# Privacy Policy — Carlos Rivera (https://carlosrivera.im)

**Last updated**: November 7, 2026

This Privacy Policy explains how Carlos Rivera ("we", "us", or "our"), operator of [https://carlosrivera.im](https://carlosrivera.im) and associated first-party developer tools, collects, processes, and protects information when humans or autonomous AI agents access this website, machine-readable endpoints, and software tools.

## 1. Data Controller Identity

- **Controller**: Carlos Rivera
- **Website**: [https://carlosrivera.im](https://carlosrivera.im)
- **Privacy Contact Email**: [me@carlosrivera.im](mailto:me@carlosrivera.im)
- **Location**: Guadalajara, Jalisco, Mexico

## 2. Information We Collect on https://carlosrivera.im

### Cookie-Free Web Analytics (Umami)
We use self-hosted Umami Analytics to understand aggregate traffic patterns without invading reader privacy. Umami does not set tracking cookies, does not track visitors across websites, does not collect persistent device fingerprints, and anonymizes IP addresses. Only aggregate HTTP request metadata (requested page path, HTTP referrer, browser family, operating system, and country-level region) is recorded.

### Email Newsletter Subscriptions (Buttondown)
When you voluntarily subscribe to the newsletter on blog articles, your email address is transmitted to Buttondown (`buttondown.com`) solely to deliver new essays and technical notes written by Carlos Rivera. We never sell, rent, or trade subscriber email addresses with third parties or advertisers. Every email includes a one-click unsubscribe link, and you may also request immediate removal by emailing [me@carlosrivera.im](mailto:me@carlosrivera.im).

### Hosting & Standard HTTP Access Logs
Static pages and machine-readable resources (`/llms.txt`, `/llms-full.txt`, `/.well-known/mcp`, `/rss.xml`, and Markdown content-negotiated endpoints) are served via GitHub Pages and Fastly CDN infrastructure, which process standard transient HTTP connection metadata (IP address, `User-Agent`, `Accept` header, and timestamp) strictly for routing, caching, and abuse prevention.

## 3. Developer Tools & MCP Server Privacy

- **MCPWire (`@mcpwire/cli`, [mcpwire.co](https://mcpwire.co))**: Establishes encrypted peer-to-peer tunnels between consenting machines so developers and agents can invoke local MCP tools remotely. Local environment variables, API keys, and private credentials remain on the host machine and are never harvested or stored centrally.
- **Folio ([carlosrivera.github.io/folio](https://carlosrivera.github.io/folio/))**: Renders Markdown documents into paginated PDFs locally via WebAssembly or within the caller's local MCP server environment without uploading private document contents to third-party storage.
- **Public MCP Discovery (`/.well-known/mcp`)**: Read-only agent discovery and tool calls against `https://carlosrivera.im/.well-known/mcp` do not require user credentials or personal data.

## 4. Your Rights & Data Deletion Requests

You have the right to request access to, correction of, or deletion of any personal information you have shared with us (such as newsletter subscription records or direct email correspondence). To exercise these rights, email [me@carlosrivera.im](mailto:me@carlosrivera.im) and we will process your request within 15 business days.