Español

Privacy Policy

Last updated: 15 October 2026

Privacy at a glance

  • We are Ilzaro LLC. This notice covers ilzaro.com alone; each product we publish, such as Chat2Plan, has its own site and its own privacy policy.
  • The Site has no forms. We do not ask you for your email address, or anything else, anywhere on it.
  • We set no cookies and show no ads. We count visits in aggregate, without identifying you.
  • The Site loads nothing from another origin. It runs a few small scripts of its own. One counts visits in aggregate; the others send nothing.
  • If you pick Light or Dark, your browser stores that choice on your device so the next page uses it. It is never sent to us. If you never pick, nothing is stored.
  • Cloudflare hosts the Site and processes the data every web request carries (your IP address, your browser’s User-Agent header, the page requested and the time) to serve and protect it.
  • If you email us, we receive your address and what you write, and use it only to answer you.

This summary is for convenience; the full policy below controls.

1. Who we are and this policy’s scope

This Privacy Policy explains how Ilzaro LLC (“Ilzaro,” “we,” “us”) handles personal information when you visit ilzaro.com (the “Site”). For this information we act as a controller: we decide how and why it is processed.

This notice covers the Site alone. Each product Ilzaro publishes keeps its own website and its own privacy policy; Chat2Plan’s is at chat2plan.com/privacy, linked from the Site. This notice never covers a product.

2. Information we collect

Request data

Cloudflare hosts the Site. To serve and protect it, Cloudflare processes the data every web request carries, such as your IP address, your browser’s User-Agent header, the page requested and the time.

Counting visits

We count visits in aggregate to see which pages are read: the page, the country and referring site, the kind of device, and how the page was used (time, scrolling, load speed, links followed). None of it identifies you or links one visit to another. Cloudflare keeps the counts for 3 months; Section 5 says how to turn this off.

Error records

If our code fails, it records what went wrong, never your IP or email address, and Cloudflare keeps that for 3 days.

The Site’s scripts

The Site runs a few small scripts, served from the Site itself. One counts visits (above). The others play the logo’s animation, apply the theme you pick (below) and move the pebbles in the river on the home page; they keep nothing and send nothing. None of them sets a cookie.

Your theme choice

If you choose Light or Dark, your browser stores that choice on your device so the next page uses it. It is never sent to us. If you never choose, nothing is stored.

Forms

The Site has no forms. We do not ask you for your email address, or anything else, anywhere on it.

Emails you send us

If you email us, we receive your email address and whatever you write, and use it only to answer you and, for a privacy request, to keep a record of how we handled it. Proton Mail hosts our email.

Where the GDPR or UK GDPR applies, we rely on:

  • Legitimate interests for serving and securing the Site, counting visits in aggregate, keeping error records and answering emails you send us.
  • Legal obligation, or where none applies our legitimate interest in showing how we handled it, for keeping a record of privacy requests.

4. Who receives your information

We do not sell your personal information or share it for cross-context behavioral advertising. We disclose it only:

  • To service providers that process it on our behalf, under contract: Cloudflare (hosting, the visit counts and the error records) and Proton Mail (our email).
  • For legal reasons: to comply with law, respond to lawful requests, or protect rights, safety, and the integrity of the Site.
  • In a business transfer: as part of a merger, acquisition, or sale of assets, subject to this policy.

This list is exhaustive. We do not disclose your personal information to anyone else.

5. Cookies and measurement

We set no cookies and use no advertising or tracking across other websites. The Site loads nothing from another origin, and its only scripts are those in Section 2, “The Site’s scripts.” To count visits, its pages load a small script from the Site itself, only for visitors in the Americas. It does not run if your browser sends Do Not Track or Global Privacy Control, or if you turn it off below; turning it off stores that choice in this browser. Apart from that choice, the only thing the Site stores in your browser is the theme choice in Section 2, and only if you make one.

Measurement is not running in this browser.

6. Data retention

  • Request data is processed by Cloudflare to serve and protect the Site.
  • Visit counts for 3 months; they identify no one.
  • Error records for 3 days.
  • Emails you send us, for as long as we need them to answer you and to keep a record of any privacy request.

7. Security

The Site is served over encrypted connections (TLS). No method of transmission or storage is completely secure. If a breach affecting your personal information occurs, we will notify you and the relevant regulators where and when the law requires.

8. International data transfers

We are based in the United States, and the Site is served from there and wherever Cloudflare serves it. Cloudflare is certified under the EU-U.S. Data Privacy Framework and its UK extension, and its data processing terms with us include the European Commission’s Standard Contractual Clauses. Ilzaro is not itself certified under the Data Privacy Framework.

9. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you and get a copy, correct it, delete it, restrict or object to its processing, and receive it in a portable format.

Write to privacy@ilzaro.com. We will verify your request and respond within the time the law requires (generally 30 to 45 days). We will not discriminate against you for exercising your rights.

EEA and UK visitors may also lodge a complaint with their supervisory authority; a list is maintained by the European Data Protection Board at edpb.europa.eu, and UK visitors can contact the Information Commissioner’s Office at ico.org.uk.

US state privacy rights. If you live in California or another US state with a comprehensive privacy law, you have the rights above, including to know, access, correct and delete. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. In the last 12 months we have collected internet or other electronic network activity information that Cloudflare processes to serve the Site (your IP address, your browser’s User-Agent and the page requested) (Section 2). We disclosed it only to Cloudflare, the service provider named in Section 4.

10. Children’s privacy

The Site is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it. Contact privacy@ilzaro.com if you believe this has happened.

11. Changes to this policy

We may update this policy. We will post the new version here with a new “Last updated” date, and where the law requires, we will ask for your consent first.

12. Contact us

Ilzaro LLC

We have not appointed a Data Protection Officer. Under Article 37 GDPR, one is required only for public authorities, or where core activities involve large-scale regular and systematic monitoring or large-scale processing of special categories or criminal-offence data; none applies to us.

EU and UK representative. We have not appointed a representative in the EU or the UK under Article 27 of the GDPR and the UK GDPR. That duty falls on an organization outside those territories that offers goods or services to people in them, or monitors their behavior there. The Site is run from the United States and is not directed at people in the EU or the UK: it is published in English and in Spanish for the Americas, quotes no prices in euros or pounds, and is not marketed in those territories. It does not monitor visitors’ behavior either: it only counts visits in aggregate (Section 5). If we begin directing the Site at people in the EU or the UK, we will appoint representatives and list them here.