Privacy Policy

1. Data Controller

The Data Controller is Luca Sartorio, who can be reached at luca.sartorio19@gmail.com for any request concerning the processing of personal data and the exercise of the rights granted by the GDPR.

2. Types of data processed

This website is an informational and demonstrative project, with no user registration and no data collection forms. The following data may nonetheless be processed:

• Browsing data: the computer systems and software procedures used to operate the site acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet protocols (e.g. IP addresses, browser type, operating system, date and time of the request). Such data is processed by the hosting provider for technical and security purposes.
• Data collected through analytics tools: only with your consent, aggregated and anonymous statistics on page usage (Vercel Analytics and Speed Insights).
• Preferences stored locally: the selected language and cookie choices, stored in the browser via localStorage; they are not transmitted to the Controller or to third parties.
• Data provided through the report form ("Report a bug / suggest an improvement"): name (optional), email address (optional) and the content of the report, provided voluntarily by the user.

3. Purposes and legal basis of processing

• Delivery and operation of the site, security and technical diagnostics: legal basis in the legitimate interest of the Controller (Art. 6(1)(f) GDPR).
• Aggregated statistical analysis to improve content and performance: legal basis in the consent of the data subject (Art. 6(1)(a) GDPR), which can be withdrawn at any time.
• Storing preferences (language, cookie consent): necessary to deliver the service requested by the user.
• Handling bug reports and suggestions sent through the dedicated form: legal basis in consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time.

4. Third-party tools and services

The site is hosted on Vercel Inc. and uses Vercel Web Analytics and Speed Insights to measure, in aggregated and anonymous form, the usage and performance of the pages. These tools are enabled only with the user’s consent. For more details please refer to Vercel’s privacy policy (vercel.com/legal/privacy-policy).

Fonts are hosted directly on the site (self-hosted): no request is made to third-party font CDNs (e.g. Google Fonts) and, consequently, no user IP address is transmitted to such services to load the fonts.

Reports sent through the "Report a bug / suggest an improvement" form are delivered to the Controller via the Web3Forms service, which acts as a provider for delivering the message by email. The data entered is processed solely to handle the report. Please refer to the provider’s privacy policy (web3forms.com/privacy).

5. Transfer of data outside the EU

Some providers (e.g. Vercel and Web3Forms) may process data in countries outside the European Economic Area. In such cases the transfer takes place in compliance with the appropriate safeguards provided for in Art. 44 et seq. of the GDPR, such as the Standard Contractual Clauses approved by the European Commission.

6. Retention period

Browsing data and statistics are kept for the time strictly necessary for the purposes for which they are collected, in accordance with the providers’ policies. Preferences stored in the browser remain until they are deleted by the user or until they expire.

7. Rights of the data subject

As a data subject, you may exercise at any time the rights set out in Art. 15-22 of the GDPR by writing to luca.sartorio19@gmail.com:

• access to your personal data;
• rectification of inaccurate data or completion of incomplete data;
• erasure of data (“right to be forgotten”);
• restriction of processing;
• data portability;
• objection to processing;
• withdrawal of consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.

8. Complaint to the supervisory authority

You have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if you believe that the processing of your data infringes the applicable legislation.

9. Minors

The site is not directed at children under the age of 14 and does not knowingly collect minors’ personal data. Under Art. 8 GDPR and Art. 2-quinquies of the Italian Privacy Code, in Italy a minor who has reached the age of 14 may validly give consent in relation to information society services. If a parent or guardian believes that a minor has provided personal data, they may contact the Controller to have it deleted.

10. Profiling and automated decision-making

The Controller does not carry out any profiling or automated decision-making within the meaning of Art. 22 GDPR. Any data collected is not sold, transferred or commercialised to third parties for marketing purposes.

11. Cookies

For detailed information on the cookies and tracking tools used, please refer to the Cookie Policy, available in the site footer.

12. Changes to this policy

The Controller reserves the right to update this policy to reflect regulatory changes or changes to the services offered. Any changes will be published on this page together with the date of the last update.