Privacy, cookies and studio details

Controller and studio details

Name or legal business name

To be completed before publication

Business / professional address

To be completed before publication

Privacy contact

To be completed before publication

Italian VAT number

04074220924

Legal form

To be completed before publication

Planned hosting provider

Cloudflare Pages — Cloudflare, Inc.

Hosting log retention

To be completed before publication

Studio email provider

To be completed before publication

Retention of received enquiries

To be completed before publication

The site is not yet published: the actual Cloudflare configuration and terms must be checked before launch.

Browsing and local resources

The website code includes no analytics, advertising pixels, fingerprinting, embedded maps or videos, or social widgets. Space Grotesk fonts, images, icons, GLB models and Three.js modules are served from this site. The libraries send no telemetry provided for by this implementation. No fonts are requested from Google and no assets from external CDNs.

Delivering pages necessarily exposes technical data to the hosting service, potentially including IP address, requested URL, date and time, browser information and network data. Browsing therefore cannot accurately be described as involving no processing of personal data.

Briefs, email and WhatsApp

Name, email, selected service and message are processed in your browser to prepare a brief. Preparing the enquiry sends nothing to the studio or its hosting and does not save the fields in localStorage or a database. The draft stays in the page until it is closed or reloaded; a downloaded file stays on your device until you delete it. Your browser may independently provide autofill or tab restoration.

Only if you choose, opening a prefilled email passes the text to your email app; opening WhatsApp shares the destination number and text with WhatsApp and its provider. You can edit the message and choose whether to send it. The studio receives the data when you actually send the message. The chosen service’s terms also apply.

Received enquiries are used to reply and assess your project: steps requested before a contract, GDPR Article 6(1)(b); for other relevant communications, the legitimate interest in handling the contact, Article 6(1)(f). The data are not used for newsletters or marketing. Providing information is optional; without sufficient details and a reply address we may be unable to respond. Avoid unnecessary sensitive data or information about others.

Language preference and cookies

After you choose a language, the “unbug-language” localStorage key stores only that selection. It has no unique identifier and the website code does not transmit it to a server. It remains until you change the choice or clear site data in your browser; localStorage sets no automatic expiry. You can remove it in browser settings and still use each language’s URL.

Storage serves only the requested interface customisation, not audience measurement or profiling. The current implementation does not require a consent banner. Application code sets no cookies; any technical security tools added by hosting must be documented according to what is actually enabled.

Hosting, technical purposes and recipients

The planned host is Cloudflare Pages. Page delivery, security and abuse prevention involve network data: the legitimate interest is providing a reliable website and protecting the service, GDPR Article 6(1)(f). Cloudflare may act as a processor for its customer and process some network data under its own privacy notice. Actual roles depend on the enabled services and applicable agreements.

Information received by the studio may be accessible to authorised people and necessary technical suppliers, such as hosting and email providers, in their respective roles. The email provider and logging configuration must be confirmed. Links to Kenney or external privacy notices do not load those sites until you open them. No GitHub integration runs in visitors’ browsers.

Retention and international transfers

Technical-data retention depends on the actual hosting service, logs and security configuration; no universal or invented retention period is claimed. Received enquiries must be kept only as long as needed to handle the contact, follow-ups and applicable duties. Actual periods or criteria must be completed in the fields above; contractual and tax records follow relevant obligations.

Cloudflare and communication services may process information outside the European Economic Area. Before launch, suppliers, countries and safeguards for processing on the studio’s behalf must be checked under GDPR Articles 44 onwards, such as applicable adequacy decisions or standard contractual clauses and necessary measures. Cloudflare’s DPA describes contractual safeguards; we do not claim that data stay exclusively in the EU. WhatsApp’s terms apply when you choose to open it.

Your rights

Subject to the GDPR, you may request access, correction, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests. Use the controller’s privacy contact above, which must be completed before publication. You may complain to the Italian Garante or another competent supervisory authority.

This website makes no automated decisions with legal effects and performs no profiling. A generic mandatory consent is not required to receive a reply: the contact purposes described above rely on the stated legal bases. Future processing changes require an updated notice and any necessary consent requests.