Who is responsible for this data
The data controller is Pablo Sánchez Blanco, acting as an individual (persona física) established in Spain.
This site has no server-side database. What it stores lives in your own browser. The one thing that leaves it is Google Analytics, and only if you accept it.
[PENDIENTE: dirección de contacto en el dominio del proyecto para ejercer derechos.]
What this site stores, in full
Four things, all of them in your own browser. There is no account, no login and no server-side database. Google Analytics cookies are separate, set only if you accept, and listed below.
| What | Where | Why | Leaves your device? |
|---|---|---|---|
| Your region choice (US or Europe) | localStorage | So the catalog opens on the same region next time. | No |
| Your analytics choice (accept or decline) | localStorage | So the banner does not ask again on every page. | No |
| A log of outbound clicks to distributors | localStorage | Counts of which distributor links get used. | No |
| Which page you were on when you clicked out | localStorage | Same purpose. | No |
You can see the click log yourself: open the browser console and run window.aaOutboundLog(). You can erase all of it by clearing site data for this domain.
Google Analytics, only if you accept
On your first visit a banner asks whether the site may use Google Analytics 4. If you click Accept, the site loads Google's script and it counts page views and clicks through to distributors. If you click Decline, or ignore the banner, Google's script is never loaded and nothing is sent to Google.
Legal basis: your consent (GDPR art. 6.1.a, and art. 22.2 of Spain's LSSI for the cookies). You can withdraw it at any time with Cookie settings in the footer. Withdrawing stops the measurement and deletes the Google Analytics cookies from this domain.
What Google receives: the page address, the page you came from, device and browser type, an approximate location derived from your IP address, and, when you click out to a distributor, which distributor and product. Google Analytics 4 does not log or store IP addresses. Advertising features and Google signals are off: the data is not used for ads or to build ad profiles.
Who processes it: Google Ireland Limited, as processor under Google's data processing terms. Data may be transferred to Google LLC in the United States, which is certified under the EU–US Data Privacy Framework.
How long: event-level data is kept for 2 months, the retention set on this site's Analytics property. Reports aggregated from it are kept by Google.
Cookies
Two, both from Google Analytics, both set only after you accept. Without consent this site sets no cookies.
| Cookie | Set by | Purpose | Expires |
|---|---|---|---|
_ga | Google Analytics | Tells one visitor's browser apart from another's, without identifying the person. | 2 years |
_ga_WDRMNZ66LC | Google Analytics | Keeps the state of the current session. | 2 years |
What this site does not do
No geolocation. An earlier version of the catalog looked up your country by sending your IP address to a third-party service on every page load. It has been removed. The region switch is manual and defaults to the United States.
No advertising. Without your consent there are no trackers, no third-party scripts and no requests to third-party servers: the typefaces are served from this site. With your consent, Google Analytics is added, as described above.
No cookies without consent. The only cookies are the two Google Analytics ones above, set after you accept. The items in the first table use localStorage, which is not shared with any server.
No accounts. There is nothing to register for.
What is planned but not connected
Being straight about this matters more than a tidy page, because these are the parts that will actually collect something:
Email. The forms offering printable PDFs have no email provider behind them. They currently accept nothing and store nothing; submitting one tells you so. When a provider is connected, this page will name it and say what happens to an address.
Outbound links. Clicking through to a distributor takes you to their site, where their privacy policy applies and not ours. We do not control what they collect.
Fonts
The two typefaces, Schibsted Grotesk and JetBrains Mono, are served from this site. Loading a page makes no request to Google's font service or any other font provider, so your IP address is not disclosed to one.
Your rights
Under GDPR you have rights of access, rectification, erasure, restriction, portability and objection over personal data held about you.
This site holds no personal data on a server of its own. Analytics data held by Google is pseudonymous; to stop it, decline in Cookie settings. Everything else lives in your own browser, and clearing site data removes it.
[PENDIENTE: dirección de contacto para ejercer derechos, en el dominio del proyecto. Nunca una cuenta personal ni de otro empleador.]