Privacy
What this site processes, why it is used, and the choices available to visitors.
Last updated: August 27, 2026Who operates this site
Manuel Parra operates th3nolo.com as a personal portfolio and Engineering Notes website. Questions or data requests can be sent to contact@th3nolo.com.
Why this data is used
- Deliver and secure the site.
- Answer assistant questions from public portfolio evidence.
- Verify an email when you request additional assistant access.
- Understand aggregate traffic and diagnose problems.
- Measure visits and campaigns when you consent.
- Contact you later only when you give separate permission.
Data processed when you visit
Hosting and security
Providers that deliver and protect this site may process basic request information, including IP address, browser type, requested URL, timestamp, and security signals. This information is used to serve the site, prevent abuse, and diagnose failures.
Ask Manuel assistant
When you use the assistant, the server processes your question. The configured AI provider receives the question and bounded page or follow-up context to classify its intent and write an evidence-search query. When a model-written answer is necessary, the provider also receives the selected public portfolio evidence. The provider receives the short evidence-search query to create one semantic-search embedding. When Manuel rebuilds the search index, the provider receives the approved public corpus records. The resulting vectors and content hashes are stored as a versioned site artifact. Visitor questions and query vectors are not added to that index. Structured agent logs exclude the question, answer, source text, and vectors.
Your browser keeps up to three completed questions, answers, and local source links in per-tab session storage. This copy lets the chat survive page navigation and a page reload. Select "Clear" to remove it. The browser also removes it when you close the tab.
After the public request allowance is used, you may provide an email to receive a verification link and double the allowance for that browser. The server stores the email in encrypted form, keeps a one-way hash for lookup, and records the verification time and privacy-notice version. The signed access cookie is HTTP-only, lasts up to 180 days, and does not contain the email address. Permission to receive later messages about Manuel's work is optional and recorded separately from verification.
To enforce the request allowance across Vercel instances, the server derives a keyed one-way value from the network address Vercel forwards and stores a 24-hour counter in Neon. It does not store the raw network address in that table. Counters that have been inactive for 24 hours are removed during later requests.
Vercel Web Analytics
The site uses Vercel Web Analytics for aggregate traffic statistics. Vercel states that this service does not use third-party cookies or create a profile that follows a visitor across websites. It reports aggregate information such as pages, referrers, country, browser, device type, and operating system.
Google Analytics and Meta Pixel
Google tags load with storage consent denied by default. In that state, Google Analytics does not read or write analytics cookies, although Google Consent Mode may send cookieless measurement signals. If you allow optional cookies, Google Analytics and Meta Pixel may process browser or device identifiers, pages viewed, referrer and campaign information, and interaction events. Google Analytics may set a first-party identifier such as _ga; Meta may set identifiers such as _fbp.
Providers
The site uses Vercel, Neon, a self-hosted mail service, Google, Meta, and the configured AI provider. The mail service processes the recipient address and delivery metadata to send a verification link. Neon stores the encrypted verification and consent records. These providers may process data in countries other than your own under their respective terms and privacy notices. I do not sell contact information submitted directly to me.
Your choices
You can decline optional cookies in the consent banner and reopen the banner through "Manage cookies" in the footer. You can also use browser controls or provider opt-out tools to limit tracking. Withdrawing consent does not affect processing that occurred before withdrawal. You can verify an email without agreeing to later contact.
Your rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection, and to withdraw consent. Email contact@th3nolo.com to make a request.
Retention and changes
Email verification links expire after 30 minutes. Expired unverified records are removed during later access-flow requests. Verified access and contact-consent records are retained while the access program operates or until a valid deletion or withdrawal request is completed. Hosting, analytics, advertising, email, database, and AI providers also retain data under their account settings and privacy terms. I may update this notice when the site or its providers change; the date above shows the latest revision.