Privacy

Last updated: 2 August 2026

This is a personal blog. I am not selling anything, I have no newsletter and I do not build profiles of the people who stop by. I collect only the minimum needed to understand which articles get read and, if you choose to comment, the name you give and the text of the comment.

Who processes the data

The data controller is me, Giovanni Foiani, Pieve di Cento (BO), Italy. For anything at all, write togiovanni.foiani@gmail.com.

Visit statistics

I use Cloudflare Web Analytics, a cookieless measurement tool. It sets no cookies, writes nothing to your browser storage and builds no device fingerprint from your IP address or User-Agent.

All I see is aggregate data:

• pages visited and how many times
• referring site
• country, resolved at network level
• device type, browser and operating system

I cannot trace any of it back to an individual, I do not follow you across other sites and I do not combine these numbers with any other source. The data stays available for about six months, then Cloudflare deletes it.

Comments

You can leave a comment under any article. The section loads only if you press the button yourself: if you do not, the page sends no request and nothing happens.

I keep two things about you, plus the date:

• the name you choose, which can be a pseudonym
• the text of the comment
• the date and time you sent it

I do not ask for your email and I do not store your IP address. That means I have no way to reach back to you, and it is deliberate: the less I keep, the less I can lose.

Comments live in a Cloudflare D1 database located in the European region. Every comment stays pending and is visible to nobody until I read it and approve it. Once published they stay indefinitely: if you want yours removed, write to the address above and tell me the name you used and which article.

The legal basis is the consent you give by sending the comment, art. 6(1)(a) GDPR. You can withdraw it at any time by asking for deletion.

To keep spam out, the form usesCloudflare Turnstile, which activates only when you open the form. To tell a person from a bot, Cloudflare receives technical signals from your browser: IP address, TLS connection fingerprint, User-Agent and the widget identifier. The widget sets no cookies, and Cloudflare states it cannot identify an individual from those signals. I never see that IP address and I do not store it.

Cookies

This site uses no cookies. That is why you see no consent banner: there is nothing to consent to. That holds for the comments section and the anti-spam check too.

The only thing the site stores in your browser is your light or dark theme preference, saved in localStorage under the keytheme. It stays on your device, is never transmitted, and you can clear it by wiping the site data in your browser.

Third-party services

The site is hosted on Cloudflare Pages. Like any host, Cloudflare keeps technical request logs, which may temporarily include your IP address, in order to deliver the service and protect it from abuse. Cloudflare acts as data processor.

Typefaces are loaded from Google Fonts(fonts.googleapis.com and fonts.gstatic.com). To serve them, Google receives the IP address of your connection. This is a technical request needed to render the page, not something I use to profile you.

The site search (Pagefind) runs entirely in your browser: the words you search for are never sent to any server.

If you open the comments section, your browser also contactschallenges.cloudflare.com for the anti-spam check described above. Not before that.

Legal basis

For statistics the legal basis is legitimate interest, Art. 6(1)(f) GDPR: understanding in aggregate which content works, and keeping the site online and secure. The impact on your privacy is minimal, given that I collect no identifying data. For comments it is your consent, as explained in that section.

Your rights

You can ask me for access, rectification, erasure, restriction, portability and objection to processing (Arts. 15-22 GDPR) at the address above. For statistics, since they are aggregate and anonymous, I have no way to isolate data relating to you specifically. For comments I do: tell me the name you wrote under and which article, and I will delete or correct them.

If you think something is wrong, you can contact the Italian data protection authority,Garante per la protezione dei dati personali.

Changes

If I change tools or start collecting different data, I will update this page and the date at the top.