Privacy Policy
This policy describes what personal data is collected on deep-analytics.com, why, and what your rights are. It is written to be read, not scrolled past, and it describes only processing that actually happens — nothing more.
Data controller
The data controller is Luca Vicini, operating under the name Deep Analytics, Granada, Spain. For any question about this policy or your data, write to luca.vicini@deep-analytics.com.
What is collected, and why
Hosting and edge logs
The site is served by Cloudflare, Inc. (hosting, CDN and edge logs). Cloudflare processes technical data such as IP address, user agent and requested URL in order to deliver pages and protect the site from abuse, and provides the site operator only aggregate traffic and crawler statistics. This processing rests on the legitimate interest in running a secure website. The site itself stores no server logs; Cloudflare’s transient request logs are handled under its data processing addendum.
Analytics — cookieless by default, cookies only with your consent
The site uses Google Tag Manager and Google Analytics 4 (Google Ireland Ltd / Google LLC) in Consent Mode v2 advanced mode. What that means, stated plainly: before and without your consent, anonymous, cookieless measurement pings are sent to Google. These pings set no cookies and carry no persistent identifier of you — they contain the address of the page viewed, the referring page, coarse browser and device information, and your consent state, and Google uses them only for aggregate, modelled statistics. The legal basis for these cookieless pings is the legitimate interest in minimally measuring readership without identifying anyone.
Analytics cookies (_ga, _ga_*) and visitor-level measurement are used only if you accept the analytics category in the consent banner; declining changes nothing in how the site works, and withdrawing consent also deletes the analytics cookies already on your device. Accepted analytics data is used to understand which pages are read and how the site is found, and is exported to BigQuery (Google) for that analysis. The legal basis for cookie-based analytics is your consent, withdrawable at any time via Cookie preferences in the footer. Event-level analytics data is retained for 14 months; exports derived from it are deleted no later than 24 months after collection.
Contacting by email
If you write to the address above, your name, email address and the content of your message are processed to answer you. The legal basis is the steps needed to respond to your request (pre-contractual steps where you are enquiring about services, legitimate interest otherwise). Correspondence is deleted no later than 24 months after the last exchange, unless a contract followed from it.
Contact form
When you submit the contact form, the following are processed: your name, email address, your company if you give one, and your message. Your IP address — which is personal data — is also processed, for one purpose only: limiting submissions to three per hour per connection to prevent abuse. The IP is stored as a counter for at most one hour and is not attached to your message.
The message itself is stored in Cloudflare Workers KV for up to 90 days as a delivery safeguard, and delivered by email through Resend to the mailbox above, where the resulting correspondence is kept as described under Contacting by email — deleted no later than 24 months after the last exchange, unless a contract followed. The legal basis is the pre-contractual steps taken at your request, or the legitimate interest in responding to enquiries; the checkbox on the form is an acknowledgement of this policy, not the legal basis.
Newsletter — not yet active
The Field Notes signup is not yet operational and no data submitted through it is processed. When it goes live, this policy will first be updated to name the processor (Kit), the legal basis and the retention period.
Cookies
By default the site sets a single first-party cookie, cc_cookie, which stores your consent choice for about six months and contains no identifier used for tracking. Google Analytics cookies (_ga, _ga_*, kept up to 2 years) are set only after you accept the analytics category; advertising cookies (_gcl_*, kept 90 days) only after you accept the advertising category — no advertising tags run today. Note that anonymous cookieless measurement pings are sent to Google even without consent, as described under Analytics above. You can change or withdraw your choice at any time via the Cookie preferences link in the footer; withdrawing a category deletes its cookies from your device. The full cookie list, with purpose and expiry, is shown inside the preferences window.
Processors
| Processor | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, edge logs, contact-form storage (Workers KV, 90 days) | USA, with EU points of presence |
| Google (Tag Manager, Analytics 4, BigQuery) | Tag management, analytics, analytics storage — consent-based | Ireland / USA |
| Resend | Contact-form email delivery | USA |
| Kit | Newsletter — when live | USA |
Personal data is never sold. Where a processor is based outside the European Economic Area, transfers rely on the European Commission’s standard contractual clauses or an adequacy decision, including the EU-US Data Privacy Framework where the processor is certified.
Children
This site is not directed at children. Under Article 8 of the GDPR as implemented in Spain, the age threshold for consenting to information-society services is 14.
Your rights
Under the General Data Protection Regulation you have the right to access the personal data held about you, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting prior processing. To exercise any of these rights, email the address above. You also have the right to lodge a complaint with a supervisory authority; in Spain this is the Agencia Española de Protección de Datos.
Changes
This policy is updated whenever the site’s actual processing changes — features that do not exist here are not described here. The date of the last change is shown at the bottom of this page.