Privacy Policy | César Jerez

This policy explains what personal information strps.dev collects, why, how long it is kept, and what you can do about it. It covers every page served under strps.dev.

Who is responsible

César Jerez, an independent software developer based in San José, Costa Rica, runs this site and is responsible for the personal information it collects. For anything about your data, write to csrstrps@gmail.com.

What is collected

You can read this site without an account and without identifying yourself. Information reaches me in three ways:

What you send through a contact form — typically your name, email address, your message, and optional project details such as a budget range. You decide what goes in the message; please do not include sensitive information such as health data, identity numbers, passwords, or payment details.
Technical data — the hosting provider automatically records request information such as IP address, browser and device type, the page requested, and the time of the request.
Preferences stored on your own device — your language and light/dark theme. These stay in your browser and are explained in the Cookie Policy.

This site does not use analytics, advertising, or cross-site tracking tools. It has no user accounts, newsletter, or comments, and it does not sell anything.

Why it is used

To reply to your enquiry and, if you ask for one, prepare a proposal. The basis is your own request and the consent you give by sending the form.
To keep the site secure and available, and to investigate errors and abuse. The basis is my legitimate interest in running a working, safe site.
To meet legal obligations, for example if a lawful authority requires it.

Your information is never sold, rented, or shared for advertising, and it is not used for automated decision-making or profiling.

Service providers

A few providers process data on my behalf, only as needed to run the site:

Vercel (United States) — hosting, content delivery, database, and file storage. Stores contact form submissions and processes request logs.
Resend (United States) — email delivery, used when a form is set up to send a notification email.
Google reCAPTCHA (United States) — only on forms where it is switched on. It checks that a submission comes from a person, using your IP address and browser signals, under Google’s own privacy policy and terms. When it is active, a notice appears under the form.

International transfers

These providers operate servers outside Costa Rica, mainly in the United States, so your information is transferred there when you use the site. They are established providers that commit to protecting the data they handle, including through standard contractual clauses where the law requires them.

How long it is kept

Contact form submissions are deleted automatically 12 months after they are received. You can ask for earlier deletion at any time.
If your enquiry turns into a project, the correspondence needed for it becomes part of that project’s records and is kept for as long as the work and applicable tax and accounting obligations require.
Server logs are kept according to the hosting provider’s own retention schedule, which is short and not controlled by me.

Security

The site is served only over HTTPS, stored submissions can only be read through a password-protected administration panel, and the providers above maintain their own security programmes. No system is perfectly secure, but reasonable measures are in place to protect your information.

Your rights

You can ask to access the information I hold about you, have it corrected, have it deleted, object to its use, or withdraw your consent. Where the law gives you a right to receive your data in a portable format, you can ask for that too. Write to csrstrps@gmail.com; I will answer within five business days. I may ask you to confirm your identity before acting on a request.

If you are not satisfied with the answer, you can complain to Costa Rica’s data protection authority, the Agencia de Protección de Datos de los Habitantes (PRODHAB), or to the data protection authority where you live.

Children

This site is aimed at businesses and professionals. It is not directed at children, and people under 18 should not send personal information through it.

Notice for California and other US residents

I do not sell or share personal information as those terms are defined in US state privacy laws. Because the site does not track visitors across other sites, browser “Do Not Track” signals do not change how it behaves.

Changes to this policy

When this policy changes, the version and effective date at the top are updated and the new text is published here. Material changes will not apply to information collected before they take effect without your consent where the law requires it.