1. Data controller
J4SGON S.L. (trading as VORLUX AI)
Valencia, Spain
Email: jacobo@vorluxai.com
2. Data we collect
- Contact form: name, email, company, message. Stored in a Cloudflare D1 database hosted in the EU-West region (Cloudflare, Inc.) and notified to us by email so we can reply.
- Newsletter: email and the page you signed up on; if you sign up on the newsletter page, also the date and the version of the consent text you agreed to. Stored in the same Cloudflare D1 database (EU-West region). Double opt-in: when you sign up we send you a link and, until you open it, we send nothing; an unconfirmed address is deleted. Every email carries a one-click unsubscribe link (and the List-Unsubscribe header) and we keep the signup, confirmation and unsubscribe dates. You can unsubscribe anytime with that link or by writing to jacobo@vorluxai.com.
- Our own analytics: a counter of our own (the /hit.js script, which posts to vorluxai.com/api/hit, no third party) records each page view and a few actions (contact form sent, "book a call" click, newsletter signup, tool use, a /go/ or WhatsApp link click). For each it stores: the time, the page (without URL parameters, except utm_* and ref), the domain of the site you came from (not the full address), the country Cloudflare infers, the device type (mobile, tablet or computer), the browser language, the window width and whether it looks like a robot. It sets no cookies and does not store your IP or your browser: to count unique visitors we compute a one-way hash of IP + browser with a random key that changes every day and is deleted when the day ends, so that hash cannot be linked back to you or connect one day to the next. If your browser sends Do Not Track or Global Privacy Control, nothing is sent. It is stored in the same Cloudflare D1 database (EU-West region) and only we read it, in aggregate reports. Records are deleted after 14 months.
- Third-party analytics (being retired): GoatCounter (goatcounter.com, EU) counts page views in aggregate, with no cookies or personal identifiers. Only if you accept in the consent notice do we also load Plausible (plausible.io, EU), also cookie-free. We will stop loading both once our own counter has enough history.
- Chat: if you use the chat, your browser keeps a random identifier (a 24-hour technical cookie) and our server derives a pseudonymous identifier from a hash of your IP to keep the conversation together; the IP itself is neither stored nor forwarded. We process the messages you write to answer them. If you leave your email in the chat, it is handled as a contact.
- Affiliate links: when you click a /go/ link we record the link, the page you clicked it on and the country (no IP, no browser data) to learn which content is useful. The destination shop (for example Amazon) applies its own privacy policy.
3. Legal basis
Explicit consent (contact form, newsletter and Plausible analytics) and legitimate interest (our own counter, GoatCounter and link-click counts: aggregate figures, no cookies, no personal identification). You can object by turning on Do Not Track or Global Privacy Control in your browser.
4. Cookies
We use no advertising or tracking cookies. The only cookie is a technical one (the anonymous chat session, only if you use it). Details are in the cookie policy.
5. Your rights (GDPR)
You have the right to:
- Access: request a copy of your data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data
- Portability: receive your data in structured format
- Objection: object to processing
To exercise these rights, contact: jacobo@vorluxai.com
6. International transfers
Form, newsletter and own-counter data is stored in Cloudflare D1 in the EU-West region. Cloudflare, Inc. is US-based and adheres to the EU-US Data Privacy Framework and the EU standard contractual clauses. GoatCounter (Netherlands) and Plausible (Estonia) are EU-based. A new-contact alert reaches us by email through Cloudflare Email Routing (from leads@j4sgon.com to our mailbox) and is copied to our own server in Valencia; it is not sent to third parties. If you email us, your message is hosted by Hostinger International Ltd. (Cyprus, EU), the provider of our @vorluxai.com mailboxes.
7. Contact
For any privacy inquiry: jacobo@vorluxai.com