1. Controller and contact
José Cruz Chávez, an individual, is responsible for the processing described in this notice. Address: Acacia 55, El Palmar, Nezahualcóyotl, Estado de México, C.P. 57310, México.
For privacy questions or requests to exercise your rights, use the email below. Do not send passwords, tokens, or secrets by email.
2. Website
The website does not offer accounts, contact forms, or newsletters. If you voluntarily email the privacy contact, we process the information you include to respond and handle your request.
The project is prepared for deployment on Cloudflare Pages. When that service is used, Cloudflare may process technical request data—such as IP address, date and time, requested URL, and browser information—to deliver, diagnose, and protect the site. If the hosting provider changes, this notice should be updated to reflect the actual service and its practices.
3. Google Analytics 4
Google Analytics 4 (GA4) is planned but is not integrated into the current website source. Until it is configured and enabled, this site does not send data to GA4.
When enabled, GA4 may use first-party cookies such as _ga and _ga_<identifier> and process visit and interaction data, pages viewed, referral sources, browser and device information, and online identifiers. We will not configure GA4 to request names, email addresses, passwords, or secrets; personal data should not be placed in URLs or custom parameters.
Google may process this information under its policies and in other countries. Before enabling analytics, this notice will be updated to match the actual configuration, and applicable consent controls will be implemented. Data retention and sharing settings will depend on the controller’s GA4 property.
4. GDW Vault for macOS
The app is designed to work locally and does not require a GDW account. In the current version, connection metadata is stored in a local SQLite database; passwords and tokens are stored separately in macOS Keychain. iCloud synchronization is disabled.
The app does not provide a central GDW service to synchronize the vault. However, when you use a connection, an MCP tool, or an AI client, the necessary data may be sent to the server or client you configured. The AI client and its provider apply their own policies. Some tools can deliver a secret to chat after explicit local authorization.
Uninstalling the app does not automatically delete the database or Keychain items; you retain control of that data on your Mac.
5. Purposes
Information received by email is used to answer questions and privacy requests. Hosting data is used to deliver, maintain, and protect the site. If GA4 is enabled, it will be used to measure general site usage and improve the site, subject to applicable controls and consent requirements.
6. Providers and transfers
The hosting provider, Google if GA4 is enabled, and the MCP clients, AI providers, and remote servers you choose may process data for their own services. Their terms and privacy notices are independent. Vault data and stored secrets are not sold.
7. Retention and security
Technical log retention depends on the hosting provider and its configuration. If GA4 is enabled, its retention period will be set in the property and this notice will be updated. App data remains on your Mac until you delete it; backups may retain it according to your backup settings.
Reasonable security measures are used, but no system can guarantee absolute protection. The SQLite database is not encrypted at the application layer; secrets are stored in macOS Keychain.
8. Privacy rights
You may request access, correction, cancellation, or objection to the processing of personal data, and withdraw consent where applicable, by emailing the privacy contact. Describe the right you wish to exercise and the information needed to locate the request; we may request reasonable information to verify identity. Do not send credentials or secrets.
Requests will be handled under the timelines and requirements of applicable Mexican law.
9. Changes to this notice
This notice may be updated when the website, app, providers, or data practices change. The latest revision date appears above. Enabling GA4 or changing the hosting provider requires reviewing this notice before publishing the new configuration.