At Proyecto 26, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website and use our open source projects. We encourage you to read this policy carefully to understand our practices regarding your personal data.
Summary
TL;DR: We collect minimal data. We don't sell it. We use analytics (only with your consent) to improve the site. You can request deletion anytime by contacting us at help@proyecto26.com.
1. Information We Collect
We may collect information that you voluntarily provide when interacting with our projects, such as your name, email address, and GitHub username when you submit issues, pull requests, or contribute to discussions. We also automatically collect certain technical information when you visit our website, including your IP address, browser type, operating system, referring URLs, and pages viewed. We do not collect sensitive personal information such as financial data, health records, or government-issued identification numbers.
2. Lawful Basis for Processing
We process your personal data on the following lawful bases: (a) Consent — when you accept analytics cookies or voluntarily provide your information, you consent to its processing for the stated purposes; you may withdraw consent at any time via the cookie settings in our website footer or by contacting us. (b) Legitimate interests — we process certain data to maintain and improve our open source projects, prevent fraud, and ensure the security of our services, where our interests do not override your fundamental rights. (c) Contract performance — when you contribute to our projects or engage with us in a professional capacity, processing may be necessary to fulfill our obligations. (d) Legal obligation — we may process data when required to comply with applicable laws, including Colombian data protection law (Law 1581 of 2012) and other regulatory requirements.
3. How We Use Information
The information we collect is used to improve and maintain our open source projects, respond to your inquiries and support requests, send project-related updates and announcements, analyze website usage patterns to improve user experience, and comply with legal obligations. We do not sell, trade, or otherwise transfer your personal information to third parties for marketing purposes. Any data shared with service providers is strictly for the purpose of operating our website and projects.
4. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small data files stored on your device that help us understand how you interact with our website. We use the following specific cookies: (a) p26_consent — a first-party cookie that stores your cookie consent preference, with a maximum age of 1 year. (b) _ga — a Google Analytics cookie used to distinguish unique users, which expires after 2 years. (c) _ga_<container_id> (e.g., _ga_G4ND3N4W941) — a Google Analytics 4 cookie used to persist session state, which expires after 2 years. (d) _gid — a Google Analytics cookie used to distinguish users, which expires after 24 hours. Analytics cookies are only set after you provide explicit consent via our cookie banner. You may revoke your consent at any time using the 'Cookie Settings' link in the website footer, or by disabling cookies in your browser settings.
5. Third-Party Services
Our projects and website may integrate with or link to third-party services, each with its own privacy policy governing data collection and use. These include: GitHub (github.com) for code hosting and collaboration; npm and other package registries for distribution; Google Analytics (analytics.google.com) for website usage data, which processes data on Google's servers in the United States; Google Fonts (fonts.google.com), which may transmit your IP address to Google's servers when fonts are loaded; unpkg CDN (unpkg.com), used to deliver JavaScript libraries, which may log access requests including your IP address; Open Collective API (opencollective.com), used to display sponsor information, which processes data per its own privacy policy; Discord (discord.com) for our community chat server and sponsor support channels; Calendly (calendly.com) for scheduling sponsor strategy calls and consulting sessions; content delivery networks for performance optimization; and social media platforms (YouTube, Facebook, LinkedIn, X). When you interact with our GitHub repositories (starring, forking, opening issues), GitHub's privacy policy applies to that data. We encourage you to review the privacy policies of any third-party services you interact with through our projects.
6. Discord Community & Bot
We operate a Discord community server ("Proyecto 26") for sponsor support, community discussion, and feature requests. Our Discord bot ("Proyecto 26 Bot") is used solely to manage community channels, deliver announcements, and facilitate sponsor support — it does not collect, store, or process personal data beyond what Discord itself provides. When you join our Discord server, Discord's own Privacy Policy (discord.com/privacy) governs the collection and processing of your data by Discord. We may access your Discord username, avatar, and server activity (such as messages in public channels) to provide community support and moderate the server. Private sponsor support channels are visible only to verified sponsors and server administrators. We do not sell, share, or use your Discord data for advertising purposes. You may leave the Discord server at any time to stop any data processing related to your participation.
7. Data Security
We implement reasonable security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. Our open source repositories are publicly accessible by design, so please be mindful of the information you share in issues, pull requests, and discussions.
8. International Data Transfers
Proyecto 26 is based in Colombia and our website serves a global audience. Your personal data may be transferred to and processed in countries other than your country of residence, including countries that may not provide the same level of data protection. By using our website and services, you consent to the transfer of your data to Colombia and other jurisdictions where our service providers operate. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.
9. Children's Privacy
Our website features interactive games and content that may appeal to children, including browser-based games such as NinjaDev and other playable experiences. While these games are designed for a general audience, we recognize that they may attract younger users. We do not knowingly collect personal information from children under the age of 13 (or the applicable age of digital consent in your jurisdiction, such as 16 in certain EU/EEA countries). Our games do not require registration, account creation, or the submission of personal data to play, and no analytics cookies are set unless a user (or their parent/guardian) provides consent via the cookie banner. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at contact@proyecto26.com so we can take appropriate action to delete such data.
10. Your Rights
Depending on your jurisdiction, you may have certain rights regarding your personal data. Under Colombian law (Law 1581 of 2012 — Habeas Data), you have the right to know, update, rectify, and delete your personal data. You may file a complaint with the Superintendencia de Industria y Comercio (SIC) at www.sic.gov.co if you believe your data protection rights have been violated; before filing with the SIC, you must first contact us directly. We will respond to data rights requests within 10 business days; if additional time is needed, we will notify you within the initial period and resolve the request within 15 business days. For EU/EEA users, the GDPR provides rights including access, rectification, erasure, restriction of processing, data portability, and objection; you also have the right to lodge a complaint with your local supervisory authority. For California residents, the CCPA provides rights to know, delete, and opt out of the sale of personal information. To exercise any of these rights, please contact us at legal@proyecto26.com or through our GitHub organization.
11. CCPA Rights (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information. Categories of personal information we may collect include: identifiers (such as name, email address, IP address, and GitHub username); internet or other electronic network activity information (such as browsing history on our website, pages viewed, and interactions with our content); and geolocation data (inferred from IP address at the country/region level). We do not sell your personal information to third parties, and we have not sold personal information in the preceding 12 months. You may opt out of analytics data collection at any time using the 'Cookie Settings' link in our website footer. To submit a CCPA request, please contact us at support@proyecto26.com. We will verify your identity before processing any request and respond within 45 days.
12. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will take the following steps: For users protected by the GDPR, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by Article 33 of the GDPR. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected individuals without undue delay. For Colombian data subjects, we will report security incidents to the Superintendencia de Industria y Comercio (SIC) in accordance with Colombian data protection regulations. In all cases, we will document the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures taken or proposed to address the breach and mitigate its effects.
13. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Data collected through GitHub interactions is retained according to GitHub's data retention policies. Website analytics data is retained in aggregated, anonymized form. When personal data is no longer needed, we securely delete or anonymize it.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the 'Last updated' date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
15. Contact Us
If you have any questions about this Privacy Policy or our data practices, you can reach us at: Email: contact@proyecto26.com; GitHub: github.com/proyecto26 (you may also open an issue on the relevant project repository). Responsable del Tratamiento (Data Controller): Juan David Nicholls, Proyecto 26, Colombia. We are committed to resolving any concerns you may have about your privacy and our data handling practices. For Colombian residents, if your concern is not resolved satisfactorily, you may file a complaint with the Superintendencia de Industria y Comercio (SIC) at www.sic.gov.co.
