Privacy notice

Last updated: 12 September 2026

Who is responsible

Luiz Trajano, based in Porto, Portugal, is the controller of the personal data collected through this website. For any question about your data, or anything else on this notice, write to me through the contact form and I will get back to you.

What is collected, and why

What you type into the contact form: your name, your email address and your message. They are used for one purpose, to read and answer your enquiry.

One thing you do not type is collected as well, and it is only fair to name it. When you submit the form, the server briefly keeps your IP address together with the time of the submission, so that it can cap how many messages a single visitor sends in a row. That cap exists to stop the form being used to send mail in bulk. It is held only in memory and never written to disk, it is discarded after 10 minutes, and it is never attached to your message or used to identify you.

Legal basis

For your name, email and message: your consent, given by ticking the box on the contact form. You may withdraw it at any time by emailing me, and that will not affect the lawfulness of processing carried out before the withdrawal. For the short-lived IP record: my legitimate interest in keeping this form from being abused.

Where the data goes, and for how long

There is no database behind this website. Your message is delivered to my email inbox and exists only there. I keep enquiries for as long as the conversation is useful, and delete them within 24 months at the latest.

Two processors are involved: Resend, which delivers the email, and Vercel, which hosts the site. Both are companies established in the United States, so sending your message involves an international transfer of personal data, carried out under the safeguards those providers offer for transfers out of the European Economic Area.

Cookies and tracking

This site sets one cookie, NEXT_LOCALE, only after you pick English or Portuguese from the language switch. It stores nothing but that choice, is read only by this site, expires in a year, and is never used to identify or track you. Fonts are served from this domain, not from an external provider.

Two cookieless measurement tools from Vercel also run here: Vercel Analytics counts page views in aggregate, and Speed Insights measures loading performance. Neither sets a cookie, neither builds a profile of you, and neither follows you to other sites. None of this needs a consent banner: the language cookie is strictly necessary for the feature you asked for by clicking it, and the other two never identify you in the first place.

Your rights

You may request access to your data, correction, erasure, restriction of processing, or portability, and you may object to processing. Write to me and I will act on it. If you believe your data has been mishandled, you can lodge a complaint with the Portuguese data protection authority, the CNPD (Comissão Nacional de Proteção de Dados).

Automated decisions

None. No profiling, no automated decision-making.