Privacy Policy
Last updated
The short version: this website sets no cookies, runs no analytics and tracks nobody. The only personal data it ever handles is what you type into the contact form, and that goes to us so we can reply.
Who is responsible
Neiyoz, based in El Salvador, operates this website at https://neiyoz.com. For anything in this document, write to hello@neiyoz.com.
What we collect, and only when
Browsing this site collects nothing. There is no sign-up, no account, no profile and no shopping cart. You can read every page without giving us anything.
The one place that collects personal data is the contact form on /contact, and it collects only what you type into it:
- Name — So we know who we are replying to.
- Email — The only way we have to answer you.
- Subject — What the message is about.
- Service — Which of the four disciplines you need, or "Not sure yet".
- Message — Whatever you decide to tell us. Please do not put anything sensitive here.
Two more things travel with a submission, and neither is about you. One is a hidden field that a person never sees and never fills in; a spam robot reading the page does, which is how we tell you apart from it. The other is a signed timestamp recording when the form was served — nobody fills four fields in under three seconds, and that is the whole check. We use no captcha: making someone solve a puzzle to hire you is a cost paid by the wrong person.
Your IP address. When you submit the form, the service that carries the message sees the address you sent it from, the same way any web request works. If your browser has JavaScript turned off, the message goes through our own server instead and your IP address is written into the email we receive. We do not use it to identify or profile anyone — it is there so we can tell a burst of spam from a real person.
Why we are allowed to hold it
Because you asked us to. You wrote to us to talk about work, and the only thing we do with what you sent is answer it and, if it turns into a project, keep the thread. In the language of the GDPR that is our legitimate interest in replying to an enquiry you initiated, and the steps taken at your request before a possible contract. We do not use it for marketing, we do not add you to a list, and we do not sell it to anyone — there is no list to add you to.
How long we keep it
If nothing comes of it: 6 months, then deleted. Long enough that you can pick up the thread months later without repeating yourself, short enough that an inbox does not become an archive of everyone who ever asked a question.
If it becomes a project: the record lives as long as our tax and accounting obligations require. That period is set by law, not by us, which is why there is no number here — putting one would mean either promising less than we are required to keep, or more than there is any reason to.
Either way, you can ask us to delete yours sooner and we will, without asking why.
Who else sees it
As few as we could manage. Since we removed the last one, this site contacts no third party at all while you are simply reading it — the typefaces are served from our own domain precisely so that your address never reaches anyone else before you have chosen to do anything. Everything below happens only after an action of yours:
Web3Forms
Web3Forms, United States. Only when you submit the contact form.
Your name, email address, subject, the service you picked and your message — plus the IP address the submission came from. Their policy: https://web3forms.com/privacy.
Meta Platforms, Ireland / United States. Only if you click a WhatsApp link or the chat bubble.
Whatever WhatsApp already knows about your account, plus the message you choose to send. We do not send anything on your behalf — the link opens the app with a draft and you decide whether to press send. Their policy: https://www.whatsapp.com/legal/privacy-policy.
Instagram, LinkedIn and Behance
Meta, Microsoft and Adobe. Only if you click through to one of our profiles.
Nothing is embedded on this site — these are plain links. Once you land on their site, their rules apply, not ours.
Web3Forms is in the United States, so submitting the form sends your message outside El Salvador and outside the European Economic Area. If that matters to you, write to us at hello@neiyoz.com instead — it reaches the same people and skips the intermediary entirely.
Cookies
There are none. Not ours, not anybody's, and no local storage either. That means no cookie banner, because there is nothing to ask you to consent to. The longer version, including what would have to change before that sentence stops being true, is on the cookies page.
Analytics
We run none. No Google Analytics, no Tag Manager, no Meta pixel, no heatmaps, no session recording. We genuinely do not know how many people read this page, and we decided that was an acceptable price.
Children
This site sells professional services to businesses and is not directed at children. We do not knowingly collect anything from anyone under 16.
What you can ask us for
Whatever your local law gives you, and in practice we will not argue about where you live. You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to us holding it at all. One email to hello@neiyoz.com is enough — no form to fill in — and we will answer within 30 days. If you are in the European Union and you think we handled it badly, you can complain to your national data protection authority.
Security, honestly
The site is served over HTTPS and sends a set of headers that stop it being framed by another site and stop the browser from handing out your camera, microphone or location. Your message is stored in an email inbox with the ordinary protections of one. We are a small team and we are not going to claim more than that.
When this changes
The date at the top is the date this document last changed. If we ever add analytics or any other third party, this page changes in the same breath — and the cookies page stops saying there are none.