Privacy

This describes what this site actually does, not what a template says a site might do. If anything here is unclear, email me and I will answer.

This site is run by Diogo Ferreira, an independent designer and developer based in Luxembourg. I am the only person who sees anything collected here. For anything on this page, write to df@diogoferreira.com.

Analytics

Every page loads Google Analytics 4, measurement ID G-K8NCWRLVY0. It records which pages were opened, roughly where in the world the visit came from, the device and browser, and which site or search sent the visit. It sets cookies in your browser, named _ga and _ga_<id>, which by default last two years. Google processes this data as my provider, and it can be processed outside the European Union.

It loads on every visit without asking first. If you would rather it did not run, block it in your browser's settings or with any content blocker, or install Google's own opt-out add-on. Nothing on this site stops working if you do.

I use it to see which writing is read and which pages are never found. There is no advertising on this site, no retargeting, no tracking pixel from any social network, and nothing is ever sold or handed to a data broker.

The enquiry form

If you send the form on the contact or quote pages, it carries what you typed: your name, email address, company, the services, budget and start date you picked, and your message. It is posted to a function on this site, which hands the message to Resend, an email provider, which delivers it to my inbox. Resend and my mailbox provider both hold a copy in transit.

The form also sends two things you did not type: how long the form was open before it was sent, which is how I tell a person from a bot, and the path of the page you sent it from. It does not store anything in your browser.

I keep enquiries in my mailbox for as long as the conversation is useful, and for accounting records where the enquiry became paid work. Ask me and I will delete yours.

Hosting and logs

The site is hosted by Vercel, which keeps short-lived request logs that include IP addresses and browser user agents. That is ordinary server operation and I use it only to find faults. Fonts are served from this domain rather than from a font provider, so no third party learns of your visit that way. The only third-party script on any page is Google's analytics.

Your rights

Under the GDPR you can ask me for a copy of anything I hold about you, ask me to correct it, ask me to delete it, or object to my using it. One email does it, and one person reads it. If you are not satisfied with how I handle that, you can complain to the Commission nationale pour la protection des données, the supervisory authority in Luxembourg.

Changes

If what the site does changes, this page changes with it and the date at the top moves. There is no version history worth keeping yet: this is the first version, published on 13 November 2026.