Privacy Policy
Last updated: 19 October 2026
This site is the professional page of Alex Conesa. It collects as little as it can. This page explains what is collected, why, who else is involved and what you can ask of me.
Who is responsible
Alexandre (Alex) Conesa, based in Dallas, Texas, United States, is the controller of the personal data processed through alexconesa.com. For any privacy question or request, use the contact form or write to .
The contact form
When you send a message I receive your name, email address, company (if you give one), the topic you choose, your message, the date and time, and the IP address it was sent from. I use them only to read and answer your message and to keep the form free of abuse. The legal basis is my legitimate interest in replying to people who contact me, and, where your message is about a possible engagement, steps taken at your request before a contract.
The message is delivered by email through Migadu, the email provider that hosts my mailbox, and is kept in that mailbox for as long as the conversation is relevant. Ask and I will delete it. To limit repeated submissions, a one-way hash of your IP address is kept on the server for one hour and then discarded.
Bot protection: Cloudflare Turnstile
The contact form is protected by Cloudflare Turnstile, which tells people and automated bots apart, usually without asking you to do anything. It is loaded only when you start using the form. To make that check, Turnstile collects signals from your browser and connection, such as your IP address, TLS fingerprint, User-Agent header, and the site key and origin of this site.
- For bot protection, Cloudflare acts as a processor on my behalf and under my instructions. The legal basis is my legitimate interest in protecting the form and my inbox from spam and abuse.
- Cloudflare also uses these signals, as an independent controller, to improve Turnstile's bot detection, based on its own legitimate interests.
- Cloudflare states that it does not use these signals to identify, profile or target individuals. Data used by Turnstile is strictly necessary for the check.
Details: Cloudflare Turnstile Privacy Notice, Cloudflare Privacy Policy and Cloudflare Cookie Policy. Requests about this processing should be sent to me as the website operator; Cloudflare's Data Protection Officer can be reached at [email protected].
Analytics: Google Analytics
If you accept analytics cookies, this site uses Google Analytics 4 to understand how it is used: which pages are visited, how visitors arrived, and their approximate location, device and browser. Google Analytics then sets cookies in your browser (named _ga and _ga_*) to tell visits apart. I see aggregated reports only, and advertising features are turned off. Google processes this data under the Google Privacy Policy.
Nothing is loaded from Google Analytics until you click Accept in the cookie banner; the legal basis is your consent. Your choice is stored in your browser for 12 months, after which you are asked again. You can change it at any time with ; rejecting removes the analytics cookies. You can also use the Google Analytics opt-out add-on.
Fonts and hosting
Web fonts are loaded from Google Fonts (fonts.gstatic.com), so your browser sends your IP address to Google when fetching them. The web server that hosts this site keeps standard request logs (IP address, date and time, page requested, browser) for security and troubleshooting.
Your theme (light or dark) and your cookie choice are saved in your own browser's local storage. They are never sent anywhere.
Links to other sites
Links to LinkedIn, GitHub and my blog take you to services with their own privacy policies.
International transfers
This site is run from the United States, and Cloudflare and Google may process data in the United States and other countries. Where the GDPR or UK GDPR applies, these providers rely on recognised safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses.
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict its processing, and to receive a copy of it. If you are in the EU, the UK or Switzerland you can also complain to your data protection authority. I do not sell or share personal data for advertising. To exercise any of these rights, contact me as described above.
Changes
If this policy changes, the new version will be published on this page with a new date.