Privacy policy

1. Data controller

The data controller is m4nifest0-tech, based in Italy. For any privacy request you can write to email address protected (enable JavaScript to see it).

2. What data is processed, why and for how long

Browsing data

Like any website, the web server that hosts it (Cloudflare, Inc.) records the requests it receives in a log file: IP address, date and time, requested address, outcome and the browser used. This data is needed to run the site, keep it secure and detect abuse; the site does not process it or use it to profile you or to cross-reference it with other information.

• Legal basis: the controller's legitimate interest in the security and correct operation of the site (Art. 6(1)(f) GDPR).
• Retention: [Hosting log retention period — TO BE COMPLETED], after which the logs are deleted by the hosting provider.

Contact by email

The site has no mail server and no sending feature: the “Open my email app” button on the Contact page builds a mailto: link that opens your email app with the subject and text already written. What you write stays on your device until you send the email from your own account: the site does not receive, record or keep either the message or your address.

When you then write to me, the controller receives in their mailbox your email address, your name (if you give it) and the content of the message.

• Purpose: to read your request and reply to you.
• Legal basis: performance of pre-contractual measures taken at your request and legitimate interest in replying to the communications received (Art. 6(1)(b) and (f) GDPR).
• Retention: 12 months from the last communication, unless required by law.
• Nature of the provision: writing is optional; without a reply address, however, it is not possible to respond.

3. Cookies and similar technologies

This site does not set cookies and does not use tracking tools. Details in the cookie policy.

4. Recipients of the data and transfers

The site is hosted by Cloudflare, Inc., which acts as the controller's service provider and processes the access logs described above. Emails exchanged with the controller are accessible only to the controller. The mailbox is managed through the Microsoft 365 service, which acts as the controller's service provider. Data is neither sold nor disclosed.

The site does not load resources from third-party services: fonts, icons, scripts and images are served by the site itself. Links to other sites, where present, lead to pages that have their own privacy notice.

The site does not directly transfer data outside the European Economic Area. If the email provider named above is based or has infrastructure outside the EEA, the transfer takes place with the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).

5. Your rights

You can exercise at any time the rights provided by Articles 15–22 GDPR:

• access to your data and a copy of it;
• rectification of inaccurate data and completion of incomplete data;
• erasure (“right to be forgotten”);
• restriction of processing;
• portability of the data you provided;
• objection to processing based on legitimate interest;
• withdrawal of consent, where processing is based on it.

To exercise them, write to email address protected (enable JavaScript to see it). If you believe the processing violates the law, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it (opens in a new tab)), or with the authority of your own country.

6. Security

Communication with the site takes place over an encrypted connection (HTTPS). The site has no restricted areas, requires no registration and does not keep user data in its own archives.

7. Changes

This notice may be updated, for example if the tools used by the site (m4nifest0-tech) change. The date of the last revision is shown at the bottom of the page.