Privacy Policy

1Introduction

This policy describes what information the Website may process, why it is processed, and the rights you have over it. It applies to this public preview Website only and does not describe any future production service, which would be covered by its own notice.

2Information collected

Data collection is kept to a minimum. The Website may process:

• Log data: when you visit the Website, the hosting provider's servers may automatically record technical information your browser sends, such as your IP address, browser type, the page you are visiting and the time of the request, for security and operational purposes.
• Contact information: the contact page is a structured form: first name, last name, email address, company, role, request type, a free-text message and an optional file selection. Nothing is sent until you submit it, and it reaches the operator as an ordinary email: the form opens a draft in your own mail client, so your mail provider handles it exactly as it handles any message you write. A selected file is not transmitted; only its name appears in the draft, and you must attach it yourself. No account registration is needed to browse the Website.
• No tracking data: the Website collects no behavioral, profiling or advertising data, and no user profile is built from your visit.

3How the information is used

Where information is processed, the operator uses it to:

• provide, operate and maintain the Website;
• keep the Website secure and detect, prevent or investigate abuse and technical faults;
• respond to enquiries you send through the contact page;
• comply with applicable legal obligations.

4Cookies and third-party services

The Website does not set cookies for analytics, advertising or session tracking, and it does not use tag managers, advertising pixels, fingerprinting or A/B-testing tools. JavaScript, styles and fonts are loaded only from the first-party origin. A restrictive Content Security Policy limits every page to those first-party resources.

The only third party necessarily involved is the hosting provider, Cloudflare, which serves the Website and keeps standard access logs. Mail sent to the Website's address passes through the same provider's email routing before it reaches the operator. The operator sets no cookies; Cloudflare may set a strictly necessary security cookie if it has to challenge a request. The Website links to repositories hosted on GitHub. Following such a link takes you to GitHub, which processes your data under its own policy; the Website itself loads nothing from GitHub. The Website uses no Google AdSense, Google Analytics or similar advertising or analytics service, and your information is not sold or shared with third parties for advertising purposes.

5Legal bases for processing

Where the GDPR applies, the operator relies on a legitimate interest in operating and securing the Website (Article 6(1)(f)); when you write to the operator, on a legitimate interest in answering you or, where your message concerns a possible agreement, on steps taken at your request before entering into one (Article 6(1)(f) and (b)); and on compliance with legal obligations where relevant (Article 6(1)(c)).

6Data retention

The Website does not maintain user accounts or persistent application data, and stores nothing about you itself. Hosting access logs are kept only for as long as necessary for security and operational purposes, in line with the hosting provider's retention policy. Messages you send are kept only as long as needed to handle your request and any follow-up, and are deleted on request unless the law requires the operator to keep them.

7Your data protection rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights, and the operator takes reasonable steps to let you exercise them. You have the following rights:

• The right to access: you may request copies of your personal data.
• The right to rectification: you may request that the operator correct information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure: you may request that the operator erase your personal data, under certain conditions.
• The right to restrict processing: you may request that the operator restrict the processing of your personal data, under certain conditions.
• The right to object to processing: you may object to the operator's processing of your personal data, under certain conditions.
• The right to data portability: you may request that the operator transfer the data collected to another organization, or directly to you, under certain conditions.
• The right to lodge a complaint: you may complain to a data protection supervisory authority, in particular in the EU country where you live, work, or where you believe an infringement occurred. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it). You may do this without contacting the operator first.
• The right to withdraw consent: where the operator asks for your consent for a specific purpose, you may withdraw it at any time. Withdrawal does not affect processing carried out before it.

8International data transfers

The Website is served by Cloudflare, Inc., which is established in the United States, so the technical request data described above, including your IP address, may be processed outside the European Economic Area as an ordinary part of serving each page, under the safeguards set out in Cloudflare's Data Processing Addendum. There is no analytics provider, no advertising network and no third-party font, script or embed on this Website.

9Children's privacy

The Website is a business-to-business informational preview and is not directed at children. The operator does not knowingly collect personal data from children.

10Changes to this policy

This policy is updated if the hosting provider or any processing changes, for example if an incorporated entity takes over the Website. Changes will be reflected on this page and in the "Last updated" date above, and substantive changes will be communicated through the Website rather than through unsolicited email.

11Contact

Questions about this Privacy Policy, or requests to exercise your rights: write to hello@loquitur.dev, or use the contact page.