Privacy

In short

No profiling
cookies

There is no banner because there is nothing to ask: the site’s statistics use no cookies and follow nobody from one site to the next.

The videos are on my own Cloudflare account. Not on YouTube, Google or similar platforms. When a video comes close to the screen a silent preview starts on its own; the video with sound only starts if you start it.

If you write from the form, your details are used to reply to you. They end up on no list, and nobody sells them.

Who processes the data

For any question about this page, or to exercise the rights listed further down, write to the address above.

The contact form

Four fields,
and nothing else

If you fill in the form on Contact, what reaches me is your name, your email address, the type of request and the message you wrote. Nothing else: there is no hidden field collecting anything more.

Why. To read your request and reply to it. The legal basis is article 6.1.b of the GDPR: steps taken at your request before entering into a contract. No marketing consent is needed because there is no marketing.

How long. The message stays in the mailbox for 24 months, then it is deleted. If that conversation turns into a job, the documents that come out of it follow the tax retention terms set by law, which are ten years.

Where it goes. The message travels from the site to the mailbox through two providers, listed below. It ends up in no archive, no spreadsheet and no contact management tool.

What the site relies on

Three parties,
and the fourth that isn’t there

These are the only outside parties involved. Each processes data on my behalf, appointed as a processor under article 28 of the GDPR.

Cloudflare — hosts the site. It delivers the pages and protects them. It records technical access logs, IP address included, for a few days and for security reasons only. The visit statistics I use are its Web Analytics, which uses no cookies and builds no profiles.

Cloudflare Turnstile — stops automated submissions. It is not a CAPTCHA to solve and it does not track your browsing: it only looks at the browser’s signals at the moment you send the form.

Resend — delivers the message. It turns the form into an email and delivers it to my mailbox. It therefore sees the content of the message for as long as it takes to deliver it.

The videos: Cloudflare. The portfolio videos are uploaded to my own Cloudflare Stream account, the same provider that hosts the site, and not to YouTube, Google or similar. When a video comes close to the screen a silent preview starts; the video with sound starts when you press it. In both cases Cloudflare only receives the technical data needed to deliver it, such as your IP address.

Cloudflare, Inc. and Resend, Inc. · standard contractual clauses for transfers outside the Union

Cookies

There are none
to accept

This site installs no profiling or analytics cookies. There is nothing to accept and nothing to refuse: that is why you don’t find the box that pops up nearly everywhere else.

Three technical things remain, for which the law does not require consent because the service would not work without them. None of the three leaves your device:

— the language, if you choose it from the button at the top: it stays saved in your browser and is never sent anywhere;

— the way you view the site, that is, the choice between the version that generates as you scroll and the one that stays still. The scene asks you once and then remembers, otherwise you would have to answer on every page. It is a preference on your device, it says nothing about you, and it is cleared by clearing the site data — or by pressing here, which forgets it immediately and asks you again;

— a technical identifier created by Cloudflare Turnstile at the moment you send the form, which serves to validate that submission and nothing else.

The guides

The guides reachable through a private link are static pages: they have no forms, they do not record who opens them, they ask for nothing. The link arrives by private message on Instagram; that message, and the data Instagram attaches to it, follow Meta’s own privacy policy, over which I have no say.

Your rights

Articles 15 to 22
of the GDPR

Those articles give you the right to request access to the data concerning you, its rectification, its erasure, its restriction of processing, portability, and to object to the processing.

Simply write to the address given above. I reply within a month, as required. If the reply does not satisfy you, you can turn to the Garante per la protezione dei dati personali, the Italian data protection authority (garanteprivacy.it), or to the authority of the country you live in.

Last modified: 27 August 2026