Privacy and cookies
Who handles your data, which data, why and for how long. No boilerplate: if a line isn't clear, write to me and I'll rewrite it.
01Who I am
The data controller is me, Carlo Cusimano, as an individual. This site is my portfolio: it isn't a company's business and it sells nothing.
For anything about your data, write to cusimanocarlo27@gmail.com. I answer personally — there's no department.
02If you just open the page
Nothing happens that concerns you. The site is made of static files: there's no account to create, no login, and I don't recognise you from one visit to the next.
The service hosting the site (Cloudflare) keeps its own technical logs of every request, IP address included. That's what keeps the site up and stops attacks: a legitimate interest of mine and of anyone publishing anything online. I don't read those logs, I don't download them and I don't cross-reference them with anything.
03If you write through the form
The form at the bottom of the page collects three things: name, email and message. It hands them to Web3Forms, a service that forwards them to my inbox. They go nowhere else and end up on no mailing list.
I process them in order to reply — that is, to follow up on a request you made. I keep them as long as the conversation makes sense — an application, a piece of work, a question — and then I delete the message.
If you'd rather skip the form, write straight to cusimanocarlo27@gmail.com: it's the same address.
04Analytics: only if you say yes
I use Google Analytics 4 to know how many people come by and which sections they look at. The script is not loaded until you press “That’s fine” on the banner: if you say no, or don't answer at all, your browser never contacts Google and no analytics cookie is created. That isn't a polite formula — it's how the code works.
If you do consent, what gets counted is: pages viewed, where you arrived from, device type and language, and a few actions — which material you open, whether you watch a video, how far down you read, whether you download the CV, send a message or switch language. Google truncates the IP address before recording it.
The service belongs to Google Ireland Limited. I run no advertising, no remarketing, I don't connect these figures to any advertising profile and I don't sell them to anyone. They tell me whether the portfolio is working.
05What stays in your browser
| Name | Type | What it does | How long |
|---|---|---|---|
| cc-analytics | local storage | remembers the choice you made on the banner, so it isn't asked every visit | until you clear your browser data |
| _ga | Google cookie | tells one visitor from another | 2 years |
| _ga_<code> | Google cookie | keeps track of the single session | 2 years |
The first one is technical and is there either way: without it the banner would come back on every page. The other two exist only if you consented to analytics.
06The consent record
The moment you choose, I save one line on my server. It holds: date and time, a random code generated right then, your choice, the version of this page and the language.
It holds no IP address, no name, no email and nothing that leads back to you. I can't get from that line to a person, and that isn't what it's for: it's there to show the banner behaved the way this page says it does, and in what proportion people accept or refuse.
07Changing your mind
At the bottom of every page there's “Cookie preferences”: it reopens the banner so you can answer again. If you had said yes and switch to no, analytics stops starting from the next page load; cookies already created can be deleted from your browser settings, along with every other site's.
08Fonts and other outside calls
The site's typefaces were downloaded once and are served from here: your browser never contacts Google Fonts, so no outside server sees your IP address merely because you opened the page. Images, videos and the CV all live on the site. The only outside calls are the ones already mentioned: Web3Forms if you submit the form, Google Analytics if you consented.
09Who else sees anything
Cloudflare — hosts the site, and therefore sees the traffic.
Web3Forms — receives the form and forwards it to me, only if you send it.
Google Ireland Limited — the analytics, only if you consented.
Nobody else. I don't pass data to third parties, don't sell it and don't build contact lists. Some of these services belong to companies that may process data outside the European Union, under the contractual safeguards European rules provide for.
10Your rights
You can ask to see the data I hold about you, correct it, delete it, restrict its use, object to the processing, or have it handed over in a readable format. An email to cusimanocarlo27@gmail.com is enough: in practice, on this site, it almost always means deleting a message you sent me.
If you think I'm getting it wrong, you can turn to the Italian data protection authority — garanteprivacy.it — or to the authority of the country you live in.
11If something changes
The version and the date sit at the top of this page. If anything changes that affects consent, the banner comes back and asks you again.