Notice
Privacy
Which data this website processes, why, and what your rights are. In short: the minimum needed to run accounts, no profiling. This is a translation; the Italian version prevails.
Data controller
Carmine Tornincasa — contact: carminetornincasa98@gmail.com.
Which data are processed
Browsing. The site counts page visits in aggregate form (day and section visited), without tracking cookies, without profiling and without recording IP addresses or the identity of visitors.
Purchases. Payments are handled by Paddle, acting as merchant of record: payment data (card, billing address) are collected and processed by Paddle according to its privacy policy. This site receives from Paddle only the confirmation of the purchase with the account email, the subject and the amount, in order to unlock the subject and keep the sales record.
Account. For those who create an account, the site stores the email address, the password in hashed form (not readable, not even by the controller), the unlocked subjects, the registration date and the date of the last login. These data are used to run the account and to provide support.
Cookies
The site uses only technical cookies: sessione keeps you logged in to your account on the device. There are no profiling or third-party cookies for browsing. Some reading preferences (for example whether the contents panel is open or closed) are stored only on the device and never leave the browser. During a purchase, Paddle may set the technical cookies needed for the payment.
Legal basis and retention
The processing of purchase and access data is based on the performance of a contract (Art. 6(1)(b) GDPR); aggregate statistics are based on the legitimate interest in running the site. Access data are kept for as long as the service is active, so that access can be restored to those who purchased it.
Your rights
You can at any time request access to, rectification or erasure of your data by writing to the controller's address. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).