Privacy notice
Last updated: 18 August 2026
The short version
This site sets no cookies, runs no JavaScript and loads nothing from other servers. There are no forms, no analytics and no social buttons. The only thing recorded is what any web server writes down when you ask it for a page.
Kapix apps are a different matter, and each one has its own notice. We tell you where at the bottom of this page.
Who is responsible for your data
Kapix is the trading name under which Adrián Morales, an individual, operates in Mexico.
Address for service of notices: Av. Eugenio Garza Sada 3820, piso 8, col. Mas Palomas (Valle de Santiago), C.P. 64780, Monterrey, Nuevo León, Mexico.
For anything to do with this notice — including exercising your rights — write to hola@kapix.app: a person reads that inbox and it is the fastest route.
Exactly what data is processed
When you request a page, the server writes one line to its access log. That line contains:
- The IP address the request came from.
- The date and time.
- The request method (
GETin virtually every case). - The full address you asked for — including anything after a
?. This site does not use that part for anything, but if someone hands you a link carrying it, it is logged as-is. Which is why personal data does not belong in a URL, here or anywhere. - The response code — 200 if the page exists, 404 if it does not, and so on.
- The bytes sent.
- The browser and system your device declares, known as the
user-agent. - The page you came from, if you came from one, known as the
referer.
That is everything recorded by visiting the site.
Writing to us is a different matter. hola@kapix.app is not a mailbox on our machine: the
message is routed by Cloudflare Email Routing and lands in a Gmail account. When you write
to us we process your address, the subject line and whatever you choose to tell us — including the
IP address and date we ask for below to handle a rights request — for one purpose only: to answer
you and to be able to show how we did it, which the law requires of us when what you are asking for
is to exercise your rights. Those two providers see the message in transit, because that is how
email works, and they operate under their own terms, which we do not control. So: send us only what
is needed, and nothing more.
None of this data is sensitive within the meaning of article 2, section VI of the Mexican data protection act: it does not reveal your health, ethnic origin, beliefs, political opinions or sexual preference. We say so explicitly because the law requires identifying which data are sensitive, and saying nothing reads the same as never having checked.
What it is used for
Two things, and nothing else:
- Keeping the site working, so we can tell when something is broken.
- Protecting it from abuse, such as an attack or a bot hammering it.
It is not used to profile you, to advertise, or to make any automated decision about you. It is not sold, rented or shared. None of these purposes requires your express consent, because none goes beyond serving the page you asked for and keeping it standing.
How long it is kept
The log rotates by size, not by date: when the file reaches its limit, the oldest is deleted to make room for the new. We do not quote a number of days because it would be invented: how long one line survives depends on how many people visit, not on the calendar.
Who it is given to
Nobody, with one exception: if a competent authority requires it of us through legal channels, we have to hand it over. The law permits this without asking your consent, and refusing is not within our power.
Beyond that there are no transfers. We do not sell these logs, we do not share them and we do not give them to anyone.
The server is ours, but the machine is rented from a hosting provider (Hostinger), which operates it on our behalf. Under Mexican law that makes them a processor, not a third party receiving your data: they cannot use it for their own purposes. The same goes for email: Cloudflare and Google move it and store it because that is how email works, not because we handed your data to them.
Limiting the use of your data
You can write to hola@kapix.app and ask us to stop processing the data associated with your IP address. You can also browse through a VPN or the Tor Browser, in which case the address recorded is not yours.
Mexican law treats this log as processed with your tacit consent: by making this notice available to you and you not objecting, the processing is covered. If you want to withdraw that, write to us and we will act on it. Same channel, same deadline and same procedure as an objection, and we answer you the same way.
Your rights
Mexican law calls these ARCO rights, after the four Spanish words below. Those are the words to use when you write to us, and the ones a Mexican authority will recognise.
You can ask us, at any time and free of charge, to:
- Access (acceso) — tell you what data of yours we hold.
- Rectify (rectificación) — correct anything inaccurate.
- Cancel (cancelación) — delete it.
- Object (oposición) — stop processing it.
Write to hola@kapix.app with your request and something that lets us find your records: roughly when you visited and the IP address you visited from. Without that we cannot tell your log lines from anyone else’s, and asking you for them is the only way we can help.
We will send you our decision within twenty working days, and where the request succeeds we will act on it within the following fifteen working days. The law lets us extend each period once, and we would explain why if we needed to.
If we do not reply, or the reply does not satisfy you, you can go to the Secretaría Anticorrupción y Buen Gobierno, Mexico’s data protection authority since 2025. The window is short and runs from when you receive our answer or, if you receive none, from when our own deadline expires; check the current procedure with the Secretaría itself before it lapses.
If you visit from outside Mexico
European Union and United Kingdom. The lawful basis for the access log is our legitimate interest in operating and securing the service. There is no profiling, no automated decision-making and no advertising on this site. You can object using the same email address.
California. We do not sell or share personal information, as those terms are defined by the CCPA and CPRA. There is nothing to opt out of, because there is no sale.
Apps are different
This notice covers this website. Every Kapix app has its own notice on that app’s page, because
apps can collect data and can carry advertising. You will find them under kapix.app/en/apps/,
inside each app, in its privacy section. There is no generic notice covering all of them: each one
describes what that app actually does.
Changes to this notice
If this changes, we change this page and update the date shown above. We keep no mailing list and we do not announce changes by email, not even to people who have written to us. The version in force is always the one you are reading.