Back to portfolio

Last updated: June 26, 2026

Privacy policy

This website is a professional portfolio operated by Kilian Escudero. This privacy policy explains what personal data is collected through the public lead form, why it is processed, and which providers are involved in the current stack.

This public portfolio currently uses a custom Next.js form connected to an internal API, n8n workflows, and a self-managed Postgres database running on a VPS. No public user accounts, payments, or newsletter subscriptions are active on this website at this time.

1. Data controller

The data controller for the information submitted through this website is Kilian Escudero.

For privacy, data access, or data deletion requests, you can contact: [email protected].

2. Data collected through the form

  • Name
  • Email address
  • Phone number
  • Business type
  • Estimated budget
  • Message content

3. Purpose of the processing

The data is processed to review the request, reply to the person who submitted it, evaluate whether the project is a good fit, and keep a basic record of incoming commercial opportunities.

The data is not used to create public profiles, to publish information, or to run automated decisions with legal effects.

4. Legal basis

The legal basis for processing is the user's explicit consent when submitting the form and the legitimate interest in managing follow-up on inbound project requests.

5. Current processors and technical providers

The current stack involves infrastructure and service providers that may process the submitted data strictly for hosting, routing, storage, or notification purposes.

  • Cloudflare for DNS and public proxying.
  • Hetzner for the VPS infrastructure.
  • Next.js application running on the VPS.
  • n8n as the workflow orchestration layer.
  • Self-managed Postgres as the operational database.
  • Gmail for internal notifications and reply workflows.

6. Retention period

Lead request data is kept for the time reasonably necessary to review the request, continue the conversation if there is a real project fit, and preserve a minimal commercial and operational record.

If a request no longer needs to be kept, data can be deleted on request unless there is a legitimate need or legal obligation to retain it.

7. User rights

You can request access, correction, deletion, restriction, or objection regarding your personal data by emailing [email protected].

If your request is reasonable and the data can be clearly identified, it will be handled as soon as practical.

8. Cookies, analytics, and tracking

This website currently does not activate public advertising trackers or non-essential analytics by default.

Microsoft Clarity has only been prepared technically in the codebase and remains disabled until a final project ID and consent layer are intentionally enabled.

9. Security and disclosure limits

Reasonable technical measures are used to reduce spam, control abusive requests, validate input, and keep the form flow limited to the current operational stack.

If you need additional identification details for a contractual or legally justified reason, request them through the contact email above.