for anything other than running this site and replying to you.
  • You can change your answer at any time from this page.

Visiting a page

The site runs on Railway, a hosting company. Like nearly every web server, it records each request in a server log: your IP address, the page you asked for, the time, and whether it loaded. I use these logs only to fix problems and keep the site running. They are stored by Railway, and how long they are kept depends on Railway's settings, not mine.

Google Analytics

On your first visit, a banner asks whether you allow analytics. Until you press Accept, the site doesn't load anything from Google and doesn't set any Google cookies. If you accept, each page loads a script from Google (Google Analytics 4) that measures two things:

  • Page views: which page you opened, the page title, and the page that sent you here (the referrer).
  • Outbound clicks: when you click a link to another website, the address of that link.

Along with each of these, your browser sends Google technical details such as your browser type, device type, screen size, language, and your IP address. Google uses the IP address to estimate a rough location (country and city). I see these results only as totals in reports; Google does not show me your IP address.

To tell a returning visitor from a new one, Google Analytics stores two cookies in your browser on this site:

  • _ga, a random ID for your browser. It lasts up to 2 years.
  • _ga_JH0KBKW3K9, which keeps track of your current visit. It also lasts up to 2 years.

Google signals and ad personalization are turned off in the tag. These cookies don't contain your name or email address, and I don't connect analytics data with contact form messages. Google processes this data under the Google Privacy Policy. Google explains how it uses information from sites like this one on its partner sites page.

Remembering your choice

Whichever button you press, the site stores a small cookie called analytics_consent containing only granted or denied, so it doesn't ask you on every page. It stays in your browser, isn't sent to Google, and expires after 180 days, when the banner asks again.

The contact form

If you send a message, the site stores your name, email address, the reason you picked, and your message, with the time you sent it. It is saved in the site's database, which is also hosted by Railway. I use it only to read and reply to your message.

To stop the form from being flooded, the server briefly uses your IP address to allow at most three messages per hour. That count lives only in the server's memory. It is not saved with your message and is gone within an hour.

Messages are kept until I delete them. Nothing deletes them automatically yet. If you'd like yours removed, email me and I'll delete it.

Email

If you email me directly, your message is delivered to my mailbox, which is hosted by Zoho Mail.

Who receives your information

  • Me, Ana Rodriguez: contact form messages and emails, plus analytics totals.
  • Railway, which hosts the site and its database: server logs and contact form messages.
  • Google, which runs Google Analytics: the page view and click data described above, only if you accept analytics.
  • Zoho, which hosts my email: any email you send me.

I don't share or sell your information to anyone else.

Your choices

  • Accept or decline analytics: use the banner, or change your answer here at any time. If you switch from accept to decline, the site deletes its Google Analytics cookies from your browser.
  • Global Privacy Control: if your browser sends this signal, the site treats it as a decline and doesn't load Google Analytics. The site doesn't respond to the older Do Not Track signal.
  • Without JavaScript: if JavaScript is off, Google Analytics never loads and no banner appears.
  • Browser tools: Google's Google Analytics opt-out add-on, tracker blockers, and clearing this site's cookies all work too. The site works fully without Google Analytics.
  • Skip the form: you don't have to use the contact form to reach me. Nothing on the site requires it.
  • Ask me: email ana@anarodriguezespinoza.com to ask what I have about you, or to have your contact form messages and emails deleted.

Declining stops future collection, but it doesn't remove analytics data Google has already received. I can't delete data that Google or Railway hold on their side, such as server logs. Their privacy policies, linked above, explain your options with them.

Changes

If I change what this site collects, I'll update this page and the date at the top.