Privacy
This site is a press kit. It has no accounts, no forms and no newsletter, so it collects nothing you type — there is nothing here to type into. What follows is the complete list of what is recorded when you visit, who records it, and what you can do about it.
Who is responsible
ARCURI is the artist name of Julián Arcuri, a DJ and producer based in Mendoza, Argentina, who publishes this site as an individual and is responsible for the personal data described here. Questions about this policy, and any request under section 07, go to the booking address at the foot of this page.
What this site does not do
- There is no contact form, no sign-up, no login and no comment field. The site’s own security policy blocks form submissions outright, so there is no way to send data into it.
- There is no advertising, no ad network and no retargeting.
- You are not profiled, and no automated decision is made about you.
- No personal data is sold, rented, or shared with anyone for their own purposes.
- The site sets no cookies of its own — see the cookie policy for the one thing it does store.
What is recorded when you visit
- Cloudflare, which hosts and serves this site, records the IP address the request came from, the browser and device string it announced, the page asked for, the time, and the response given. This is how any web server works, and it is what makes it possible to serve the page, to keep it fast, and to notice abuse. Cloudflare keeps these under its own retention schedule.
- There is no analytics on this site. No analytics script, no tag manager, no pixel, and no performance beacon — not even an anonymous one. Whatever Cloudflare aggregates about traffic at the network level it does on its own account, and it is not wired to anything here.
- The site’s content security policy allows outbound connections to its own origin only, and permits exactly one piece of third-party content anywhere on the page: Spotify’s player, described in section 04. That policy is served with every response, and it is checked in the build.
Spotify, and only if you ask for it
The discography section can play a release through Spotify’s embedded player. The player loads when you open a release, and not before: until you do, no request reaches Spotify and nothing about you is sent there. Once it loads, Spotify receives your IP address and the address of the page, sets its own cookies, and acts on its own account under its own privacy policy — this site has no access to any of it. Closing the release removes the player.
One thing happens earlier, and it is worth stating plainly. When the discography section comes within one screen of the viewport, the browser is asked to open a network connection to Spotify in advance so that playback starts without a wait. That connection carries no request, no cookie and no content: Spotify’s network sees that a connection was opened from your IP address, and nothing more. If you never open a release, nothing else follows and nothing is stored on your device.
If you write to the booking address
The booking address is a Gmail account, so an email sent there is received and stored by Google. Whatever you put in the message is used to answer it and kept for as long as the correspondence is useful. Google processes it under its own terms.
Where the data goes
The site is hosted on Cloudflare Pages and served from Cloudflare’s global network, so a request is normally handled by whichever data centre is closest to you — which may be outside Argentina, including in the United States and in the European Union. Google and Spotify likewise operate internationally. Where personal data of visitors in the European Economic Area is involved, those providers rely on their own transfer mechanisms, including the European Commission’s standard contractual clauses.
Your rights
Under Argentina’s Ley 25.326 you may ask what personal data is held about you, and ask for it to be corrected, updated or deleted. Access is free at intervals of no less than six months. The Agencia de Acceso a la Información Pública is the supervisory authority and receives complaints about how personal data is handled.
If you are in the European Union or the United Kingdom you may also ask for access, rectification, erasure, restriction and portability, object to processing based on legitimate interest, and lodge a complaint with the supervisory authority where you live.
One practical note, because it changes what a request can achieve. This site holds no account, no profile and no identifier of its own, so there is nothing here to look up under your name. What exists lives with the providers named above, in records keyed to an IP address and a moment in time. Write to the booking address with enough detail to find them and the request will be passed on.
Legal basis
For visitors covered by the GDPR: serving the site and keeping it available and secure rests on legitimate interest, and so does measuring how fast it renders, which is done without identifying anyone. Loading Spotify’s player rests on your consent, which is what opening a release expresses; you can withdraw it by closing the player and not opening another. Answering an email you send rests on the steps taken at your request.
Children
The site is not directed at children under 16 and no personal data is knowingly collected from them.
Changes
This policy carries the date it was last changed, at the top of the page. If what the site does changes, the policy changes with it and that date moves — it is written from the code, not from a template, so it cannot quietly drift out of date.