Privacy notice

1. Who is responsible

Maguera Marta Guerreiro, Zollstrasse 7, 9451 Kriessern, Switzerland, is responsible for processing personal data in connection with this website and project enquiries. Contact Alexandre Marta Guerreiro at info@maguera-studio.ch for privacy questions.

2. Website operation and security

The portfolio is hosted through OpenAI Sites using Cloudflare infrastructure. Delivering and protecting the website involves technical request information such as IP addresses, requested URLs, times and browser information. Hosting providers may process technical logs under their service and security policies. This is separate from the optional audience analytics described below.

3. Your privacy choices

External YouTube players and audience analytics are disabled until you allow the corresponding category. Accepting one category does not require accepting the other. You can refuse optional features and change or withdraw your choice using Cookie settings in the footer.

The necessary maguera_consent cookie stores your category choices and their expiry for up to 180 days. If you allow analytics, a random session identifier is kept in sessionStorage for the current browser tab. It is removed when analytics permission is withdrawn. Browser Do Not Track and Global Privacy Control signals are respected by the portfolio analytics.

4. Contact and project enquiries

The contact form sends your name, email address, selected project type and message to the protected website backend, where the enquiry is stored and forwarded through Resend to info@maguera-studio.ch. This does not subscribe you to marketing. Resend processes the notification in the United States. Hostpoint AG in Switzerland operates the studio’s email mailbox; Hostpoint states that its email data is stored in Switzerland. Direct emails are processed by the mail providers involved in their delivery.

Form fields are validated. A short-lived, secret-salted hash based on the request IP address limits abuse. The enquiry and analytics tables do not store the raw IP address. Rate-limit records expire after one hour and are removed during subsequent housekeeping. Only send information needed to discuss your project.

5. Optional audience analytics

With your permission, the portfolio records page paths, broad referral domains, date, a random session identifier, coarse device category, approximate country supplied by the hosting infrastructure and selected interactions such as project openings, video interactions and submitted enquiries. Query strings, message contents, names, email addresses and raw IP addresses are not stored in these analytics records. No advertising profile or cross-site identifier is created.

The statistics are operated in the website’s own backend and accessible only to the authorised studio account. They help improve the portfolio and its performance. Random identifiers distinguish consenting browser sessions; they do not establish a visitor’s identity. Loading measurements and short-lived activity signals are recorded only with analytics permission. Activity records expire after 24 hours; analytics and performance records are scheduled for deletion after 90 days.

6. Video and external links

After you enable external media, YouTube players load from youtube-nocookie.com and the homepage may start muted playback. The player can transmit technical information, including IP address and playback interactions, to Google/YouTube. The privacy-enhanced mode limits personalisation; it does not remove all third-party processing. Locally hosted Reel videos load from the website without connecting to Instagram. Their Instagram-style interface is a visual presentation, not an embedded social feed.

Social and other external links connect to their providers when selected. Those providers process information under their own notices. The portfolio does not add advertising pixels or embedded maps.

The website loads its typeface through Adobe Fonts when a page is opened. Your browser connects to use.typekit.net and p.typekit.net to load the stylesheet, font files and font-usage information. Adobe receives technical request information, including the IP address needed to deliver the fonts. Adobe states that this font service does not set cookies and does not store the IP address. Adobe Fonts privacy information.

7. Retention and access

Enquiries in the website backend are scheduled for deletion after 365 days, unless deleted earlier. Analytics and performance records are scheduled for deletion after 90 days. Expired records are removed during subsequent housekeeping. Access to enquiry messages and statistics is restricted to the authorised studio account.

Email correspondence and project records are kept for as long as needed to handle enquiries, carry out and document projects, establish or defend claims, or meet statutory duties. Records serving as accounting vouchers are generally retained for ten years. Correspondence no longer needed for these purposes is deleted when no retention duty or other legitimate need remains. The website backend’s 365-day period does not automatically delete emails from the mailbox.

8. Providers and processing locations

Hostpoint AG, Switzerland, provides domain and mailbox services. Hostpoint states that its email data is stored in Switzerland. This does not determine the processing location of the website or its form-delivery service.

Resend (Plus Five Five, Inc., United States) sends form notifications and processes message content and delivery data in the United States. Its data processing addendum incorporates EU Standard Contractual Clauses with modifications for Swiss data transfers. Resend states that email and log data on its Free, Pro and Scale plans are retained for 30 days; this is separate from the website backend and the Hostpoint mailbox.

OpenAI Sites and Cloudflare provide website hosting, delivery, database and file infrastructure. Adobe supplies the fonts, and Google/YouTube supplies external video playback when permitted. These services use international infrastructure, including in the United States. The linked provider notices describe their processing and transfer arrangements. The website does not promise Swiss-only processing.

Provider information: Hostpoint privacy notice, Resend data processing addendum, Resend storage and retention, OpenAI privacy notice, Cloudflare privacy notice and Google privacy notice.

9. Your rights and contact

Subject to applicable law, you may request information about your personal data, correction or deletion, and exercise other applicable rights. Please write to info@maguera-studio.ch. Identity verification may be needed to protect your information.

You may also contact the Swiss Federal Data Protection and Information Commissioner. Swiss law applies together with any other mandatory protections. This notice is updated when the website’s features or data processing change.