Privacy — Antonio Distefano

Who processes the data

The data controller is Antonio Distefano. For anything concerning privacy, write to antonio@homelabz.cc.

What this site contains

This site uses no cookies, no forms and no embedded third-party content. Fonts and images are served by the site itself, not by outside services.

Reading statistics. This site counts visits with an analytics tool running on a server I manage myself, in Italy. It sets no cookies and stores no identifier on your device: visits are counted through a daily fingerprint computed on the server, which cannot be traced back to you or used to recognise you later. Nothing is shared or sold to third parties, and there is no profiling. Unless you opt out, the only thing stored on your device is the date of your last visit (key hz_ultima_visita), with no code that tells you apart from anyone else: it tells me how many visits are returns. Statistics are kept for 25 months.

On every page your browser sends: the page address, without its parameters; where you came from, meaning the address of the previous page (also without its parameters) and its domain, with any campaign (the utm_ parameters) and whether the page is the first of the visit; whether the visit is a return and how long since the last one; your browser language; the string your browser identifies itself with (user agent) and, derived from it, your browser, operating system and device type. While you read, it adds how far you read and how long the page stays in the foreground, the external links you follow (for the email link, only that it was used), page speed and responsiveness, any page errors (the cleaned-up message, the file, line and column) and, if the page does not exist, where you came from. Email addresses and long numbers that appear in addresses, campaigns and error messages are masked before sending. While the request is in transit, Cloudflare derives your approximate location (country, region, city) from your IP address and it travels with the statistics; never coordinates or postcode.

The legal basis is my legitimate interest in understanding how the site is read (Art. 6(1)(f) GDPR). You can opt out in two ways: by turning on the "Do Not Track" signal in your browser, or with the button below, which applies to the browser you are using. Either way nothing more is recorded and any stored date of your last visit is deleted. To remember your choice, the button stores the key hz_no_statistiche on your device: this write is needed to respect your opt-out and does not tell you apart from anyone else. A second click withdraws the opt-out and deletes the key; measurement resumes from the next page.

Hosting and technical logs

The site is hosted on Cloudflare Pages. To deliver and protect the service, Cloudflare processes technical request logs, which include the visitor’s IP address. The legal basis is the legitimate interest in keeping the site reachable and defended against abuse, under Article 6(1)(f) GDPR.

Retention periods for those logs are set by Cloudflare in its own notice: I do not determine them and I have no access to the logs in individual form.

The reading statistics also pass through Cloudflare before they reach my server: your browser sends them to this site, a Cloudflare Pages function forwards them, and a Cloudflare tunnel carries them to the analytics server. Along the way Cloudflare handles the encrypted connection, so it processes that data like any other request to the site, IP address included. Cloudflare uses the IP address to derive the approximate location and the analytics server uses it to compute the daily fingerprint; it is then discarded without being stored.

Transfers outside the European Union

Cloudflare is a United States company and may process the technical logs and the reading statistics in transit outside the European Economic Area, under the safeguards provided for in Chapter V GDPR and set out in its documentation.

When you follow a link

Links to YouTube, TikTok, homelabz.cc and other external sites take you away from here: those services process data under their own notices. The email link opens your mail program and sends no message on its own; the statistics only record that it was used, not the address.

Your rights

You may request access to the data concerning you, its rectification or erasure, restriction of processing, and you may object to the processing, under Articles 15 to 22 GDPR: write to the address above.

You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, at garanteprivacy.it.