Privacy
I wrote this so it can actually be understood. If something does not add up, I am happy to explain it by email: [email protected].
Who I am
I am Daniel Alfocea and this site is mine. I write a daily newsletter and do training and consulting on secure development, AI and MCP.
For anything to do with personal data, the address is [email protected]. I answer it myself.
What data I ask for
From anyone who signs up to the newsletter, I ask for an email address and nothing else. No name, no phone number, no company, no job title.
If someone writes to me, I keep whatever they chose to tell me in that email.
What I use it for
I use each subscriber’s address to send them the newsletter. That is the whole use.
I do not sell the list and I do not hand it to anyone, beyond the company I need in order to send the emails, which I name below. And I do not add anyone without their say-so: signing up triggers an email asking for confirmation, and without that click nobody is on the list.
Who else sees the data
- Acumbamail, a Spanish company, sends the newsletter. The list of addresses lives there.
- Cloudflare hosts this site, so it sees the requests made to the server, including the visitor’s IP address.
- Google Analytics measures visits. There is a separate section for this because it is worth reading.
- Meta (Facebook and Instagram) receives visits through its pixel. Same section.
Analytics: I want this to be known
This site loads Google Analytics and the Meta pixel the moment a visitor arrives, without asking. There is no cookie banner. I am saying so here because that seems more honest than burying it in a filler paragraph.
Google Analytics counts visits, where visitors came from and which pages they read.
The Meta pixel is here because I pay for ads on Facebook and Instagram. It tells Meta which pages a visitor sees here and whether they sign up for the newsletter, so it knows which ads work and who to show them to. Meta may link that to the visitor’s account if they are logged in on the same browser. I do not give it anyone’s email.
No other tool tracks anything here.
For anyone who would rather not, there are two ways out and both work: an ordinary content blocker (uBlock Origin and the like stop it) or the browser’s do-not-track mode. No permission from me is needed, and no need to tell me.
Cookies
The ones Google Analytics sets, to count visits and sessions, and the ones Meta sets, to measure the ads. I set none of my own: this site has no login, no basket, nothing that needs to remember the visitor.
They can be deleted from the browser at any time.
What can be asked of me
Unsubscribing: there is a link at the bottom of every email and it works on the first click. There is no “are you sure you want to leave?” page.
Anyone can also ask me what I hold about them, ask me to correct it, or ask me to delete all of it. Writing to [email protected] is enough and I will do it. I will not ask for a reason.
Anyone who thinks I have mishandled their data, and sees that I do not put it right, can complain to the Spanish Data Protection Agency.
How long I keep the address
For as long as the subscription lasts. Unsubscribing takes the address off the list; what remains is the record of the unsubscribe, which is precisely what stops anything reaching that address again by mistake.
If I change this
I update it here and change the date. If the change is a big one, I say so in the newsletter rather than waiting for someone to notice.
Last updated: September 2026.
Have a good one, Daniel Alfocea