Privacy policy

Version 4.0.0 · Last updated: 2026-09-13

This policy follows the two-layer model allowed by article 11.1 LOPDGDD: first a short summary and then the article 13 GDPR detail, section by section. It is deliberately short, because the processing it describes is short too.

Summary (first layer)

If you only have a minute: browsing this website gives us no data about you. There is no analytics, no tracking, no advertising and no profiling. Only two things are stored on your device: the theme you choose yourself and, for as long as the tab stays open, where you were reading.

Controller: Daniel Mosquera, a natural person (see the «Who is the controller» section).
Purpose: Remembering the theme you choose, and replying to you if you decide to email us.
Legal basis: Your own choice when using the interface and, only if you write to us, handling your message.
Recipients: Vercel (hosting), plus Cloudflare and Google if you write to us by email. We do not disclose or sell data to third parties.
Your rights: Access, rectification, erasure, restriction, objection and portability. See the «Your rights» section.

Who is the controller (art. 13.1.a GDPR)

The controller of your personal data is:

Name: Daniel Mosquera
Legal form: Natural person
Tax ID (NIF/CIF): Not applicable.
Registered address: Not applicable.
Registry information: Not applicable.
Contact email: hello@voidtoinfinite.com
Data Protection Officer: No Data Protection Officer (DPO) has been appointed.

These identifying details are still pending from the site owner. While they are missing, this page does not meet article 13.1.a GDPR and must not be considered a publishable privacy policy.

Data Protection Officer (art. 13.1.b GDPR)

No Data Protection Officer (DPO) has been appointed.

Appointing one is not mandatory here: none of the cases in article 37 GDPR applies (we are not a public authority, our activity does not involve regular and systematic monitoring of people on a large scale, and we do not process special categories of data on a large scale), nor any of the additional cases in article 34 LOPDGDD.

What we do NOT do while you browse

This website is a presentation page. During ordinary browsing we do not collect personal data about you, and specifically:

We use no analytics or audience measurement tools.
We use no tracking technologies, advertising pixels or third-party identifiers.
We build no profiles and take no automated decisions affecting you (art. 13.2.f and art. 22 GDPR).
We show no advertising and do no behavioural advertising.
We load no social media widgets, feeds or SDKs: links to external platforms are plain anchors, and they do not contact those platforms until you click them.
We do not sell, rent or disclose data for commercial purposes.
There is no form that sends data to a server of ours: this website is a static export and has no application server to send it to.

Purposes and legal basis (art. 13.1.c GDPR)

Remembering the theme you choose: Legal basis: the legitimate interest in giving you the interface you asked for yourself when you pressed the theme switch (art. 6.1.f GDPR). This storage is exempt from consent under article 22.2 LSSI-CE, see the «What we store on your device» section.
Replying to your message if you write to us: Only if you decide to send us an email. Legal basis: either your consent for a general enquiry (art. 6.1.a GDPR), or steps taken at your request prior to entering into a contract when you write about a collaboration or a commission (art. 6.1.b GDPR), depending on why you write. We do not claim a single basis for every case, because not every message is the same.

Legitimate interest pursued (art. 13.1.d GDPR)

The only processing based on legitimate interest (art. 6.1.f GDPR) is remembering the theme, and that interest is simply to give you the preference you chose yourself. No other processing is based on the controller's legitimate interest.

What we store on your device (technical storage)

This is the complete and only list of everything this website writes on your device, and not all of it is of the same kind: there is a preference you choose yourself, the theme, and a technical state of the browsing session itself, where you were reading, which nobody chooses. They are stored using your own browser's localStorage and sessionStorage, and the second one is cleared on its own when you close the tab. There are no HTTP cookies, no analytics and no third-party scripts.

What we store on your device (technical storage)
Identifier	Purpose	Type	Duration	Owner
Theme (light / dark)	Remembers whether you chose the light or the dark theme, so you are not asked again on every visit.	localStorage	Persistent until you delete it	first-party
Reading position (this tab only)	Notes which section of the home page you were reading, so a reload, or returning to it with Back or Forward, takes you back to it. It lives only in this tab and is erased when you close it.	sessionStorage	Until you close this tab	first-party

Each entry serves only the purpose its own row declares: remembering the theme you chose and taking you back to where you were reading. They are not used for analytics, advertising, tracking, identification, profiling or to relate your visits to any other purpose.

