Privacy Policy
Who we are
CGBOT (“CGBOT”, “we”, “us”) is a creative development studio with offices in Austin, Texas (United States) and Monterrey, Nuevo León (Mexico). This policy explains what happens with your information when you visit this website. For anything related to your privacy, you can reach us at info@cgbot.com.mx.
The short version
- This site has no accounts and no advertising trackers.
- Google Analytics runs only if you say yes in the cookie banner: nothing analytics-related loads — and no cookie is set — before you agree, and saying no is one click. You can change your mind any time via “Cookie settings” in the footer.
- We also use Cloudflare Web Analytics, a cookieless page counter that identifies nobody — that one needs no consent.
- There is one contact form. It works as an email helper: it opens a pre-filled message in your own mail application, and this website itself sends and stores nothing you type.
- The home page can play a muted YouTube reel — automatically on desktop browsers, only after you press play on phones and tablets (details below). The site is hosted by Cloudflare.
Data we collect directly: the contact form
The only place this website asks you for personal data is the contact form (“Start a project”). It asks for:
- Name and email address (required) — so we know who to answer and where.
- Company (optional) and the type of service you are interested in — so the right team reads your message.
- Your message (required).
Purpose: we use this information solely to respond to your inquiry and to conduct any business relationship that follows. We do not sell it, share it for marketing, or add you to mailing lists without your consent.
Retention: we keep the inquiries we receive and the email conversations that follow only as long as needed to handle your inquiry and any resulting business relationship, or as required by law.
How it travels: when you press send, the form opens a pre-filled email draft in your own mail application, addressed to our team inbox (info@cgbot.com.mx). This website does not transmit or store what you type: nothing you enter in the form leaves your device until you send that email yourself, and we receive only what your mail application sends.
You can also skip the form entirely and email us directly at info@cgbot.com.mx.
Hosting and server logs
This site is served through Cloudflare Pages. Like any web host, Cloudflare receives your IP address, browser information (user agent) and the pages you request in order to deliver the site and protect it against abuse. Cloudflare may keep short-term technical logs for security and performance purposes. See the Cloudflare Privacy Policy.
Analytics
Google Analytics 4 (Google LLC) helps us understand which of our work resonates: which portfolio categories people open, which images they look at, and whether the site leads to conversations. It runs only after you accept it in the consent banner — before that, the Google script is not even loaded and no analytics cookie exists (we use Google’s Consent Mode v2 with everything denied by default, and advertising features stay off entirely).
If you accept, Google Analytics sets the cookies _ga and _ga_* (they last up to two years) to tell returning browsers apart, and receives data such as the pages you view, the interactions above, your approximate region, and technical details of your browser and device. Google Analytics 4 does not log or store full IP addresses. We do not send it anything you type into the contact form. Google processes this data on our behalf and may do so on servers in the United States; those transfers rely on recognized mechanisms such as the EU–U.S. Data Privacy Framework and standard contractual clauses. See the Google Privacy Policy and How Google uses information from sites that use its services.
Withdrawing consent: open “Cookie settings” in the footer and choose “No thanks”. Collection stops immediately and we remove the Google Analytics cookies this site set. You can also clear them in your browser at any time.
Cloudflare Web Analytics (Cloudflare, Inc.) gives us baseline traffic numbers — page views and load performance — without cookies, without local storage and without identifying or fingerprinting visitors; metrics are aggregated and never used to follow you across sites. Because it stores nothing on your device and identifies nobody, it does not require consent. See Cloudflare Web Analytics.
Embedded YouTube video
The video reel on our home page is served by YouTube (Google) using YouTube’s privacy-enhanced mode (youtube-nocookie.com), which is designed to delay advertising cookies. On desktop and laptop browsers the reel starts automatically, always muted, when the page loads. On touch devices such as phones and tablets, if your system requests reduced motion, if your connection uses data-saver mode or is very slow, or if your browser blocks autoplay, the player does not load — and nothing is sent to YouTube — until you press the “Watch our reel” button. When the player loads, Google receives technical data such as your IP address and device information, and the player may use local storage in your browser; the player script itself is loaded from youtube.com. You can stop the reel at any time with the same button (while the reel is playing, the button appears when you move the pointer over the video or focus it with the keyboard). This is the only YouTube embed on the site.
See the Google Privacy Policy for details on how Google processes this data.
Fonts, scripts and other assets
All fonts, stylesheets, scripts and images on this site are hosted on our own domain. No font providers or JavaScript CDNs receive data about your visit. The only external scripts are the ones described above: YouTube’s player (loaded for the home-page reel), Google Analytics (loaded only after you consent) and Cloudflare’s cookieless analytics beacon.
Cookies and local storage
We set no cookies until you accept analytics. There is no advertising or preference cookie on this website. If — and only if — you accept analytics in the consent banner, Google Analytics sets the _ga and _ga_* cookies described in the Analytics section; rejecting or withdrawing consent keeps the site fully functional.
This site also uses your browser’s local storage for two small, functional flags that contain no personal data and never leave your browser: your analytics consent choice (so we do not ask again on every page) and, when we announce an event on the home page, a flag so the announcement is shown to you only once. You can remove both by clearing your browser’s site data. Beyond that, the only storage that may appear in your browser comes from the YouTube player (when the home-page reel loads), as described above.
Your rights under the GDPR (European Union / EEA)
If you are in the European Union or the European Economic Area, the General Data Protection Regulation gives you the following rights over personal data we hold about you (in practice: contact-form submissions and email correspondence you send us):
- Access — ask for a copy of the data we hold about you.
- Rectification — have inaccurate data corrected.
- Erasure — have your data deleted (“right to be forgotten”).
- Restriction — limit how we process your data.
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interest.
- Complaint — lodge a complaint with your local supervisory authority.
Where we process data, we rely on legitimate interest (responding to your inquiries, keeping the site secure) or consent. To exercise any of these rights, email us at info@cgbot.com.mx.
Your rights under Mexican law (LFPDPPP)
CGBOT operates in Mexico and complies with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP). As a data subject you have the ARCO rights:
- Acceso (Access) — know what personal data we hold and how we use it.
- Rectificación (Rectification) — request correction of inaccurate or incomplete data.
- Cancelación (Cancellation) — request deletion of your data when it is no longer needed for the purposes it was collected for.
- Oposición (Objection) — oppose the processing of your data for specific purposes.
To exercise your ARCO rights, send a request to info@cgbot.com.mx including your name, a copy of an official ID (or proof of legal representation), a clear description of the data and the right you wish to exercise, and any documents that support your request. We will respond within the timeframes established by the LFPDPPP. If you believe your rights have been violated, you may file a complaint with the Mexican data protection authority (INAI).
International data transfers
We operate from the United States and Mexico, and our service providers (Cloudflare, Google — YouTube and, with your consent, Google Analytics) may process data in other countries, including the United States. Where required, these providers rely on recognized transfer mechanisms such as the EU–U.S. Data Privacy Framework and standard contractual clauses.
Data retention
Email correspondence, including inquiries started from the contact form, is kept only as long as needed to handle your inquiry and any resulting business relationship, or as required by law. We do not maintain marketing databases of website visitors.
Children
This website is intended for a professional audience and is not directed at children. We do not knowingly collect personal data from children.
Changes to this policy
If we change how this site handles data — for example, by sending form submissions through our own servers instead of your mail application, or by adding analytics — we will update this policy and the “Last updated” date above before those changes go live.
Contact
CGBOT
Austin, TX, United States · Monterrey, N.L., Mexico
info@cgbot.com.mx