Privacy Policy

1. Controller, ownership, and scope

This site is the personal portfolio of Johandry Viles (johalop858@gmail.com), based in Manta, Manabí, Ecuador. I am both the owner of the personal data published here and the data controller for this site.

This policy applies only to the origin https://devjohandry.me and its /es and /en routes (including /es/privacidad and /en/privacy). It does not cover external sites linked from here: each applies its own policy. Cookies and local storage are governed by the separate, complementary Cookie Policy.

2. Which of my personal data I publish (explicit inventory)

I voluntarily publish professional and public-contact data only. The exact inventory is:

• Identifiers: full name (Johandry Viles), professional photo/portrait, and role (Full-stack Developer, Software Engineering student).
• Public contact: email johalop858@gmail.com, GitHub, LinkedIn, Facebook, Instagram, and WhatsApp (wa.me/593961065204, i.e. number +593 961 065 204 with a pre-filled “Hello, I came from your website” message).
• Professional: work experience and internships (e.g. ULEAM, Port Authority of Manta), education, tech stack, published projects and their technical descriptions.
• Approximate location (never exact): city (Manta, Manabí, Ecuador), timezone GMT-5, and city-level coordinates 01°03′ S, 80°28′ W. No street, number, or real-time geolocation.
• Downloadable file: CV at /Johandry-Viles-CV.pdf (same origin, no trackers). Its content mirrors the professional data above.

I do not publish: ID documents, exact address, phone numbers other than the WhatsApp above, passwords, financial, health, biometric, or any other sensitive data. If you ever spot any, tell me and I will remove it.

3. Purpose and legal basis

My data is published for a single purpose: showcasing my work and enabling professional contact (job offers, collaborations, internships, or software-related messages).

Legal basis: my own consent and informational self-determination (I publish my own data) plus legitimate professional interest. Applicable framework: the Ecuadorian Personal Data Protection Act (LOPDP) and its regulation. No processing for any other purpose is authorized.

4. Allowed and prohibited use of my data

You may browse this site, share its link, and contact me through the listed channels. The following is expressly prohibited:

• Sending spam, unsolicited advertising, phishing, or chain messages.
• Adding me to databases, mailing lists, CRMs, or automations without my prior consent.
• Mass scraping, harvesting, or reselling my email, phone number, or profiles.
• Impersonating me or using my name, photo, or career history for fraud, fake profiles, deepfakes, or misleading content.
• Attributing false statements, jobs, or projects to me.

If I detect misuse, I may block contact, report it to the relevant platform, and take legal action under the LOPDP and anti-spam rules.

5. Visitor data: what I do (not) collect

This is a static site with no own backend, no forms, no accounts, no comments, and no first-party analytics. I neither ask for nor store your name, email, phone, IP, or any personal data in my own systems: there is no visitor database or site-owned inbox.

Any personalization happens in your browser when you change the theme with its toggle: it is stored on your device only, with no prompt (see Cookie Policy). No profiling, fingerprinting, or transmission of your data to my servers — there are no own servers, only static files served by Vercel (see section 6).

6. Vercel infrastructure and third-party services

The site is static (Astro) and hosted on Vercel (Vercel Inc.), served through its Edge Network / CDN over HTTPS (TLS) with continuous deployment. Vercel acts as infrastructure processor / sub-processor: I neither see nor manage its logs.

To deliver each page and protect the service, Vercel may process technical connection data, typically:

• IP address, source ASN/network, and the edge region serving you.
• User-Agent, Referer, HTTP method, path + query, status code, bytes, and timestamp.
• Security events (rate limiting, DDoS mitigation, abuse detection) and aggregated performance telemetry.

Purpose: delivery, security, and anti-abuse. Retention and transfers (e.g. to the US): per Vercel’s Privacy Policy and Vercel security docs, which prevail for that processing.

7. What is shared when you follow outbound links

The site embeds no third-party SDKs, pixels, maps, videos, or widgets: there are no automatic calls to Google Analytics, Meta Pixel, YouTube, or similar. There are only outbound links. Nothing is shared with those services until you click; when you do, your browser contacts them directly and exposes your IP, User-Agent, and source URL (Referer):

• GitHub (Microsoft) — to view code and profile. Their policy applies from the click.
• LinkedIn (Microsoft) — to view my professional profile.
• Facebook / Instagram (Meta) — to view social profiles.
• WhatsApp (wa.me) (Meta) — opens a chat with +593 961 065 204 and the pre-filled text shown in the link. From there, WhatsApp/Meta policies apply, plus whatever you choose to send.
• Email (mailto:johalop858@gmail.com) — opens your mail client. Nothing is sent to this site; the message goes straight to my personal inbox.
• CV (same origin) — direct download from https://devjohandry.me, with no intermediaries or trackers.

Technical tip: if you do not want to send a Referer to third parties, open links in private browsing or disable referer sending in your browser.

8. Retention, security, rights, contact, and changes

Retention: I retain no visitor data because I collect none. Infrastructure logs are retained by Vercel per its own terms. Messages you choose to send me by email or social networks are kept only to handle the conversation and can be deleted on request.

Security: minimal surface (static site, no backend or sessions), platform-enforced HTTPS, and updated dependencies. No measure is infallible: if you find an issue, report it to the contact email.

Your rights (Ecuador LOPDP): access, rectification and update, erasure, objection, portability, and suspension of processing, plus not being subject to automated decisions. To exercise them — or to request takedown of any misuse of my data — write to johalop858@gmail.com with “Data protection” in the subject. I will reply within a reasonable time. You may also complain to the Ecuadorian Data Protection Authority (Superintendencia de Protección de Datos). If you visit from the EU/EEA or California, I apply GDPR/CCPA principles by courtesy where compatible.

I may update this text when the site or regulations change. The current version is always the one published on this page. Cookie changes are published in the Cookie Policy.

October 2026 update: the canonical domain of this site is https://devjohandry.me. Technical hosting remains as described in section 6.