Privacy notice

1. Data controller

CirusDev, as author and owner of cirusdev.com, is the controller of personal data collected through this site. Privacy and ARCO-request channel: contacto@cirusdev.com. No additional personal name is published, as none is evidenced as an approved data point for this notice.

2. Address for requests

Requests about this notice are handled electronically at contacto@cirusdev.com. Residual-risk note: the Mexican data-protection law (LFPDPPP, art. 15) requires stating the controller's domicile; by express owner decision no personal domicile is published in this notice. This leaves residual legal risk (a potentially incomplete notice before the authority), curable through legal review and, where applicable, a designated procedural domicile or formal contact channel.

3. Data collected

Contact form (/en/contact/): name, email address, subject (optional) and message; invisible anti-bot honeypot field ("website", must stay empty). Memberships/newsletter via Ghost Portal ( / and site search): subscription email. Anti-bot verification: Cloudflare Turnstile (verification token, no message content). Functional local preferences: theme (site_theme) and locale (site_locale) stored only in your browser's localStorage. No sensitive data is collected through these means.

4. Purposes

Primary purposes: (a) receiving, validating and answering messages sent through the contact form; (b) operating the site and managing subscriptions and member sessions via Ghost Portal; (c) preventing abuse, spam and automated submissions (honeypot + Turnstile). No secondary purposes (marketing, prospecting, commercial transfer) are stated because none is evidenced in the implementation. Submitting the form requires prior acceptance of this notice (privacyAccepted checkbox, real value sent to the backend); without acceptance the message is not processed.

5. Retention and deletion

No approved retention periods exist in the repository, so no numeric period is stated. Applicable criterion: contact messages are kept only as long as needed to handle the request and reasonable follow-up, then deleted or anonymized when no longer needed. Subscription data is kept while the subscription is active and deleted upon cancellation. No invented period (e.g. 90 days) is stated, as none is evidenced.

6. ARCO rights and contact

You may exercise your Access, Rectification, Cancellation and Opposition (ARCO) rights, and revoke your consent, by writing to contacto@cirusdev.com stating: your name, a channel for our reply, a clear description of the data and the right you wish to exercise, and anything helping us locate your data. We reply through the same channel within applicable legal timelines. Revoking consent has no retroactive effect and may mean we can no longer serve your request through that channel.

7. Cookies, local storage and third parties

This site has no verified third-party analytics in the theme (no gtag, Plausible, Matomo, Hotjar or similar in the audited code). The following are used: (a) Ghost Portal/search/members — Ghost's own scripts injected via /, subject to your Ghost instance configuration; (b) Cloudflare Turnstile (challenges.cloudflare.com, script + iframe) only on the contact pages, for anti-bot verification; (c) the forms backend forms.cirusdev.com (contact POST destination); (d) functional local storage site_theme/site_locale (theme and locale preferences; no activity tracking). No further cookie inventory is stated, as none is verified.

8. Transfers and processors

Your information is never sold or shared for commercial purposes. The following act solely as technical processors to operate the site: the Ghost instance hosting provider, Cloudflare (Turnstile verification) and the forms backend forms.cirusdev.com (message reception and delivery). Each external demo or product linked from the site (e.g. demos with a different controller) is governed by its own notice; this notice covers cirusdev.com and its contact form.

9. Security and demo data

Reasonable measures apply: anti-bot validation (Turnstile + honeypot), submission rate limiting, an origin allowlist, and the privacy-acceptance checkbox gating submission. Avoid including sensitive or third-party data in messages and public demos; demo environments are illustrative and must not be used with real sensitive data. No measure is infallible; if an incident affects you, notify us at contacto@cirusdev.com.

10. Changes to this notice

Any material change to this notice will be published on this same page (/en/privacy/ and its /aviso-de-privacidad/ equivalent) with a new update date. The effective date is the one in the header. Continued use of the form after published changes implies your knowledge of the current notice.