This is a personal portfolio. There are no accounts, no sign-in, no advertising, and nothing that follows you to other sites. Measurement is switched off until you switch it on, further down this page — so by default nothing counts your visit, and the only thing you send me is what you type into the contact form, if you send it.
Visits can be measured with Google Analytics 4, loaded through the Firebase Analytics SDK — but only if you switch it on. Until you do, the SDK is never started: no Google Analytics script is fetched, no identifier is generated, no cookie is written and nothing described below is sent. If you do switch it on, I decide what is measured and Google processes it for me, on Google infrastructure and under Google terms.
Switched on, it stores two cookies in your browser. One is named _ga and holds a randomly generated identifier for this browser. The other has a name beginning with _ga_ and holds the state of your current visit. Both are set to last two years. Switching it off again stops the measurement immediately, but leaves those two cookies where they are — this site does not delete them for you, and clearing site data for this domain does.
What is sent while it is on is the address of the page you are on and a fixed name for anything you tap — the Work nav item, the send button — together with what Google derives from the request itself: an approximate location from your IP address, which Google states it does not itself store, plus your browser, operating system, device, screen size, language, and the page that referred you.
Nothing you type reaches Analytics. The contact form reports that a submission was attempted and whether it went through; the name, the address and the message are not part of that event.
If you send the form, the name, email address and message you typed are written to Cloud Firestore, a Google database, and I read them in the Firebase console. The rules that let the form write them also make them unreadable to the site itself, so nothing on this page can fetch them back. They are not published, not forwarded, and not added to any mailing list.
The pages, images, photographs and fonts all come from this domain. The graphics engine the site draws itself with is fetched from www.gstatic.com, which is Google's — so opening any page here makes a request to Google whether or not you interact with anything on it.
One entry in local storage, flutter.__theme_mode_v2__, remembers whether you chose the light theme, the dark one, or to follow your system. It is never sent anywhere. Clearing site data for this domain removes it.
A second, flutter.__analytics_consent_v1__, remembers your answer about analytics — present and true if you switched it on, present and false if you switched it off, and absent until you answer either way. It is a note to this browser, not a record of you: it holds one bit, it is never sent anywhere, and it exists so the site can honour your answer without asking again. Clearing site data removes it too, and measurement goes back to off.
The control is on this page and nowhere else, because there is no banner. A bar that appears on every page, covers the thing you came to read and offers a large Accept against a small Reject is a poor trade for a portfolio with nothing commercial to measure — so the measurement simply starts off, which is the choice that needs no banner at all. Switch it on if you are happy to be counted; switch it off in the same place if you change your mind.
Your answer stays in this browser. It is not sent anywhere, it is not attached to a name, and it is not itself a form of tracking — it is one stored bit whose only reader is this page.
If you are reading this without JavaScript, or through something that renders the page as text, the control is not there — and neither is any measurement to switch off. Blocking analytics scripts in your browser has the same effect as leaving it off, and stops nothing else: no part of this site reads what it measures, and every page works identically without it.
Email mena97villalobos@gmail.com. That covers a contact-form submission you want removed, a question about anything above, or a request for whatever is held about you. If you never switched analytics on there is nothing held on that side at all; if you did, the data is not tied to a name, so switching it off and clearing the two cookies is usually the effective step — but ask, and I will look.
This describes the site as it stood on 7 August 2026. If what it collects changes, this page changes in the same commit — the words are a constant in the source, next to the page that renders them.