Privacy

Who is responsible

Victor Tobar, as an individual. There is no company behind this project.

For any question about your data, write to privacy@nahuat.com.

What is collected

This is everything the system stores about you:

• Your email address. It is required to sign in, whichever method you use.
• Your Google account details, only if you sign in with Google. Google returns an identifier, your email, your name and your profile picture.
• Your profile: your role in the project, your preferred language if you chose one, and whether the account is active. That record holds no email address — the address lives in the authentication system.
• A session cookie, so you do not have to sign in on every visit.

What is NOT collected

There is no analytics, no tracking pixel, no advertising and no third-party script. None.

The site’s typeface is bundled at build time rather than fetched from Google, so opening a page contacts nobody but this site.

Who else handles it

These are service providers acting on our instructions. None of them receives your data to use for its own purposes.

• Supabase — accounts and database (United States).
• Amazon Web Services — sends the sign-in emails and runs the API (United States).
• Vercel — serves this website.
• Google — only if you choose to sign in with Google.
• ImprovMX — forwards mail sent to @nahuat.com addresses.

Where, and for how long

Data is stored in the United States (AWS us-east-1).

It is kept while your account exists. Ask for it to be deleted and it is deleted.

What you can ask for

You can ask for a copy of your data, for something wrong to be corrected, or for all of it to be deleted. Write to privacy@nahuat.com and you will get an answer.

If this changes

If something material changes, the date above changes. The project is under construction and this page is updated when the system is.