Fosforonero
§ LEGAL — PRIVACY NOTICE

Privacy Policy

Last updated: May 22, 2026

1. Data controller

The data controller is Matteo Pizzi, an independent software developer operating under the studio name Fosforonero, based in Roma, Italy. Contact: hello@fosforonero.com.

2. Personal data we process

We process the following categories of personal data:

  • Browsing data: IP address, user agent, requested page, referrer, timestamp. Automatically recorded by our hosting provider (Vercel) for security and technical diagnostics. Retention: up to 30 days.
  • Aggregate audience data via Google Analytics 4, activated only after your explicit consent. Includes: pages viewed, session duration, device, language, anonymised IP (the last octets are truncated by Google). Retention: 14 months.
  • Email correspondence: if you write to hello@fosforonero.com, we keep the content of your email for as long as necessary to reply and meet documentation obligations (up to 24 months).

3. Purposes of processing

  • To provide and operate the website and its content.
  • To ensure the technical security of our systems (abuse mitigation, fraud prevention).
  • To measure audience in aggregate form to improve the site (analytics).
  • To reply to your requests when you contact us by email.

4. Legal basis

  • Technical logs: GDPR Art. 6(1)(f) — legitimate interest of the controller in security and diagnostics.
  • Analytics: GDPR Art. 6(1)(a) — consent of the data subject, collected via the cookie banner and revocable at any time from “Cookie preferences” in the footer.
  • Email correspondence: GDPR Art. 6(1)(b) — performance of pre-contractual measures at your request.

5. Data recipients

Data may be processed by the following entities, acting as data processors:

6. Non-EU transfers

Some providers (Vercel, Google, Namecheap) are based in the United States. Transfers occur under the European Commission’s Standard Contractual Clauses (decision 2021/914) and, where applicable, under the EU-US Data Privacy Framework certification.

7. Retention period

Data is retained for the time strictly necessary to the purposes for which it is collected, and in any case no longer than the limits stated in section 2.

8. Your rights

Under GDPR Articles 15-22 you have the right to:

  • Access your personal data and obtain a copy (Art. 15).
  • Request rectification if inaccurate (Art. 16).
  • Request erasure (Art. 17).
  • Request restriction of processing (Art. 18).
  • Receive your data in a structured format and port it elsewhere (Art. 20).
  • Object to processing based on legitimate interest (Art. 21).
  • Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, write to hello@fosforonero.com. We will reply within 30 days.

9. Complaint to the supervisory authority

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), if you believe the processing infringes the GDPR.

10. Changes

We may update this notice to reflect regulatory or operational changes. The current version is always available at this URL, with the last-updated date.

This page summarises our data processing practices. It is not legal advice; for specific questions consult a qualified professional.