Privacy Policy

Nemuel Cruz, an independent IT and cybersecurity advisor. Questions about anything on this page go to ncc@incognito.hn.

There is no advertising tracker, no Facebook pixel and no third-party analytics script on this site.

• Page views. Which pages you visit, when, how long you stay, the page you arrived on, and the site or campaign that referred you.
• Your IP address and what it implies. I store a hashed version of your IP, and use it to derive an approximate city, region and country. If your connection belongs to a business rather than a home internet provider, the company name may be resolved too. I do not know your street address and I do not try to.
• Chat transcripts. Everything typed into the assistant on this site, along with any name, email, phone number or company you choose to share in it.
• Form submissions. The contact form: name, email, phone, company, and your message.
• Scorecard submissions. Your answers, the resulting score, and the name, email, company, industry and size you provide — that part is optional and skippable.
• Device type. Whether you're on a phone, tablet or desktop.

Two reasons. First, to see which pages actually help business owners so I can write better ones. Second, to know when someone is seriously considering working with me, so I can respond quickly and with context instead of asking you to repeat yourself.

Nobody buys this data, because none of it is for sale. It is never shared with advertisers or data brokers. Three service providers process it strictly on my behalf:

• Anthropic — chat messages are sent to Anthropic's API to generate the assistant's replies. Anthropic processes them to return a response.
• Resend — sends the emails: lead notifications to me, and confirmations or scorecard reports to you.
• The hosting and database provider that runs this site and stores the records described above.

• Page views and visitor records: 24 months.
• Chat transcripts: 24 months.
• Contact and scorecard submissions: kept while there is an active or plausible business relationship, then deleted on request at any time.

This site does not use advertising cookies. It keeps a short-lived session identifier in memory for the duration of your visit so page views and a chat conversation can be tied together. It is not written to your browser's local storage and it disappears when you close the tab. The admin area uses one secure, http-only cookie for sign-in — that one is only ever set for me.

Language selection: when you first arrive, the site reads your browser's Accept-Language header and the country derived from your IP address to decide whether to show you the English or the Spanish version. Spanish-speaking visitors outside the United States are sent to the Spanish site once; everyone else stays on English. Your choice is then stored in a functional cookie (lang_pref, 12 months) plus a short-lived cookie (lang_checked) so the check only runs once. Neither cookie contains personal information, and switching language with the EN | ES toggle overrides the detection permanently.

You can ask me what I hold about you, ask for a correction, or ask me to delete all of it. Email ncc@incognito.hn and say so — no form, no justification needed. I'll confirm within a few business days. If you'd rather not be tracked at all, use the site with a browser in private mode; the derived location and company signals largely disappear behind a VPN.

Data is stored in an access-controlled database. No visitor data is readable from the public site — only authenticated server code can reach it. Emails travel over TLS.

If this policy changes in a way that matters, the date at the top changes with it. There is no fine print elsewhere.