Privacy Policy

1. Data Controller

Simone Negro
Email: simonenegro.dev@gmail.com

2. What data we collect

This website uses no cookies, no advertising pixels, and no cross-site tracking. It does use privacy-friendly, cookieless aggregate analytics, and — only if you choose to subscribe — collects your email address for the newsletter. Concretely:

• Functional preferences stored in localStorage on your device only (theme: portfolio-theme; UI language). Never transmitted to a server; clear them via your browser's site data.
• Aggregate analytics via Cloudflare Web Analytics — cookieless, no fingerprinting, no cross-site profile. Only anonymous, aggregated page metrics (see §3).
• Newsletter email — collected only if you submit the subscribe form and confirm via double opt-in. Nothing is collected from readers who don't subscribe (see §4).

3. Infrastructure & sub-processors

This website is hosted on Cloudflare Pages (Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA).

As part of serving web traffic, Cloudflare processes technical data (IP address, browser user-agent, HTTP request metadata) strictly for CDN routing, DDoS protection, and infrastructure security. This processing is based on legitimate interests (Art. 6(1)(f) GDPR) and is governed by Cloudflare's own Privacy Policy. Cloudflare is GDPR compliant and maintains a signed Data Processing Addendum.

Cloudflare Web Analytics provides the aggregate metrics in §2. It is cookieless and collects no personally identifying information — no cross-site tracking, no fingerprinting. Processing rests on legitimate interests (Art. 6(1)(f) GDPR) for understanding traffic at an aggregate level.

The newsletter is operated by Buttondown (Buttondown LLC, USA), acting as a data processor for the email address and subscription status you provide. Buttondown is GDPR-compliant; transfers to the USA are covered by Standard Contractual Clauses. See Buttondown's Privacy Policy. Details in §4.

Domain verification uses Google Search Console (DNS record only). Google Search Console does not place cookies or track visitors on this site.

4. Newsletter

If you subscribe, the email address you enter (and your consent + subscription status) is processed to send you new-post updates. This is optional and plays no part in browsing the site.

• Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the consent box and confirming via double opt-in (a confirmation email you must click).
• Processor: Buttondown LLC (USA), under Standard Contractual Clauses (see §3).
• Retention: until you unsubscribe or ask for deletion.
• Withdrawing consent: every email includes a one-click unsubscribe link; you can also email the address in §1. Unsubscribing stops all future emails.

The subscribe form itself sets no cookies on this site.

5. Your rights (GDPR)

Under GDPR you have the right to access, rectify, erase, restrict, or port any personal data held about you, to object to processing, and to withdraw consent at any time.

For the newsletter, the data held is your email address and subscription status; direct any request to simonenegro.dev@gmail.com or use the unsubscribe link in any email. For Cloudflare-held infrastructure logs, refer to Cloudflare's privacy team.

6. Changes to this policy

If the data practices of this site change materially, this page will be updated and the "Last updated" date revised. No emails are sent about policy changes — that is separate from the newsletter, which only sends new-post updates you opted into.