Value Privacy

Summary

Privacy is not a joke.
And before you (wrongly) decide to stop reading this page, here’s a very short summary:

For me, privacy is not a policy (hence the title NOT being “Privacy Policy”), it’s not just a right, nor a long page that no one ever reads.
Privacy is a value, a principle — and that is exactly what you’ll find on josesantos.eu.
There is no hidden tracking here, no manipulated advertising, and no links to platforms that profit from your data.

Easier?
Here, you’re human, you’re welcome — and you’re never tracked.
And now, being very honest with you: you really should keep reading.


Introduction

A lot of people confuse respect with age, status or fear. For me, respect is — or should be — a universal human value.
I always begin from a place of respect. Of course, as I learn someone’s actions or inactions, that respect — or, more accurately, valuation — may rise… or unfortunately fall.
(because it never becomes disrespect.)

So what does this have to do with privacy? Everything.
Privacy is respect for others. It is nurturing a world that should belong to everyone. It is choosing the alternative — because alternatives always exist.

In website development, especially within this “intranet” of three or four Big Techs that many call the Internet, the easiest path is to follow what’s already built and ready to deploy: code with invasive intentions, unnecessary data collection, forced dependency.

If we want to remain — or return — to the real Internet, we must give up these “easy”, mostly “free” solutions.
In my specific case, I abandoned tools and services from Google, Meta, Cloudflare and SEO platforms — because I believe in an Internet where the user is not the product.


1. Who manages this website

Me — and only me: José Emanuel Silva Santos.


2. What data is collected (and why)

2.1. Website navigation

The server hosting the site (in Portugal) automatically logs technical information, solely for security and diagnostics:

  • IP address (temporarily stored)
  • Date and time of access
  • Pages visited
  • Browser and operating system (user-agent)
  • Any loading errors

These logs are automatic, not used for commercial purposes and not shared with third parties.

2.2. Comments (WordPress)

If you leave a comment, WordPress collects:

  • Name (if provided)
  • Email (if provided, never displayed publicly)
  • IP and user-agent (for spam protection only)

2.3. Antispam Bee (anti-spam)

To prevent automated spam, this plugin checks:

  • IP address
  • Spam patterns
  • Comment origin

None of this is sent to third parties.
Everything is processed locally.

2.4. Like / Dislike system (JS Likes by IP)

This system stores only a hash of your IP — used solely to block repeated votes.
Your real IP is not stored.
No profiles, no tracking.

2.5. Visit statistics — Bino Simple Analytics

I use my own fully self-hosted analytics system:

  • No cookies
  • No full IP collection
  • No individual tracking
  • No third-party data transfers
  • No behavioural monitoring

I only collect what is essential:

  • Number of visits
  • Pages viewed
  • Country and approximate city

2.6. Polylang (multilingual plugin)

A technical cookie is stored to remember your language choice:

  • pll_language → only stores the selected language

It is not used for tracking.


3. Fediverse and decentralised functionalities

3.1. ActivityPub

The site can be followed from the Fediverse (e.g., Mastodon).
If you interact with me via the Fediverse (follow, favourite, boost, reply), the following public data is processed according to the protocol:

  • Your public identifier (e.g., @user@server.tld)
  • Name on your instance
  • Public avatar
  • Public content associated with the interaction

All of this is public by design and not controlled by me.
The site only receives what is necessary to display these interactions.

3.2. Webmention

When another site mentions my content and sends a Webmention, I receive:

  • URL of the page mentioning me
  • Name/title of the page
  • Public avatar/icon (if available)
  • Extract of the content where the mention appears

None of this is used for profiling or behavioural analysis.


4. Cookies

This site uses only:

Technical and essential cookies

  • pll_language (Polylang)
  • WordPress session cookies (for logged-in users — only me)

I do NOT use:

  • Google (Analytics, Tag Manager, etc.)
  • Meta (APIs, Facebook Pixel, etc.)
  • Advertising cookies
  • User profiling
  • SEO plugins

5. With whom data is shared

With no one.
No data is sold, analysed externally or sent to third parties.

Hosting: LusoAloja (Portugal)
Compliant with Portuguese and EU regulations.


6. How long data is stored

  • Comments: as long as they remain published
  • Server logs: 30 to 90 days (depending on hosting)
  • Like IP hash: only as long as needed to prevent repeated votes
  • Webmentions & ActivityPub: while they remain part of the displayed content

7. User rights (GDPR)

The GDPR grants you rights such as accessing, correcting or deleting personal data.

However, this website does not create accounts, build profiles, track behaviour or store more than what is necessary for comments, Webmentions, ActivityPub or spam protection.

In practice:

  • If you haven’t submitted any data, there is nothing to access, export or delete.
  • If you commented, I can edit or remove your comment upon request.
  • If a Fediverse interaction came from your instance, I can remove it if it’s under my control.
  • If a Webmention came from your site, I can remove it if you ask.

For any request: js [at] josesantos.eu


8. Changes to this page

This page may be updated whenever improvements or new features are added.
The most recent version will always be available here.


9. One more personal note

(because I believe in a different Internet)

This website was built with a clear intention:

  • Autonomy and ZERO dependence on Big Tech.
  • Privacy.

I prefer a web that does not need to watch us to function.

And there is another principle I follow: whenever possible, I use tools, software and services developed within the European Union — some paid — even when “free” alternatives exist outside the EU.

Why?
Because digital sovereignty begins with individual choices.
I prefer to invest in tools created within a legal framework that protects the user, instead of relying on “free” solutions whose real price is paid in data, surveillance and loss of autonomy.

Privacy is also this: knowing who builds the tools — and who they work for.

If you’re here, you’re welcome — and you’re not being tracked.

Translated by ChatGPT