This policy describes what data is processed when you visit brendamanrique.com, why, and what choices you have. The controller is Brenda Manrique (Berlin, Germany).
What data is collected
- ●Visit analytics (only with your permission where the law requires it): page visited, referring page, country, browser, operating system and device type, through Vercel Web Analytics. It uses no cookies and does not store your IP address; visits are grouped with an identifier that is discarded after 24 hours.
- ●Chat messages: when you use this site's chat agent (Brenda's portfolio AI), your messages are sent to generate answers. No personal information is requested; please avoid including any.
- ●Voice mode audio: if you turn on voice mode, audio is processed in real time and not stored.
- ●Pseudonymous identifier and approximate location: chat and voice mode have a daily limit. To enforce it, your IP address is turned into an irreversible code (a hash with a secret key) and the IP itself is never stored. Stored with that code: the approximate country, region and city of the connection, how many times you have used chat or voice, and when you first and last did. Message content is not stored with this data.
Why, and on what legal basis
- ●Analytics: understanding which content gets read and improving the site. In the EU, EEA, UK and Switzerland they only run if you accept (consent, GDPR Art. 6(1)(a)). Elsewhere they run by default on the basis of legitimate interest, and you can turn them off.
- ●Chat and voice: answering your questions about Brenda's professional experience (GDPR Art. 6(1)(b)/(f)). Conversation traces are kept to improve quality and detect misuse.
- ●Pseudonymous identifier and location: enforcing the daily limit, protecting the service from abuse, and understanding in aggregate where the chat is used from and how often (legitimate interest, GDPR Art. 6(1)(f)). This data is not combined with other sources to identify people or companies.
Third parties
- ●Vercel: hosts the site and provides the cookieless analytics.
- ●Anthropic (Claude): processes chat messages to generate answers.
- ●OpenAI (Realtime API): processes voice mode audio in real time.
- ●Langfuse: stores conversation traces for observability and quality.
- ●Supabase: stores the pseudonymous identifiers with their counters and location, and the index of the site's content.
- ●Resend: sends Brenda an internal alert, including the message text, when a message looks like an abuse attempt.
- ●Some of these providers process data outside your country, including in the United States, under the contractual safeguards they offer (e.g. Standard Contractual Clauses).
Cookies and local storage
This site uses no cookies. Your browser keeps only what the site needs to work in local storage: your visual theme, your music preference, your analytics choice and, for the session, the chat conversation and which language prompts you have already seen. None of it is sent to third parties.
How long data is kept
- ●Pseudonymous identifier and location: a monthly cleanup deletes any that have been inactive for 90 days, so they are kept no longer than about four months after your last visit.
- ●Visit analytics: Vercel discards the visit identifier after 24 hours and keeps only aggregate figures.
- ●Voice mode audio: not kept.
Your choices
- ●You can accept or decline analytics at any time from "Privacy choices" in the footer.
- ●If your browser sends Global Privacy Control or Do Not Track, analytics are switched off automatically.
- ●Personal data is not sold or shared for advertising, including as "sale" and "sharing" are defined under US state privacy laws such as the CCPA/CPRA.
Your rights
- ●Under the GDPR (EU/EEA), UK GDPR, LGPD (Brazil), PIPEDA (Canada) and US state privacy laws, you can ask to access, correct, delete or port your data, object to its processing, or withdraw your consent.
- ●Because the site has no user accounts, it holds very little that identifies you. If you get in touch, include the approximate date of your visit so the data can be found.
- ●You can also complain to your data protection authority (in Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit).
No user accounts
This site does not require registration or login. No names, emails, or passwords are collected through the website.
Contact
No personal email is published on this site. For any privacy question or request, you can reach out on LinkedIn: