Home / Privacy
Privacy · last updated 11 August 2026
This is a portfolio, not a product. There is very little to collect.
No account to create, nothing to buy, no profile building in the background. The only personal data that reaches me is what you deliberately send: a message, a booking, or an email. Below is every single thing this site does with data, written so it can actually be read.
A privacy policy has to say four things: what is collected, why, who else sees it, and for how long. That is what the map below sets out.
This one is short because the site is a portfolio rather than a product. There is no account, nothing to buy and no advertising. The only personal data that reaches me is what you deliberately send.
The short version
Six lines, and then the detail underneath.
- Analytics only run if you say yes. Decline the banner and no analytics cookie is set at all, and nothing about your visit is measured.
- Your message is used to answer you. Not added to a list, not used for marketing, not shared with anyone selling anything.
- Nothing is ever sold, and nothing is shared for advertising. There is no advertising on this site and no tracking pixel from any ad network.
- You can ask me what I hold and I will delete it. One email, no form to fill in, no reason required.
- Everything is kept for the shortest period that is honest, and each period is written down in the table below rather than left vague.
- The controller is a real Portuguese company with a registered address, named at the bottom of this page.
Everything, in one table
What is collected, why, who else sees it, and for how long.
A privacy policy that takes twenty minutes to read is a privacy policy nobody reads, which is usually the point of writing one that way. This is the whole of it. If something you did on this site is not a row in this table, it did not collect anything.
Cookies and measurement
One banner, a real choice, and a real consequence either way.
It records which pages were read, roughly where in the world the visit came from, whether the device was a phone or a desktop, and which site sent you here. It is set up without advertising features and without cross-site signals.
What I use it for is narrow and slightly boring: whether the case studies are read to the end, and whether the responsive work was worth doing.
No analytics script loads, no analytics cookie is written, and no measurement of your visit happens at all. Declining is not a degraded version of the site. Every page, every interaction and every download works identically.
Your choice itself is remembered in your own browser so the banner does not ask again. That storage is the only thing on this site that works without consent, because remembering that you said no is not something I should have to ask permission for.
No ad network, no retargeting pixel, no social tracking script, no fingerprinting. Facebook, Instagram, X and every other social account were cut from this site deliberately, and their scripts went with them.
Accepted and regretted it, or declined and changed your mind: the choice can be reset from the link in the footer, and clearing your browser's storage for this site clears it too. Withdrawing consent is exactly as easy as giving it, which is a legal requirement and also just correct.
Under the GDPR
Rights you have, and the one address that exercises all of them.
Email ux@luislandi.com and say which one you want. There is no form, no identity questionnaire beyond what is needed to be sure it is you, and no reason required. I will answer within thirty days and usually within a working week.
The controller
Who is responsible, and who to complain to about them.
The registered details above are real, taken from the same company's existing policy rather than written for this page. The two build decisions this page was waiting on are made: the site is hosted on Vercel and the contact form is delivered by Resend. Both are named in the table above, and they are the only two companies that touch anything you send.
A privacy page is the one page on a site where being approximately right is worse than being silent, so it should be read once by someone who does this for a living before it ships.