Privacy notice

Last updated: October 30, 2026

1. Who is responsible

Jahir Espitia, based in Manzanillo, Colima, Mexico, is the data controller for ctrlia.dev (the “Ctrl+IA” brand). For any privacy matter, write to carlosp5751258@gmail.com.

2. If you only visit the site

You can use every free resource without an account. We use no advertising cookies or trackers. We count visits anonymously: we only store daily totals (which page, which outbound link and the kind of site you came from, e.g. “Instagram”), with no cookies, no IP address and nothing that identifies you. If your browser sends “Do Not Track” or GPC, your visit is not counted. Your language and theme (light/dark) preferences are stored only in your browser.

3. If you create an account (optional)

An account only adds convenience (saving favorites, requesting and voting for resources, getting alerts). When you sign in with GitHub or Google we receive and store only:

• your name, email and profile picture, as provided by GitHub or Google;
• what you do on the site: favorites and collections, resource requests, votes, guide progress and alert preferences;
• if you ask for it, the license of your Gumroad purchases, to show your Pro packs.

We never store passwords: sign-in is handled by GitHub or Google.

4. What we use it for

• Giving you access to your account and what you saved (needed for the service).
• Sending alerts about new resources, only if you turn them on; you can unsubscribe in one click from any email.
• Showing resource requests and their vote count (your name is not shown next to your votes).
• Keeping the site secure and preventing abuse.

We do not sell or share your data, use it for advertising or build commercial profiles.

5. Legal basis and consent

We process your data based on your consent, given when you create an account or turn on alerts, and because it is needed to provide the service you ask for. You can withdraw it at any time by deleting your account or turning alerts off.

6. Who it is shared with (processors)

We use these providers to run the site; they only process data on our behalf:

• Supabase (accounts and database; servers in the US).
• Resend (sending alert emails; US).
• GitHub Pages and Cloudflare (site hosting and anonymous visit counter).
• GitHub and Google (only for sign-in, if you choose it).
• Gumroad (store for the Pro packs; purchases are governed by Gumroad’s privacy policy).

Some are outside Mexico, so your data may be transferred to the US under the safeguards these providers offer.

7. How long we keep it

As long as you keep your account. If you delete it, your data is removed immediately, except for backups that rotate within 30 days. Anonymous visit totals contain no personal data.

8. Your rights

You can access, correct, delete or object to the use of your data (ARCO rights under Mexican law), and request portability or restriction (GDPR rights if you live in the EU). The fastest way to delete everything is the “Delete my account” button in your profile. For anything else, write to carlosp5751258@gmail.com with your name, your account email and your request; we reply within 20 business days. If you are not satisfied, you may contact INAI (Mexico) or the data protection authority in your country.

9. Minors

Accounts are for people aged 16 or older. If you are younger, use the site without an account.

10. Changes

If we change this notice, we will update the date above and, for important changes, email account holders.