Privacy

Data controller

The data controller is Tommaso Novelli, who runs this site in a personal capacity. For any question about this policy, or to exercise your rights, write to tommasonovelli.me@gmail.com.

If you write to me, I use your email address and the content of your message only to reply. Mail is handled through Gmail (Google), and I keep messages only for as long as needed to deal with your request.

What is processed

The site is made of static pages and is delivered through the network of Cloudflare, Inc. Whenever you open a page, Cloudflare necessarily processes some technical data about the request: IP address, date and time, the page requested, browser type and operating system. This data is used to deliver the site to you, to protect it from abuse and attacks, and to produce aggregate traffic statistics (for example the number of requests per country). Without it the site could not be shown to you.

I do not run any database, account system or logs of my own, and I do not collect or keep any other data about visitors. Fonts, stylesheets and scripts are all served from this same domain, so your browser does not contact any third-party service.

Purpose and legal basis

The legal basis is my legitimate interest (Art. 6(1)(f) GDPR) in making the site available in a secure and reliable way. There is no profiling and no automated decision-making.

Who receives the data

Cloudflare acts as a data processor on my behalf, under its Data Processing Addendum. The data is not sold and is not shared with anyone else.

Cloudflare is based in the United States and operates a global network, so the data may also be processed outside the European Economic Area. These transfers are covered by the EU-U.S. Data Privacy Framework, under which Cloudflare is certified, and by the European Commission's Standard Contractual Clauses included in that addendum. See Cloudflare's privacy policy for details.

How long it is kept

I do not keep any data about visits myself. Cloudflare keeps the technical data only for the limited time needed for the purposes above, according to the criteria set out in its privacy policy. Traffic statistics are aggregated and do not identify individual visitors.

Cookies and local storage

This site sets no cookies and uses no advertising, profiling or tracking tools, which is why no consent banner is shown. The only possible exception is a technical security cookie that Cloudflare may set in special cases (for example during an anti-bot check): it is strictly necessary and requires no consent.

To show you the right language, the site reads your browser's language setting; this happens only on your device. If you pick a language with the EN/IT switch, your choice is saved in your browser's local storage (localStorage, key lang). It stays on your device, is never sent to any server, and you can delete it at any time from your browser settings.

External links

The site links to external services such as GitHub and Reddit. They are contacted only if you click a link; from then on, their own privacy policies apply.

Your rights

The GDPR gives you the right to ask for access to your data, its rectification or erasure, the restriction of processing, and to object to processing (Arts. 15–22). To exercise these rights you can write to the address above. Please note, however, that I keep no data about visits and cannot link the technical data processed by Cloudflare to a person (Art. 11 GDPR), so the answer will normally be that I hold no data concerning you.

You also have the right to lodge a complaint with a supervisory authority: in Italy, the Garante per la protezione dei dati personali, or the authority of the country where you live or work.

Changes

If the way this site works changes, I will update this page and the date above.