Privacy Policy

This Privacy Policy explains how I, Daniel Felipe Montenegro, handle information when you visit my websites, montenegrodanielfelipe.com and dafmontenegro.com (which redirects to the first one), and when you chat with Roz, the site’s assistant.

Information I Collect #

I do not ask for or sell any personal information, and there are no accounts, forms or newsletters on these sites. Two things are gathered:

• Anonymous usage data through Google Analytics, which helps me understand how visitors use the content so I can improve it (see Google Analytics).
• What you ask Roz, and what Roz answers, so I can see what people want to know and where Roz falls short (see Roz, the Site’s Assistant). Whatever you type into a question is kept, so please don’t write personal information there.

Google Analytics #

These sites use Google Analytics 4, a web analytics service provided by Google LLC (“Google”). It uses cookies (such as _ga) to collect aggregated information like the pages you visit, how long you stay, your approximate location (country or city), your device and browser, and the site that referred you. Google Analytics 4 does not log or store IP addresses.

Beyond page views, the site itself tells Google Analytics what you do on a page, so I can see what works and what breaks:

• Reading: how far down a page you scroll, and whether you reach the end of an article and after how long.
• Clicks on the site’s controls: links to my social profiles, the table of contents, the search box, the light/dark button, the code copy button, the Press Kit downloads, the embedded players, and the interactive pieces (the Poké Ball and its Pokémon, the carp, the butterflies, the random quote, the preflop tools except the trainer, which promises that nothing you do in it is sent).
• Search: the words you type into the site’s search box, and how many results they found.
• Copying: only how many characters you copied, never the text itself.
• Technical context: whether the page is shown light or dark, the width band of your window, your browser’s time zone (such as America/Bogota), whether the browser says it is driven by automation software, whether it was translated by the browser, how fast the page loaded and responded, and the errors my scripts run into.
• Settings remembered in your browser: whether you chose light or dark, and how many of the homepage’s Pokémon you have met.

None of this includes your name, your address or anything else that identifies you, and none of it is sold or shared beyond Google Analytics.

• If your browser sends a Do Not Track signal, Google Analytics does not record your visit or set its cookies, and none of the above is sent.
• You can also block analytics cookies in your browser settings or with the Google Analytics Opt-out Browser Add-on.

Roz, the Site’s Assistant #

Roz is an AI assistant that answers questions about me from what this site publishes. It runs on Cloudflare Workers and Cloudflare Workers AI: your questions are processed by Cloudflare, under Cloudflare’s privacy policy, and never sent to Google Analytics.

What is kept, for each question:

• The question and Roz’s answer, in full.
• When it was asked, and how: typed, or picked from Roz’s suggestions.
• A random identifier for your browser tab, so the questions of one visit can be read together. It is created when you open Roz, forgotten when you close the tab, and never tied to who you are.
• How it ended: answered, not known, refused because of the limits on questions per minute and per day (yours or the site’s), refused because the check that you are a person had not passed, or failed.
• The pages of this site the answer was built from, and how long it took.
• Your browser’s language, your approximate location (country and city, as Cloudflare estimates them for your connection), whether you use a phone or a computer, your browser’s user agent, the page you came from, the light or dark theme and your window’s width.

What happens on the page: visits to it, which of Roz’s suggestions are tapped, taps on Roz, opening “Why Roz?”, changing the theme or the language, rating an answer as helpful or not, copying or sharing an answer, and, when you leave, how long you stayed and how many questions you asked.

Keeping bots out and the limits fair: before your first question, the page runs Cloudflare Turnstile, which checks that you are a person, usually without you noticing, under Cloudflare’s privacy policy, and gives your browser a pass for an hour that only works from your connection. Each visitor can ask up to 6 questions a minute and 21 a day (my favorite number), and Roz answers at most 140 questions a day for everyone together, so that the free service she runs on lasts the whole day. To count them, Roz keeps a one-way fingerprint of your connection (your IP address, or for IPv6 its network block), made with a secret key so that the address cannot be recovered from it, separately from the questions and for at most 26 hours.

Your IP address, when you ask a question: it is kept encrypted, only for security and to answer requests from the authorities, and deleted after 6 months. Only I can decrypt it. It is never kept for visits to the page that ask nothing.

For how long: 12 months, except your IP address (6 months). Older records are deleted automatically every day.

In your browser: the conversation itself is kept in the tab (session storage), so it survives a reload and disappears when you close the tab. If you choose light or dark, or Spanish or English, that choice is remembered in your browser (local storage).

The data is stored in a database in my own Cloudflare account, which only I have access to, and it is never sold or shared. Cloudflare also keeps, for a few days, the technical logs of Roz’s code (errors and the usual request metadata), as it does for any service it runs. If you want something you asked to be deleted, message me on Telegram, saying roughly when you asked and what, and I will remove it.

Hosting and Delivery #

The sites are hosted on GitHub Pages and delivered through Cloudflare. To serve the pages and protect them from abuse, these services process technical data such as your IP address and browser information, under their own privacy policies: GitHub and Cloudflare.

Embedded Content #

Some pages include content from other websites, which behaves exactly as if you visited those websites:

• YouTube videos use YouTube’s privacy-enhanced mode (youtube-nocookie.com), so YouTube does not store information about you until you play a video.
• Vimeo videos are embedded with Vimeo’s Do Not Track option, so the player does not track your session.
• Spotify playlists in the Music are loaded from Spotify, which may use cookies according to its privacy policy.
• Super Pony Picker loads its font from Google Fonts. The names, settings and photos you use in the game never leave your device: names and settings are remembered only in your own browser (local storage), and you can clear them at any time.

Changes to This Privacy Policy #

I may update this Privacy Policy periodically. Any changes will take effect once the revised policy is posted on this page, and the date of the last update is shown above.

Contact Me #

If you have any questions about this Privacy Policy or would like to reach out to me, please feel free to contact me via Telegram. I am here to assist you with any inquiries you may have.