Privacy and data
Privacy policy
What is recorded when you visit the site, what data you might provide, and how each is handled.
This is a translation. In case of any discrepancy, the Spanish version prevails.
Who is behind this.
The data controller is Ibrahin Alexander Gil Moran, an individual resident in Spain and owner of ibrahingil.com.
To exercise your rights or ask about privacy: contacto@ibrahingil.com.
The server records every visit.
This site is served from a personal computer at home, running a web server called Caddy. Since 5 September 2026 that program keeps an access log: one line for each page or file requested.
For each request it records the IP address it came from, the date and time, the address requested, the server’s response (for example, whether that page existed), the size of what was sent, how long it took and the technical headers your browser sends: its preferred language, the formats it accepts, the country Cloudflare reports and, where present, the link you arrived from. An IP address is personal data, which is why it is explained here rather than taken for granted.
The browser identifier —the so-called user agent— is not recorded: it is removed before each line is written. Neither are cookies or credentials: the server itself hides those.
The log is there to show whether someone is attacking or abusing the site, and to track down errors and broken links. It is not used to measure audience, build profiles or show advertising. There is no analytics and no third-party tooling: the log never leaves the computer that serves the site and is not passed to anyone.
The files delete themselves after 30 days. The log is also split every 10 MB, keeping only the five most recent parts, so it never grows out of control.
Only the information you choose to give.
The site has no form. The only channel is the address contacto@ibrahingil.com. If you write, what is received is whatever you choose to include: your email address, which is needed in order to reply, and the content of your message.
That data is used only to deal with your enquiry, correct a piece of content, handle an incident, consider a proposal or respond to a privacy request. Email is handled through an ordinary email provider.
If you subscribe to the letter.
At the end of every guide there is a form to subscribe to The letter, the weekly email. Subscribing is voluntary: the whole site can be read without giving any address.
One thing is asked, your email address, and it is used for one thing: sending you the letter. The legal basis is your consent (Article 6(1)(a) GDPR).
There is email confirmation. When you submit the form you receive a message with a link, and you are not subscribed until you click it. This is so nobody can add your address without your knowing.
You can unsubscribe whenever you want using the link at the bottom of every email, or by writing to contacto@ibrahingil.com. Sending stops immediately and your address is deleted.
Delivery is handled by Kit (Kit.com, Inc.), a company in the United States, acting as data processor. When you submit the form, your address travels to their servers. That is an international data transfer, covered by the European Commission’s standard contractual clauses. Kit records whether you open the emails and whether you click their links; that is used only to know whether the letter is worth anything and to stop writing to people who no longer read it.
There is no advertising in the letter, your address is not sold or passed to anyone, and it is not cross-referenced with the server access log.
One more thing, and it is about security: the form is plain HTML, with no third-party JavaScript. This site’s security header prevents outside code from running, so Kit cannot set cookies or track you while you browse. It only receives what you type and send by hand.
The purpose determines the legal basis.
The access log rests on the legitimate interest (Article 6(1)(f) GDPR) in keeping the site secure and working properly.
Email messages are processed in order to deal with a request initiated by you, and to comply with a legal obligation where applicable.
No profiling, automated decision-making, personalised advertising or behavioural analysis is carried out.
Retention and providers, without invention.
The access log is kept for 30 days. Messages are kept for as long as they are useful for dealing with the matter and any follow-up. Data is not passed to third parties for purposes other than those explained.
The only international transfer is that of the email addresses of people who subscribe to the letter, explained above. The access log never leaves the computer that serves the site.
You can ask for control over your data.
You can request access, rectification, erasure, objection, restriction of processing and portability, as applicable to each kind of processing.
To exercise these rights, write to contacto@ibrahingil.com stating what you are requesting. If your request concerns the access log, please also give the approximate date and time of your visit: without it there is no reasonable way to find your lines among the rest. You may also complain to the Spanish Data Protection Agency (AEPD).
Minimise and protect.
Only necessary data is requested, passwords and private documents are never requested, and reasonable security measures are applied.
Content and forms are not directed at children. External links keep their own policies.
This policy will be updated if forms, measurement or new services are added in future.