Privacy policy

This policy describes what data Caja de Arena collects and what is done with it. It describes what the site actually does, not what these pages usually say; if something changes, it is changed here.

Who is responsible#

Marlon Avalos Elizondo. Contact: marlon@cajadearena.com.

Reading the site#

Reading requires no account and no data from you. The site is hosted with a cloud infrastructure provider, on servers outside Costa Rica. Like any server, it keeps technical logs of requests — IP address, browser, page requested — for a limited time and in order to keep the service running.

Analytics#

The site uses Google Analytics 4, loaded through Google Tag Manager, to know what gets read and what does not. That involves Google cookies and sending data about your visit to their servers, including your IP address.

There is no advertising, no user profiling and no sale of data to anyone. Fonts and images are served from here, not from a third party.

If you would rather not appear, any tracker blocker prevents it, and the site works just as well without it.

unorthoBox video and audio#

unorthoBox episodes are conversations hosted on YouTube or Spotify. Watching or listening means asking them for the file, and there is no way around that.

What there is a way around is doing it behind your back: the player loads nothing until you press it. Until you do, what you see is an image served from here; your browser has not contacted them and they do not know you opened the page. Pressing it loads their player, and from that moment they receive technical data about your visit — IP address, browser — and may set their own cookies, under their own policies.

For YouTube the site uses their no-cookie domain, youtube-nocookie.com, which reduces what they store about someone who has pressed nothing, though it does not remove it entirely once the video starts.

Newsletter#

If you subscribe, your email address is stored in an external newsletter delivery service, which sends the emails. Confirmation by email is required — double opt-in — so nobody is subscribed without meaning to. Every email carries an unsubscribe link, and unsubscribing deletes the address.

Contact form#

What you write in the form — name, email and message — is stored in the site's database so that I can reply. It is not used for anything else and is not added to any list.

The form uses Cloudflare Turnstile to tell people from bots. It is a captcha alternative that asks you to solve nothing; Cloudflare receives technical data about the request in order to run that check.

What stays in your browser#

The light or dark theme you pick is stored in your browser's local storage. It is not a cookie, it is never sent to any server, and it disappears if you clear the site's data.

Your data#

You can ask what data of yours exists, correct it or have it deleted, by writing to marlon@cajadearena.com. For the newsletter, the unsubscribe link in any email does the same and is faster.

Children#

The site is not directed at children under 13 and does not knowingly collect their data.

Changes#

When the site starts using a new tool that touches data, this page is updated and the date below changes.

Newsletter