Privacy

Who handles your data

The data controller is Andrea Castagna, a private individual. For questions about your data or to exercise your rights, email me: press the button below to see the address (it is shown only on click to keep spam bots away). You can also reach me on LinkedIn.

Hosting and server logs

This is a static site hosted by OVHcloud on servers located in the European Union. Like any web server, it keeps technical logs with some details about each request: IP address, date and time, requested page, browser and operating system (user agent). They are needed to run the service and protect it from abuse, not to profile visitors. Legal basis: my legitimate interest in keeping the site secure and working properly (Art. 6(1)(f) GDPR). OVHcloud keeps these logs for the period it sets for service security and its own legal obligations; I don’t copy or store them anywhere else.

If you contact me

If you email me or contact me on LinkedIn, I use the data you send (name, contact details and the content of your message) only to reply and, where relevant, to consider a job or collaboration proposal. Legal basis: my legitimate interest in replying (Art. 6(1)(f) GDPR) and, if talks follow, steps taken at your request before entering into a contract (Art. 6(1)(b)). Emails are kept in my mailbox, run by Apple (iCloud Mail), which may store them outside the European Union with the safeguards required by the GDPR, for as long as needed to handle the contact and no longer than 24 months after our last exchange. LinkedIn messages are also processed by LinkedIn under its own privacy policy.

Recommendations

The recommendations on the home page were written on LinkedIn by their authors and are published with their consent: I show their name, role, profile link and text (on the English site, in my own translation). The authors can ask me at any time to change or remove them.

Cookies and analytics

The site sets no cookies and loads no analytics, advertising or profiling tools. Some events (for example a language switch) are noted in a page variable, the dataLayer, which is currently not sent anywhere. If I add an analytics tool in the future, this page will be updated.

Data stored in your browser

Some features store data in your browser’s local storage (localStorage and sessionStorage), only on your device and only for features you use:

• the light or dark theme and the background animation, if you change them manually;
• presets you save in the tools, for example in the Smart UTM Builder;
• AI provider settings (chosen provider and model) and API keys, the latter only if you choose to save them;
• when you use the AI tools, the times of your most recent requests, to stay within free-tier limits, and, for the current session only, which response formats the model supports.

This data never reaches my server. API keys leave your browser only to go directly to the AI provider you chose. You can delete everything at any time by clearing this site’s data in your browser settings.

To load pages faster and let you read them offline, your browser also keeps a copy of the site’s pages and files (service worker).

Third-party services

In some cases your browser contacts third-party services directly; they receive your IP address and the technical details of the request:

• ipapi.co (Kloudend, Inc., United States), only when you press “Show my IP” in the IP Lookup tool, to get information about your IP address;
• cdn.nba.com, only when you use the NBA Schedule tool, to download the season’s public schedule;
• the AI provider you choose, only when you use an AI tool: Google Gemini, OpenRouter, Groq, Mistral AI, Hugging Face, Cerebras, DeepSeek, Together AI or Fireworks AI. It receives the text you enter and your API key.

Data sent to these services is governed by their own privacy policies, and some of them are based outside the European Union. Some free models may keep prompts or use them for training, so in the AI tools enter only what is needed (for example, remove your name and contact details from your CV) and avoid confidential or health data.

Text produced by the AI tools is marked as AI-generated on the page and, in exported files, with a header line or an “ai_generated” column. Text copied to the clipboard does not keep this marking: if you publish it, disclose that it was AI-generated where the law requires it.

Your rights

Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to its processing and, where applicable, to data portability. You can exercise them by emailing me at the address above, and you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali. Data stored in your browser stays under your control: you don’t need to ask me to delete it.

Software licences and trademarks

The site uses open-source components (including React, Astro, jsPDF, PDF.js and lucide) and the IBM Plex Mono and Space Grotesk fonts (SIL Open Font License 1.1), redistributed under their respective licences: the full list, with the licence texts, is in third-party-notices.txt. Trademarks mentioned (e.g. Meta, Google, Amazon, NBA) belong to their respective owners and are used only to refer to their platforms and services; this site is not affiliated with or endorsed by them.