Privacy and cookies
What this site does and does not collect, the legal basis for it, and how to exercise your rights under the GDPR.
This notice describes how personal data is handled on this website. It is written to be checkable rather than comprehensive-sounding: where a claim can be verified by opening your browser's network tab, it is meant to survive that check.
Who is responsible
The data controller is Mario-Celestino Nardelli, publishing from Italy as an individual, contactable at zeroesonesandyou@gmail.com.
This is a personal publication rather than a company. There is no data protection officer, because the scale of processing described below does not require one.
The short version
As this site is currently built:
- No analytics service runs on any page.
- No advertising network, pixel or tracking script is loaded.
- No cookies are set by this site, and no non-essential data is stored on your device.
- No account exists, so there is nothing to sign up to and nothing to log in to.
- Nothing you type into a tool is transmitted anywhere.
The only personal data reaching anyone is the technical request data that any web server necessarily receives in order to send you a page, described under Hosting below.
If that changes, this notice changes first. That is a commitment about sequencing, not an aspiration: the consent banner, the tracking configuration and this notice are generated from one source, so measurement cannot quietly precede its disclosure.
Two different postures
The site deliberately holds itself to two different standards, and it is worth being explicit about which page you are on.
| Area | What applies |
|---|---|
/tools/* | The strict posture. No analytics, no advertising, no third-party requests of any kind, ever. This is enforced by the build and by an automated audit that fails the release if a third-party reference appears. |
| Everywhere else | The commercial posture. Today it behaves identically. It is the area where consent-gated analytics, and later advertising or affiliate links, may be introduced — always with consent first and disclosure attached. |
The distinction is not decorative. Tool pages regularly receive files and figures that are nobody else's business, so they are held permanently to the stricter rule even as the rest of the site grows.
What the tools do with your data
Every tool on this site runs entirely inside your own browser.
Files you open and values you enter are processed locally by JavaScript on your own device. They are not uploaded, not transmitted to the publisher, and not sent to any processing server, because there is no server-side processing component to send them to. Closing the tab discards everything.
This is a structural property of how the tools are built rather than a policy promise. You can verify it: open your browser's developer tools, switch to the network tab, and use any tool. No request carrying your data will appear, because none is made.
Hosting
The site is served as static files by Cloudflare Pages (Cloudflare, Inc.).
To deliver a page, Cloudflare's servers necessarily receive and may log technical request data including your IP address, the requested URL, the time of the request, and your browser's user-agent string. This is inherent to how the web works and is not something this site opts into or can switch off. Cloudflare acts as the hosting provider and processes this data under its own terms and privacy policy.
I do not receive an identifiable copy of that log data, and I do not combine it with anything else.
- Legal basis: legitimate interests (Article 6(1)(f) GDPR) — operating and securing a website that has been requested by you.
- Transfers: Cloudflare is a US-headquartered provider operating a global network, so this data may be processed outside the EEA under the transfer safeguards in Cloudflare's data processing terms.
Cookies and local storage
This site currently sets no cookies and stores nothing on your device.
If consent-gated measurement is introduced later, one entry will be stored to remember your choice:
| Name | Type | Purpose | Retention |
|---|---|---|---|
zoy:consent | Local storage | Records your consent choice and the version of this notice it was given against, so you are not asked again on every page. | Until you clear it, or until this notice changes materially. |
That entry is classed as strictly necessary: it exists only to honour your decision, it is never transmitted to a server, and storing it is what allows the site to avoid asking you the same question repeatedly. Everything else would require your consent first.
If you email me, I receive your email address and whatever you write. It sits in a Gmail mailbox, is used to reply to you, and is not added to any list — there is no newsletter to be added to.
- Legal basis: legitimate interests (Article 6(1)(f) GDPR) — responding to a message you chose to send.
- Retention: correspondence is kept while it is useful and deleted when it is not. Consulting enquiries may be kept longer for record-keeping.
External links
Links to YouTube, Ko-fi and other sites are ordinary links. Nothing is embedded, so those services receive nothing about you until you choose to click through, at which point their own privacy policies apply.
There are no YouTube embeds anywhere on this site. Video pages show a locally stored thumbnail and link out, specifically so that Google receives nothing about you for simply reading a page here.
If advertising or affiliate links are introduced
None are in use today. If that changes:
- Advertising and any tracking pixel will run only after explicit, freely given consent, and rejecting will be exactly as easy as accepting.
- Affiliate links will be disclosed visibly, above the first such link on the page, before you click anything.
- No advertising or affiliate content will ever appear under
/tools/*. - This notice will be updated, with its date, before any of it goes live.
Your rights
Under the GDPR you have the right to request access to your personal data, its correction or erasure, restriction of processing, portability, and to object to processing carried out on the basis of legitimate interests.
In practice, this site holds almost nothing about you: unless you have emailed me, there is likely no personal data to access, correct or erase. If you have, write to zeroesonesandyou@gmail.com and I will act on it.
You also have the right to lodge a complaint with a supervisory authority. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it).
Children
This site is not directed at children and does not knowingly collect any data from them. Given that it collects essentially nothing from anyone, this is unlikely to arise.
Changes
Material changes will be reflected here with an updated date, and — where they involve anything stored on your device — with a renewed request for consent rather than an assumption that a previous answer still applies.