Skip to content
AX Principles

Privacy

Privacy policy

Last updated:

Who is responsible

axprinciples.com is a personal project run by José Hurtado, who is the data controller for this site. For any privacy question or request, write to [email protected].

What this site does not collect

There are no accounts, no forms, no newsletter and no advertising on this site. We never ask for your name or email address.

Analytics, only with your consent

If you accept analytics in the banner, two services load. Until you do, neither script is loaded and neither sets a cookie.

  • Google Analytics 4 (Google LLC) measures which pages are read, how visitors arrive and from which country and device type. It sets the first-party cookies _ga and _ga_<ID>. Advertising features are off: ad storage and ad personalisation are denied.
  • Microsoft Clarity (Microsoft Corporation) produces heatmaps and session recordings of clicks, scrolling and mouse movement, with text input masked. It sets the first-party cookies _clck and _clsk, and Microsoft may set its own cookies (CLID, MUID, MR, SM, ANONCHK). Clarity keeps recordings for 30 days and heatmap data for 13 months.

The legal basis for analytics is your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time with the "Cookie settings" link in the footer; withdrawing deletes the analytics cookies and stops both scripts.

Hosting and delivery

The site is served through Cloudflare and hosted by Hostinger. Like any web server, they process your IP address and request details to deliver pages and protect the site from abuse. The legal basis is our legitimate interest in running a secure website (GDPR Art. 6(1)(f)). Cloudflare Web Analytics also counts page views and measures page load performance for every visitor. It uses no cookies or local storage and does not fingerprint visitors, so it runs without the consent banner, on the same legitimate-interest basis.

Your choice is stored in your browser

Your consent answer is saved in your browser's local storage under the key ax-consent, so the banner does not ask again on every page. It never leaves your device.

International transfers

Google, Microsoft and Cloudflare may process data in the United States. They rely on the EU-U.S. Data Privacy Framework and standard contractual clauses for those transfers.

Your rights

You can ask for access to, correction or deletion of data about you, object to processing, or withdraw consent. Because we never ask who you are, the analytics data is pseudonymous; the simplest way to remove it is to withdraw consent, which clears the identifiers in your browser. You can also complain to your local data protection authority. Write to [email protected].

Changes

If this policy changes, the date at the top changes with it.