Privacy Policy

Last updated: November 9, 2026

Who we are

esthergloria.com (the "Site") is the personal portfolio website of Esther Gloria Marquez ("I", "me", "we"). I am the controller of the personal information described in this policy. If you have any question about this policy or your information, contact me at esthergloriamarquez@gmail.com.

This policy explains what information the Site collects, how it is used, who it is shared with, how long it is kept, and the choices and rights you have. It applies only to esthergloria.com and its subdomains, not to other websites linked from it.

Information the Site collects

Most visitors only read the Site. The Site does not sell anything and has no public sign-up form.

Usage and device information. When you visit, Google Analytics collects information such as the pages you view, how long you stay, the referring website, your approximate location (derived from your IP address), and your browser, device and operating system. Google Analytics uses cookies to do this (see "Cookies and similar technologies" below).
Server and security logs. The Site is hosted on Cloudflare. Like any web host, Cloudflare processes technical request data such as IP address, user agent, requested URL and time of the request to deliver the Site and protect it from abuse.
Information you send me. If you contact me by email, I receive whatever you include in your message, such as your name, email address, phone number, company and the content of your message.
Protected pages. Some pages are protected by a password I share privately. When a protected page is unlocked, the Site records which page was unlocked and when. It does not record your name, and passwords are never stored in plain text.
Google sign-in (site administration only). The Site has a private administration area that uses "Sign in with Google". If you sign in, the Site receives your basic Google account profile information: your name, email address, profile picture and a unique Google account identifier. This is used only to authenticate you. Access to the administration area is limited to the Site owner.

Google user data

The Site uses Google sign-in only to verify who is signing in. It requests only the standard openid, email and profile permissions. It does not request access to your Gmail, Google Drive, Calendar, Contacts or any other Google service, and it does not read, modify or delete any data in your Google account.

Access and use: your name, email address, profile picture and Google account identifier are used solely to create and maintain your sign-in session and to check whether your account has administrator access.
Storage: this information is stored in the Site's authentication database hosted by Supabase, and a session token is kept in your browser's local storage until you sign out.
Sharing: Google user data is not sold, not used for advertising, not shared with third parties except the service providers needed to run the sign-in (Supabase and Cloudflare), and not used to train artificial intelligence or machine learning models.
Human access: no person reads your Google user data except where you ask me to (for example, to delete your account), where needed for security, or where required by law.

esthergloria.com's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove the Site's access to your Google account at any time from your Google Account permissions page, and you can ask me to delete the sign-in record the Site holds by emailing esthergloriamarquez@gmail.com.

How information is used

To run, maintain and secure the Site and protect it against fraud and abuse.
To understand how visitors use the Site so I can improve its content and design.
To reply to messages and discuss work opportunities you contact me about.
To control access to the administration area and to password-protected pages.
To comply with legal obligations.

Where the GDPR or similar laws apply, I rely on these legal bases: my legitimate interests in operating, securing and improving a personal portfolio site and in responding to enquiries; your consent, where consent is required for analytics cookies; and steps you ask me to take before entering into an engagement.

Cookies and similar technologies

Google Analytics sets cookies named _ga and _ga_* to distinguish visitors and sessions. They last up to two years. You can learn how Google uses this data at How Google uses information from sites or apps that use its services and opt out with the Google Analytics Opt-out Browser Add-on.
Protected page cookie (pg_unlock_*) remembers that you unlocked a protected page so you are not asked again. It lasts 30 days.
Sign-in session (administration only): the Supabase authentication library stores a session token in your browser's local storage until you sign out.
Security cookies may be set by Cloudflare to detect bots and keep the Site available.

You can block or delete cookies in your browser settings. Blocking analytics cookies does not affect how the Site works. The Site does not use advertising cookies and does not show ads.

Who information is shared with

I do not sell or rent personal information. Information is shared only with service providers that help run the Site:

Cloudflare, Inc.: hosting, content delivery, DNS and security.
Supabase, Inc.: database and authentication.
Google LLC: Google sign-in and Google Analytics.

I may also disclose information if required by law, to protect my rights or the safety of others, or as part of transferring the Site to a new owner.

International transfers

These providers may process information in the United States and other countries. Where required, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

How long information is kept

Detailed Google Analytics data is kept for the longest period Google Analytics allows (currently 14 months). Aggregated reports that do not identify you may be kept indefinitely.
Emails are kept for as long as needed to handle your enquiry and any resulting work.
Sign-in records are kept until you ask me to delete them or the administration account is closed.
Protected page unlock records and hosting logs are kept only as long as needed for security.

Security

The Site is served only over HTTPS, database access is restricted, and administrative functions require authentication. No method of transmission or storage is completely secure, so I cannot guarantee absolute security.

Your rights and choices

Depending on where you live (for example, under the EU and UK GDPR or California privacy laws), you may have the right to access the personal information I hold about you, correct it, delete it, restrict or object to its use, receive a copy of it, and withdraw consent at any time. To make a request, email esthergloriamarquez@gmail.com. I will respond within 30 days and will not discriminate against you for exercising your rights. You also have the right to complain to your local data protection authority.

I do not sell or share personal information for cross-context behavioural advertising.

Children

The Site is intended for a professional audience and is not directed to children under 16. I do not knowingly collect personal information from children. If you believe a child has provided information, contact me and I will delete it.

Changes to this policy

I may update this policy from time to time. The "Last updated" date at the top shows when it last changed. Significant changes will be highlighted on this page.

Contact

Esther Gloria Marquez
esthergloria.com
esthergloriamarquez@gmail.com