Privacy

The short version

This site measures how it is used, and does nothing else with you. There is no form, no account, no newsletter and no advertising pixel. I do not know who you are, and nothing here is built to work it out.

Your theme choice is kept in your own browser and never sent anywhere. If you email me, I have your email and whatever you wrote in it, because that is how email works.

Everything below is the detail. The section on turning it off is the one most people want.

Who is responsible

Eroll Encabo, an independent digital marketing and web development practitioner based in Cebu City, Philippines, is the personal information controller for this website under Republic Act 10173, the Data Privacy Act of 2012.

Any question about this policy, or any request to exercise a right under it, can be sent to the email address on the contact page.

Analytics

This site loads Google Tag Manager and Google Analytics 4. Between them they count how the site is used. None of it is connected to advertising, and nothing here follows you onto other websites.

Google Tag Manager. It is the container the others are loaded through, and it is the only one of them written into this website's code.

It records nothing by itself, beyond the address of the page it is loaded on, which it needs in order to work out which of the tags below to run.

Tag Manager sets no cookies of its own. The tags it loads do, and each is described below.

This is processed on my behalf by Google LLC and Google Ireland Limited. The data is held on servers outside the Philippines, including in the United States and the European Union. Their own account of what they do with it is published at policies.google.com/privacy.

Google Analytics 4. It counts how the site is used, so the parts worth keeping can be told from the parts that are not.

It records which pages you open, in what order, and how long you spend on them; the site or the search you arrived from; roughly where in the world the request came from, estimated from your IP address; and the kind of device, operating system and browser you are using.

Two, named _ga and _ga_ followed by a string, both lasting two years unless you clear them. They exist to tell one visit from the next and carry a random identifier rather than anything about you.

This is processed on my behalf by Google LLC and Google Ireland Limited. The data is held on servers outside the Philippines, including in the United States. Your IP address is used to estimate your country and city and is not retained in full. Their own account of what they do with it is published at policies.google.com/technologies/partner-sites.

This is read as totals rather than as individuals. It is not used to identify you, and it is not used to follow you anywhere else.

Why I am allowed to do this

Under Section 12 of the Data Privacy Act, processing personal information needs a lawful basis, and consent is only one of several. The basis relied on here is legitimate interests: understanding how my own website is used, and understanding whether advertising I pay for produces anything.

That basis fits counting page views. It would fit advertising less well, which is one reason there is none here. If you object, the section below turns it off, and objecting is a right you have whether or not you give a reason.

Wherever you are, you have the right to be told what is collected before it is collected, which is what this page is for.

Turning it off

Blocking cookies for this site in your browser settings stops all of it. So does any browser or extension that blocks trackers, and this site makes no attempt to defeat one.

For Google specifically there is also an opt-out browser add-on, published at tools.google.com/dlpage/gaoptout, and ad personalisation settings at myadcenter.google.com.

There is no banner on this site asking for your consent before any of this loads, and I would rather say so plainly than leave you to find out. If you are in the United Kingdom or the European Economic Area, where consent is normally required before a non-essential cookie is set, use one of the methods above, or write to me and I will confirm your visits are excluded.

The site works identically with all of it blocked. Nothing here is held back behind accepting anything.

What is stored on your device

The cookies described above, and one item in your browser's local storage recording whether you selected the light or the dark theme. The theme item exists so the site does not flash white at you on your next visit.

The theme item is not a cookie, is not sent to any server, cannot identify you, and is removed when you clear your browser's site data. The site works normally if your browser refuses to store it.

What the server records

This site is hosted by Hostinger. Like any web host, its servers keep ordinary access logs, which typically include the IP address of the request, the time, the page requested and the browser's user agent string. Those logs are created and retained by the host, under the host's own policies, for security and operational purposes.

I do not analyse those logs for marketing, I do not build profiles from them, and I do not combine them with anything else, the analytics above included.

If you email me

The contact page is an email address, so a message you send arrives in my inbox the way any email does. I hold your email address, your name if you give it, and whatever you chose to write, for as long as it is useful to the enquiry or the work that follows from it.

I use it to reply to you and to carry out work you engage me for. I do not sell it, I do not rent it, I do not add it to a mailing list, and I do not pass it to anyone else except where the work plainly requires it, for example an advertising platform you have asked me to manage on your behalf, or where the law requires it.

Ask me to delete it and I will, unless I am required to keep it.

Third parties

The ones named above, and nothing else. No fonts from a content delivery network, no social widgets, no chat box, no comment system, no embedded video. The site's Content Security Policy permits connections to this domain and to those named services, and refuses everything else, which is the technical enforcement of that sentence rather than a promise about it.

The only other external destinations are plain links you can choose to follow: Upwork, LinkedIn, GitHub, Threads and Facebook. Those are separate services with their own policies, and following a link puts you under theirs.

Video testimonials are served from this domain, not embedded from a video platform, and nothing is fetched until you press play.

Your rights

Under the Data Privacy Act of 2012 you have the right to be informed, to object, to access, to rectify, to erasure or blocking, to damages, and to data portability, and the right to lodge a complaint with the National Privacy Commission.

In practice, for this site, that means you can object by any of the methods in Turning it off, and you can ask me what I hold from your correspondence with me, ask for it to be corrected, or ask for it to be deleted. Write to the email address on the contact page and I will respond within a reasonable period.

If you are in the European Economic Area or the United Kingdom, equivalent rights under the GDPR apply, and for correspondence the lawful basis is legitimate interest in answering an enquiry you began, or the performance of a contract where one follows. The lawful basis for everything else is in its own section above.

Children

This is a professional portfolio aimed at business owners. It is not directed at children, and nothing on it asks anyone their age or collects anything beyond what is described above.

Changes

If this site adds a form, another advertising tag, or anything else that processes personal data, this policy will be updated before that goes live rather than after, and the date at the top will change. That is not a promise about diligence: the sections above are generated from the same list the website reads to decide what to load, so a tag that is switched on without its description is a build that fails rather than a policy that quietly goes out of date.