Privacy.

Your name, email address and message. They reach our inbox through SMTP2GO, the service that delivers our mail, and go nowhere else. We use them to answer you and to carry on the conversation that follows. We keep the thread while that conversation is live, and afterwards only for as long as a contract or a legal obligation requires it; once neither does, it is deleted.

The legal basis is taking steps at your request before a possible contract (GDPR Art. 6(1)(b)), or our legitimate interest in replying to people who write to us (Art. 6(1)(f)). Message bodies are never written to our logs.

We count form submissions per IP address so that a script cannot flood it. The counter is keyed by your address and expires within two minutes; nothing else about the request is kept. The legal basis is our legitimate interest in the security and availability of the site (Art. 6(1)(f)).

There is no analytics or advertising on this site. The contact form loads Cloudflare Turnstile to distinguish genuine submissions from automated abuse; Cloudflare receives the verification request and may process your IP address for that purpose. Apart from that verification, the Content-Security-Policy admits only what the site needs. We set no cookies. Cloudflare, which serves the site, may set a strictly necessary cookie to tell visitors apart from bots.

Three values your browser keeps for this site, read only by this site and never sent to us. Two in its local storage:

• rf:intro-seen — when the intro last played, so it does not replay for 30 days.
• rf:audio-muted — whether you asked for sound to be off.

And one in its session storage, which your browser discards when you close the tab:

• rf:arrival-seen — that the opening has played, so reloading a page does not play it again.

Clearing this site’s data removes them, and the site keeps working without them.

Cloudflare hosts and serves the site, and handles your IP address to deliver and protect it. SMTP2GO delivers the mail the contact form produces. Both act on our instructions, and neither is given anything beyond what is described above.

We are in the European Union. Cloudflare and SMTP2GO may process data outside the European Economic Area; where they do, the transfer rests on the European Commission’s standard contractual clauses.

You can ask for access to your data, for it to be corrected or erased, for its processing to be restricted, for a copy of it, and you can object to that processing. The way to reach us is the contact form; tell us what you are asking for and we will answer at the address you write from.

You may also complain to the Garante per la protezione dei dati personali, the Italian supervisory authority.