This is why the site shows no cookie notice: article 22.2 LSSI-CE exempts from consent the storage strictly necessary to provide the service expressly requested by the user, and the Spanish Data Protection Agency's cookie guidance lists interface personalisation chosen by the person themselves among those cases. Asking permission for what the law exempts would be friction without legal grounding. Should a non-exempt technology ever be added, consent would be requested before enabling it.

You can delete these entries at any time from your browser settings (clear site data or browsing data). The site will keep working: it will simply go back to its default values.

If you email us

Contact on this website works with a mail link: when you click it, your browser opens your own email application with the message already started. The website receives nothing, sends nothing and stores nothing of that; you send it yourself, from your own account, and you are free not to.

If you do decide to send it, that email reaches our inbox like any other, and from then on we do process the data you included. Depending on what you write, that may cover:

your email address;
your name;
the company or organisation you represent, if you mention it;
the content of the message;
any other detail you decide to include, including any files you attach.

We use them only to read your message, reply to you and keep the communications related to that enquiry, including handling it as a commercial or pre-contractual request when that is why you are writing. We do not use them to send you unsolicited commercial communications and we do not add them to any mailing list.

Providing this data is entirely voluntary (art. 13.2.e GDPR): you decide what you write and whether you send the email. If you do not write to us, the only consequence is that we cannot reply.

Who receives your data (art. 13.1.e GDPR)

The site is a static export (with no application server of our own) hosted on Vercel. When serving each request, Vercel processes its technical data (for example the IP address, the browser and the referring page, in its request logs) under its own privacy policy.

Vercel, for the technical hosting of the site and the delivery of its pages. This site uses its free plan, and Vercel states that its data processing addendum applies to the Pro and Enterprise plans: no contractual processor relationship is claimed here.
Cloudflare, which routes email sent to the contact address. It does not store it: it forwards it to a destination mailbox.
Google, the provider of that destination mailbox, where the message is stored. It is a personal Gmail account, not a service engaged as a data processor: this is stated plainly rather than claiming a contractual relationship that does not exist.

There is no other recipient. We do not disclose your data to third parties for commercial purposes and we do not sell it.

International data transfers (art. 13.1.f GDPR)

The site is hosted on Vercel's infrastructure and contact email is routed through Cloudflare. Both are US companies, so transfers of technical data outside the European Economic Area may occur.

Vercel Inc.: certified, active participation in the EU-U.S. Data Privacy Framework, according to the official list of the U.S. Department of Commerce. Its data processing addendum, which contains the European Commission standard contractual clauses, is stated to apply to the Pro and Enterprise plans and not to the free plan this site uses, so that contractual safeguard is not claimed here.
Cloudflare, Inc.: standard contractual clauses (module two, controller to processor) in section 6.2 of its data processing addendum, plus adherence to the Data Privacy Framework confirmed in its section 6.4.

The final mailbox behind the contact address is a personal Gmail account. Google adheres to the Data Privacy Framework, but a consumer account is not covered by a data processing agreement: no contractual safeguard that has not been signed is claimed here. If you would rather not send your data to a US provider, do not use email to get in touch.

How long we keep your data (art. 13.2.a GDPR)

Chosen theme: It stays on your own device, not on a server of ours, and it does not expire on its own: it remains until you clear this site's data in your browser.
Your email and its content: Kept until your enquiry has been resolved and, at most, three months from that point. After that it is deleted.

Your rights (art. 13.2.b and 13.2.c GDPR)

You can exercise these rights over your data at any time:

Access: to know what data we process about you.
Rectification: to correct inaccurate data.
Erasure: to ask us to delete your data.
Restriction: to ask us to restrict its processing.
Objection: to object to a specific processing operation.
Portability: to receive your data in a structured, commonly used format.

To exercise them, write to hello@voidtoinfinite.com stating which right you want to exercise.

Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

How to complain to the supervisory authority (art. 13.2.d GDPR)

If you believe the processing of your data breaches the rules, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es opens in a new tab, calle Jorge Juan 6, 28001 Madrid.

Changes to this policy

We will update this policy when the way we process your data changes, and in particular if any technology that does not exist on the site today is ever added. The date and version of the last substantive revision appear at the top of this document.