Last updated: October 2026
The controller of your personal data is Irwin Rodriguez, NIF ES61431132H, under the trade name irwinrodriguez.dev, domiciled in Spain. For any data protection matter, write to soporte@irwinrodriguez.dev.
This, and nothing more:
No marketing communications are sent, there is no profiling, and there are no automated decisions with legal effects on you.
Data is neither sold nor handed over for advertising purposes. Only two parties are involved:
Transfers outside the European Union: Paddle is a UK company with US entities, so part of the payment processing happens outside the EEA, covered by the UK adequacy decision and, where applicable, by the European Commission's standard contractual clauses. The portal server is in the European Union.
Account data, for as long as the account exists. Billing and license data, six years from the transaction, which is the period imposed by Spanish commercial and tax obligations. After that it is deleted or anonymised.
This site uses no cookies, neither its own nor third-party ones, which is why you will not see any consent banner. What it does keep, in your browser's local storage and only in your browser, is the minimum needed for the session to work:
irwin_token and irwin_user: your signed-in session. They are removed when you sign out.irwin_lang: the language you chose by hand, so that you are not sent back to your browser's language.patreon-banner-dismissed: that you closed the patron notice, for that visit.irwin_tlm: a random number that groups the pages of a single visit, so that a four-page visit can be counted as one visit and not four. It expires after 30 minutes without activity and is not linked to your account: it cannot be used to recognize you tomorrow, here or anywhere else.They are technical data, necessary to provide the service you asked for, and they travel to no third party.
The site measurement is our own: we wrote the code, the data stays on our server, and there is no Google Analytics, no Matomo and no third-party script. What is kept is the page path (without anything after the "?"), the title, the time the page was visible and in use, the domain you arrived from (never the full address), the device type, the browser and the operating system, the language, the time zone and the screen size. It also records which links and buttons on the site are clicked (a download, "Buy" or the language switch, for example) and, when a link leads elsewhere, to which site: the domain, or the repository if it is GitHub. Your IP address, what you type into forms, your email address and anything that identifies you are not kept. Raw data is deleted after 90 days.
If you would rather your visit was not measured: turn on Do Not Track in your browser and it is respected, or open the browser console and run localStorage.setItem('irwin_tlm_off', '1').
Server logs are a separate thing, and every web server keeps them: for each request that arrives we record the date and time, the address requested, the result, your IP address and the name your browser introduces itself with (the "User-Agent"). They are used to keep the site running, to investigate errors and to tell people apart from automated programs. They are not linked to the measurement above or to your account, they never leave our server, and they are deleted after 30 days.
By writing to soporte@irwinrodriguez.dev you can exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw at any time any consent you gave, without that affecting what was processed beforehand.
If you believe your data is not being handled properly, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es), which is the competent supervisory authority.
Passwords are stored with PBKDF2-SHA256, one hundred thousand iterations and a different salt per user: they are not stored in the clear and cannot be recovered, only reset. Access to the portal goes over HTTPS, and license files are signed with RSA-SHA256.