Privacy Policy

Who I am

davidveluz.com is the personal portfolio of David Veluz, a creative developer and designer based in the Philippines. In this notice, “I” and “me” refer to David Veluz.

The site presents my identity, work, creative experiments, and contact information. It is not an online store, membership service, social network, or account-based application.

Information this website processes

Information I directly collect

The website has no contact form and does not ask you to create an account. It does not store visitor-submitted information in a website database.

Information you choose to send

If you use an email link and decide to send a message, I receive the information contained in that email. This will usually include your email address and message, and may include your name, company, project details, or files you choose to attach. The message is sent through your email provider to my Gmail inbox, not through this website.

Technical and infrastructure information

Like most websites, ordinary requests are processed by the site’s network and hosting infrastructure. This may include an IP address, browser or device information, requested URL, time of request, referrer, and security or error diagnostics. Cloudflare currently operates the public-facing network layer for the site. The underlying host may also maintain standard operational logs.

Local performance signals

The site reads limited browser capabilities—such as viewport size, reduced-motion and pointer preferences, device category, available memory and processor cores, and connection category—to select an appropriate graphics performance level. Based on the site code, these values remain in the browser, are not combined into a visitor fingerprint, and are not sent to an analytics service.

How information is used

Information is processed only as reasonably needed to:

• respond to messages and discuss possible project work;
• communicate with prospective or existing clients;
• deliver, maintain, secure, and troubleshoot the website;
• adapt visual performance to the visitor’s device in the browser; and
• meet applicable legal or record-keeping obligations.

The portfolio does not use visitor information for targeted advertising, cross-site tracking, or automated decisions about people.

Legal bases where applicable

Processing is limited to declared, legitimate purposes and information reasonably necessary for those purposes, in line with the principles of the Philippine Data Privacy Act of 2012.

Where the GDPR or UK GDPR applies, the relevant basis will normally be: taking steps at your request before a possible contract when you send a project inquiry; legitimate interests in communicating, presenting and securing this portfolio, balanced against your rights; or compliance with a legal obligation. If I specifically ask for consent for an optional use, you may withdraw it at any time.

Cookies and similar technologies

The site code does not intentionally set cookies. It uses sessionStorage in two narrow, functional situations:

• after you dismiss the showcase drag hint, a value remembers that choice for the current browser tab; and
• if a deployment makes an old page file unavailable during navigation, Nuxt may briefly preserve route and interface state before performing a one-time recovery reload.

These values are first-party, session-scoped, and are not used to identify you, profile you, advertise to you, or follow you across websites. A retired service-worker stub may also remove old site caches and unregister itself; it does not create a visitor profile.

Because no non-essential analytics or advertising storage currently runs, the site does not show a cookie-consent banner. This will be reviewed if the technology changes.

Analytics and tracking

No Google Analytics, tag manager, advertising pixel, heatmap, session recording, or comparable client-side analytics tool is integrated into this portfolio.

Cloudflare may produce security, reliability, and aggregate network information as part of delivering the site. Its live response headers also support network-error reporting in compatible browsers. This is infrastructure processing, not an advertising or behavioural-tracking script added by the portfolio.

Third-party services

The following services are visible in the current site or its delivery path. When your browser requests a resource from a provider, that provider can receive ordinary request information such as your IP address and user agent.

Cloudflare

Edge delivery, availability, security, and network diagnostics.

Web hosting

The underlying server delivers the Nuxt site and may process standard request and error logs.

Fontshare

Supplies the portfolio’s typefaces through its stylesheet and font delivery network.

Cloudinary

Delivers two visual assets used by the animated footer on the home page.

Google / Gmail

Processes an inquiry only if you choose to send email to the published contact address.

International data transfers

Some service providers operate distributed networks and may process technical request data or email outside the Philippines or outside your country. The exact location can depend on the provider, network route, and account configuration. I do not make claims here about a provider’s particular transfer safeguard where that cannot be verified from the website source.

Data retention

The showcase preference lasts only for the browser session. Nuxt recovery values are short-lived and removed or replaced as part of the reload process. Infrastructure providers retain request and diagnostic records according to their configurations and policies.

I keep inquiry emails only for as long as reasonably needed to respond, evaluate or carry out requested work, maintain appropriate business records, resolve a dispute, or meet a legal obligation. When those reasons no longer apply, the information should be deleted or anonymised.

Data security

The portfolio limits direct collection, is delivered over HTTPS, and uses service providers to help operate and protect the site. Reasonable technical and organisational measures are used in proportion to the limited information involved. No internet transmission, email service, or storage system can be guaranteed completely secure.

Data sharing and sale

I do not sell personal information obtained through this portfolio or use it for targeted advertising. Information may be processed by the service providers described above where necessary to deliver the site or handle email. It may also be disclosed where reasonably necessary to comply with law, protect rights or security, or deal with a legal claim.

Your privacy rights

Depending on where you live and the circumstances, you may have rights to be informed; request access to or correction of personal information; object to or restrict processing; request erasure or blocking; receive portable data; withdraw consent; and lodge a complaint with an appropriate data-protection authority.

In the Philippines, further information is available from the National Privacy Commission. EU, EEA, and UK visitors may contact their local supervisory authority where the relevant law applies.

Rights are not absolute and may depend on the legal basis, type of information, and applicable law. I may need enough information to verify that a request relates to you.

Children’s privacy

This general-audience portfolio is not intentionally designed to collect personal information from children. If you believe a child has sent personal information through the contact address, please get in touch so the situation can be reviewed and handled appropriately.

External links

Project and social links may take you to websites operated by other organisations. Those destinations have their own content, terms, and privacy practices. This notice applies only to davidveluz.com.

Changes to this policy

I may update this notice when the site, its providers, or relevant practices change. The date at the top will show the latest revision. Material changes should be reflected here before or when the related processing begins.