PRIVACY POLICY — Arloxx

1. Introduction

Arloxx (“we”, “us”, or “our”) is a personal project and professional portfolio operated by Ariel López. This Privacy Policy explains how we collect, use, and protect personal data when visitors access arloxx.com (the “Website”).

We are committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using this Website, you agree to the practices described in this Privacy Policy.

2. Data Controller

Ariel López
Arloxx – Personal Project & Portfolio
Email: hello@arloxx.com

3. Personal Data We Collect

Currently, Arloxx does not intentionally collect personal data except data that is automatically transmitted by your browser when visiting the Website.

Depending on your browser and device settings, this may include:

IP address and approximate location
Device type, operating system, and browser version
Date, time, and duration of your visit
Referrer URL
Pages viewed

This data is processed automatically as part of operating a website and ensuring security.

We do not currently use:

Google Analytics or similar tracking tools
Marketing pixels (Meta Pixel, TikTok Pixel, etc.)
Third-party advertising networks
Newsletter signup forms
User accounts or login systems

If any of these are added in the future, this policy will be updated.

4. Cookies and Similar Technologies

The Website may use functional cookies necessary for performance and security.
If optional or analytics cookies are introduced in the future, we will request your explicit consent via a cookie banner before they are activated.

For more details, see our Cookie Policy.

5. Legal Basis for Processing

We process personal data based on the following GDPR principles:

Article 6(1)(f) – Legitimate interest:
To ensure the security, stability, and correct functioning of the Website.
Article 6(1)(a) – Consent:
If optional cookies or third-party tools requiring consent are used in the future.

6. Third-Party Services

The Website may interact with the following services:

a) Ghost(Pro)

Hosted infrastructure managed by Ghost Foundation. Server logs may include IP addresses and request metadata for security and performance purposes.

b) Google Fonts (optional, depending on theme)

Fonts may be loaded from Google servers. This may expose your IP address to Google.
If this is enabled, it is necessary for the correct visual rendering of the Website.

c) GitHub (only if embeds are used)

If embedding GitHub content in the future, GitHub may receive limited technical information such as IP address and device data.

We do not share personal data for commercial or marketing purposes.

7. Data Retention

Technical logs stored by Ghost or the hosting provider may be retained for a limited period necessary for:

Security
Debugging issues
Server performance

We do not store or retain personally identifiable data beyond what is required for these purposes.

8. Data Security

We implement reasonable technical and organizational measures to protect data, including:

Encrypted connections (HTTPS)
Managed hosting with modern security standards
Restricted access to administrative areas

No system is entirely infallible, but we take all reasonable steps to minimize risk.

As an EU visitor, you have the right to:

Access personal data we hold
Request correction or deletion
Request limitation of processing
Object to processing
Withdraw consent (if consent was used)
File a complaint with a Data Protection Authority

Requests may be submitted to hello@arloxx.com.

10. International Data Transfers

Ghost(Pro) hosting infrastructure may process data in the EU, UK, or the United States.
Transfers follow appropriate safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses where required.

11. Changes to This Privacy Policy

If the Website adds features that process personal data, this Policy will be updated.
We encourage you to review it periodically.

12. Contact

For any privacy-related questions, contact:
hello@arloxx.com