Last updated: 17 October 2026
Who is responsible for your data?
Tracy Ariza, a self-employed creator based in Spain, is responsible for the personal data processed through tracyariza.com. For privacy questions or to exercise your rights, email [email protected].
Information processed when you visit
This is a personal and professional website introducing my work and linking to my projects. It does not load visitor-analytics scripts, advertising pixels or behavioural-profiling tools. Comments are disabled, and there is no contact form, newsletter sign-up or public account registration.
Delivering and protecting the website involves processing technical information such as your IP address, requested page, request time, browser information and security-related events. BigScoots provides hosting, and Cloudflare provides website delivery and security. This processing supports the legitimate interests of operating a reliable website and preventing abuse (Article 6(1)(f) GDPR).
If you email me
If you contact me, I process your email address and the information you choose to send so I can respond and handle your enquiry. BigScoots hosts this email service. The legal basis is my legitimate interest in responding to correspondence, or steps requested before entering into a contract where relevant. Please do not send sensitive personal information unless it is necessary for your enquiry. Emailing me does not subscribe you to marketing.
Cookies and browser storage
The public pages use a first-party cookie called pll_language, supplied by Polylang. It stores the language code of the page being viewed (en or es), lasts up to one year and is refreshed when a page sets it. It supports language preference rather than analytics or advertising. It is currently set on page load, including a first visit.
WordPress also uses session storage named wpEmojiSettingsSupports to cache whether your browser can display emoji. This is a display-support check, not a visitor identifier. WordPress’s code rechecks cached results after approximately ten minutes; the stored entry normally disappears when the browser tab’s session ends. When emoji fallback images are needed, WordPress may request them from s.w.org, a WordPress.org service, which then receives the technical information needed to serve the image.
The site does not use analytics or advertising cookies. You can remove or block cookies and site storage through your browser settings. English and Spanish remain directly accessible at tracyariza.com and tracyariza.com/es/.
WordPress authentication, login-test and editor-preference cookies apply when administrators visit the login page or sign in. They are separate from the ordinary visitor experience and are not required simply to read these public pages. Security services may use necessary checks when suspicious traffic is detected.
Service providers and international processing
BigScoots and Cloudflare process technical data as part of hosting, email, delivery and security services. Data may be processed outside the European Economic Area, including in the United States. BigScoots states that it relies on Standard Contractual Clauses where required; Cloudflare describes its transfer safeguards in its data-processing terms. You can contact me for information about these arrangements and how to obtain relevant safeguards. See BigScoots’ privacy information and Cloudflare’s privacy information. Personal data may also be disclosed when required by law. I do not sell personal data.
How long information is kept
Correspondence is kept for as long as needed to resolve the enquiry and any related follow-up, and where necessary to meet legal obligations or establish, exercise or defend legal claims. Technical and security records are retained according to the operational and security needs of the hosting and delivery services. Backup copies follow the providers’ backup rotation. The language-cookie duration is given above.
Your rights
Depending on the circumstances, you may request access, rectification, erasure, restriction of processing or data portability, and object to processing based on legitimate interests. Send requests to [email protected]. If a future activity relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. You may complain to the Spanish Data Protection Agency (AEPD). This website does not make automated decisions with legal or similarly significant effects about you.
Links to other websites
Links to my projects and other websites take you to separate sites with their own privacy policies. Linking to them does not embed their advertising or analytics on this website.
Changes to this policy
I will update this information if the website’s features or data practices change. The date above identifies the latest revision.