# Privacy — Bautista Filippini

> Updated 12 October 2026. Very little happens here: no account, no form, and the only thing I measure is visits.

Canonical URL: <https://bautistafilippini.com.ar/privacy>

bautistafilippini.com.ar is a set of static files. It has no database, no backend and no login. It
never asks you for your name, your email or anything else, so there is nothing for me to store, sell
or lose. I do not set cookies, and there is no advertising or remarketing pixel on any page.

## What I measure

The site uses PostHog to count visits. For each visit it records the page you opened, the site that
sent you, your country (worked out from your IP address), your browser and device, and whether you
clicked to write to me or to open one of my projects. It runs without cookies and keeps nothing in
your browser, so a second visit counts as a new visitor and I cannot follow you from one day to the
next. I use these numbers to see what brings people here. I do not sell them or join them to
anything else. The requests go through this site's own address and are passed on to PostHog, whose
privacy policy is at <https://posthog.com/privacy>. A content blocker will stop them, and the site
works the same.

## What the host records

The site is served by Vercel. Like any web server, Vercel logs the requests that reach it: the IP
address, the browser's user agent, the path requested and the time. Those logs exist to deliver the
page and to stop abuse, they are held by Vercel under its own policy, and I do not export them, join
them to anything else or use them to build a profile of you. Vercel's privacy policy is at
<https://vercel.com/legal/privacy-policy>.

## What Google sees

The pages load the Geist typeface from Google Fonts. Your browser fetches those font files from
`fonts.googleapis.com` and `fonts.gstatic.com`, which means Google receives your IP address and user
agent as part of that request. Apart from the visit count above, that is the only third-party
request the site makes. If you would
rather avoid it, a content blocker will stop it and the page will fall back to a system typeface.

## The MCP endpoint

There is a read-only MCP server at `/mcp` for AI agents. It has no authentication, it only returns
information that is already published on this site, and it writes nothing. Requests to it are logged
by the host exactly like a request for any other page. It does not store the questions asked of it.

## Bauti Salud, my health app

Bauti Salud is a personal tool, and I am its only user. It reads my own Fitbit and Apple Watch data
through the Google Health API, with read-only access: sleep, heart rate, activity and body
measurements. The data goes into a database on my own computer, and every morning the tool sends me
a summary on Telegram. To write that summary, the day's numbers go to Claude, Anthropic's model,
under my own account. Nothing else leaves my computer. The data is not sold, not shared and not used
for advertising. Its use of data received from Google APIs follows the
[Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy),
including the Limited Use requirements. Access can be revoked at any time at
<https://myaccount.google.com/permissions>.

## Links that leave the site

Buttons and links point to WhatsApp, LinkedIn, Instagram, prophet.lat and a handful of project URLs.
Once you follow one, that service's own privacy policy applies. If you message me on WhatsApp or by
email, I keep the conversation the way anyone keeps a work conversation, and I use it only to answer
you.

## Questions, or take my data out

Write to <bautyfilippini@gmail.com> and I will answer. If you have written to me before and want that
thread deleted, say so and I will delete it. If this policy changes, the date at the top of the page
changes with it, and the previous version stays in the site's git history.
