Introduction

This personal blog is operated by Cristian Schmitt Nieto. I respect your privacy and handle personal data in line with the General Data Protection Regulation in the European Economic Area, as well as similar rules in the United Kingdom and Switzerland. This policy explains what I collect, why I collect it, how I use it, how long I keep it, and the choices you have.

If you have questions, contact me at privacy@schmitt-nieto.com.

Who is the controller

Controller
Cristian Schmitt Nieto
Email: privacy@schmitt-nieto.com

Where and how the site is hosted

This site runs on GitHub Pages. When you visit the site, GitHub may process standard server logs for security and reliability. See the GitHub Privacy Statement for details. I do not control GitHub’s independent processing.

What I collect

I try to keep data collection to a minimum.

1) Essential data
Basic technical information provided by your browser and device is processed by the hosting platform for security and to deliver the site. This includes IP address, user agent, date and time of request, and requested URL.

2) Analytics and usage data
With your consent, I use Google Analytics and Microsoft Clarity to understand how visitors use the site. This can include page views, time on page, navigation paths, scroll depth, interactions, approximate region, device and browser information, and similar metrics. I do not use these tools to identify you directly.

3) Comments with Disqus
By default, blog posts embed Disqus for comments. When the comments widget loads, Disqus may set cookies, read your IP address and user agent, and process interaction data. If you post a comment, Disqus will process any information you submit. Disqus operates as an independent controller for its service.

I do not collect special category data on this site and I do not knowingly collect data from children.

When you first visit, you will see a consent banner. Analytics cookies and similar technologies only load after you choose Accept. If you choose Decline, only essential technologies required to run the site are used.

Starting 31 October 2025, Microsoft Clarity requires an explicit consent signal for visitors in the EEA, the UK, and Switzerland. The site uses Google Consent Mode v2 and the Clarity Consent API to transmit your choice. If you decline, I disable analytics storage and Clarity runs in a restricted mode that does not set analytics cookies.

You can change your choice at any time by using the cookie button shown on the page. You can also manage cookies in your browser settings.

For general information about cookies and management options, visit www.allaboutcookies.org.

The tools I use

Google Analytics

Provider: Google LLC
Purpose: measure site usage, performance, and aggregated engagement
Data: page views, events, device and browser info, approximate region, and similar metrics
Retention: controlled in my Analytics settings and by Google. Event data in GA4 is commonly retained for 2 to 14 months depending on configuration.
Legal basis in the EEA, the UK, and Switzerland: consent for analytics cookies and related processing
More info: How Google uses information from sites or apps

Microsoft Clarity

Provider: Microsoft Corporation
Purpose: understand user interactions such as clicks, scrolling, and navigation patterns, and improve usability
Data: interaction events, click and scroll data, device and browser info, approximate region. Clarity can record sessions in a way that seeks to avoid capturing sensitive content.
Retention: controlled by Microsoft.
Legal basis in the EEA, the UK, and Switzerland: consent for analytics technologies and related processing
More info: Microsoft Privacy Statement

Disqus comments

Provider: Disqus, a service of Ziff Davis or its affiliates
Purpose: host and display comments on blog posts, manage comment threads, prevent abuse
Data: when the widget loads, Disqus may set cookies and receive your IP address, user agent, and page URL. If you comment, Disqus will process the information you submit and may associate it with a Disqus account or social login.
Important: comments are embedded by default on post pages and cannot be disabled from this site. If you do not want Disqus to load, you can block third party scripts or cookies in your browser or use content blocking tools. Doing so may prevent comments from displaying.
Legal basis: for loading the widget, legitimate interests in providing an interactive blog and community features. For Disqus own processing, Disqus acts as an independent controller with its own legal bases.
More info: see the Disqus Privacy Policy available from the Disqus widget

Why I use your data

  • Provide and maintain the site
  • Protect the site from fraud and abuse
  • Understand what content is useful and improve the site
  • Provide a comment system through Disqus
  • Consent for analytics and similar technologies in the EEA, the UK, and Switzerland. You can withdraw consent at any time using the cookie button or your browser settings.
  • Legitimate interests for essential operations such as hosting, security, and loading the Disqus comments widget. These interests are balanced against your rights and freedoms.
  • Legal obligations where applicable, for example to maintain security logs.

Data sharing and international transfers

I share personal data with service providers only to the extent necessary to run this site.

  • Hosting and delivery: GitHub
  • Analytics: Google Analytics and Microsoft Clarity
  • Comments: Disqus

These providers may process data in countries outside your own, including the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses adopted by the European Commission or the UK International Data Transfer Addendum. Each provider also describes its safeguards in its privacy documentation.

Retention

I keep personal data only as long as needed for the purposes described above.

  • Hosting logs are retained by the hosting provider for security and reliability for periods they define.
  • Analytics data is retained according to the settings available in each tool and the provider’s policies.
  • Disqus retains comment data according to its own policies. If you want a comment removed, contact me and I will remove it from the page. You may also need to contact Disqus for deletion in their systems.

Your rights

Subject to local law, you can exercise the following rights

  • Access your personal data
  • Rectify inaccurate data
  • Erase your personal data in certain cases
  • Restrict processing in certain cases
  • Data portability in certain cases
  • Object to processing based on legitimate interests
  • Withdraw consent at any time for analytics and similar technologies

To exercise your rights, email privacy@schmitt-nieto.com. For Disqus account data, please contact Disqus directly using the links provided in their widget or policy.

You also have the right to lodge a complaint with your local supervisory authority.

This site may link to other sites. I am not responsible for their privacy practices. Review the privacy information on those sites.

Children

This site is not intended for children and I do not knowingly collect data from children.

Changes to this policy

I may update this policy from time to time. The most recent date appears at the top of the page. Significant changes will be highlighted on this page.

Contact

If you have questions or requests about this policy or how I handle your data, contact

Email: privacy@schmitt-nieto.com