Privacy policy

Last updated: 13 November 2026

This is a translation of the Spanish text, which prevails if they differ.

Version 2026-11-13. Covers adriandato.com, the Adrián Dato account and the courses (courses.adriandato.com).

Data controller

Adrián Navarro Dato. Write to me at edriand2000@gmail.com about anything related to your data.

What data I handle and why

Server logs

Every time you visit a page, the server (Amazon CloudFront) records your IP address, the date and time, the page requested, where you came from and your browser. These logs keep the site running, help detect abuse and fix errors.

• Legal basis: legitimate interest in keeping the site secure and working (art. 6(1)(f) GDPR).
• Retention: deleted automatically after 90 days.
• Where: with Amazon Web Services EMEA SARL, which hosts the site, in the Ireland region.

Analytics (only if you accept)

If you accept analytics cookies, Google Analytics 4 records which pages you visit, for how long, from what kind of device and from which country or approximate city, using a random identifier stored in a cookie. GA4 does not store your IP address. I use it to see which posts get read and improve the blog. Google signals and ad personalisation are turned off.

• Legal basis: your consent (art. 6(1)(a) GDPR). You can withdraw it at any time in the cookie policy.
• Retention: 2 months in Google Analytics; after that only aggregated data remains.
• Who: Google Ireland Limited, as data processor. Google may process data in the United States; Google LLC is certified under the EU-US Data Privacy Framework.

Your Adrián Dato account (if you create one)

The account is optional and shared by the products that use it (today, the courses). I keep your email, an internal ID, the public name you choose for comments and your consents: what you accepted or ticked, the version of the text and the date of each change, so I can prove it. If you sign in with Google, Google gives me your email and an identifier of your Google account.

• Legal basis: the service you ask for when you create it, under the terms of use (art. 6(1)(b) GDPR), and the obligation to be able to prove consents (art. 6(1)(c)).
• Retention: for as long as you have the account. If you delete it, it is removed immediately; automatic backups keep it for at most 35 more days.
• Where: with Amazon Web Services EMEA SARL (Amazon Cognito and DynamoDB), in Ireland, which also sends the sign-in codes.

Courses (courses.adriandato.com)

Without an account, your progress stays in your browser and never reaches me. With an account, I keep which lessons you completed and when. If you comment, your comment and public name are shown on the lesson; if you report a comment, I keep the report and its reason. New and reported comments are emailed to me for moderation.

• Legal basis: the courses service (art. 6(1)(b) GDPR) and legitimate interest in moderating comments and preventing abuse (art. 6(1)(f)).
• Retention: for as long as you have the account. You can delete your comments at any time; if you delete the account, your comments lose their text and name and your reports are deleted. Technical API logs are deleted after 14 days.
• Email updates: only if you tick the new-courses or other-news boxes (art. 6(1)(a) GDPR and art. 21 of the Spanish LSSI). You can untick them at any time in My account or with the unsubscribe link in every email.

From My account, in the courses, you can download all your data and delete the account. You must be at least 14 to create one.

If you email me

If you send me an email, I use your address and what you tell me only to reply. I keep it for as long as the conversation lasts and delete it afterwards, unless the law requires me to keep it.

Who I share it with

Nobody other than the providers above, and the authorities if the law requires it. I don't sell data or make automated decisions about you.

Your rights

You can ask me to access, correct or delete your data, object to its use, restrict it or take it with you. Write to me at edriand2000@gmail.com. If you think I haven't handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or the authority in your country.