Privacy Policy

Last updated:

This Privacy Policy explains how this website (francescocastronuovo.com) handles information when you visit it. The site is a personal portfolio and free educational resource run by Francesco Castronuovo. My aim is to keep this simple and honest: the site collects as little as possible and does not track you.

The short version

No analytics, no advertising, no tracking cookies, and no third-party embeds. The site loads only its own resources. The only thing stored on your device is your light/dark theme choice — and only if you set it. If you want to reach me, you do so by email, which you start.

Who is responsible for your data

The data controller for this website is Francesco Castronuovo. For any privacy question or request, you can write to [email protected].

What information is processed

Technical and hosting data. The site is hosted on Cloudflare Pages. Like any web server, Cloudflare automatically processes the basic technical information needed to deliver the site and keep it secure — such as your IP address, your browser and device type, and the pages you request. This is standard for every website and is used only for delivery, performance, and security, not to identify or profile you.

Theme preference. If you switch between light and dark mode, your choice is saved locally in your browser (in “localStorage”) so the site can remember it on your next visit. This stays on your device and is never sent to me or anyone else.

Email contact. If you email me, I receive the information you choose to include — your address and your message — so that I can reply to you.

Cookies and local storage

This site sets no tracking or advertising cookies. It uses a single piece of functional local storage — your theme preference — which is strictly necessary to honor a choice you actively made, and so does not require a consent banner.

Cloudflare, as the provider that delivers and protects the site, may set a strictly necessary security cookie to guard against abuse. This is used only for security and not to track you across sites.

Legal bases for processing

Where the European General Data Protection Regulation (GDPR) applies, the processing described above relies on my legitimate interest in delivering and securing the website (technical and hosting data), and on your own action (the functional theme setting, and any email you decide to send me). None of it is used for marketing or profiling.

Third parties

Hosting. Cloudflare, Inc. acts as my hosting and content-delivery provider, processing technical data on my behalf. You can read how they handle it in Cloudflare’s own privacy policy.

External links. The site links out to platforms such as YouTube, LinkedIn, and X. Following those links takes you to separate services that have their own privacy policies, which I do not control.

I do not sell or trade your personal information.

International transfers

The site is served from a global content-delivery network, and I am based in Japan. This means technical data may be processed outside your own country, including outside the European Economic Area. Where this applies, providers such as Cloudflare rely on appropriate safeguards, such as the European Standard Contractual Clauses.

How long information is kept

Technical server logs are retained by the hosting provider for a limited period, for security and troubleshooting, according to their own retention practices. Emails you send me are kept for as long as needed to deal with your message and any follow-up. Your theme preference stays in your browser until you clear it.

Your rights

If you are in the European Union or the United Kingdom, you have the following rights over your personal data:

  • access — ask what data is processed;
  • rectification — ask to correct inaccurate data;
  • erasure — ask to delete your data;
  • restriction — ask to limit how it is processed;
  • objection — object to processing based on legitimate interest;
  • portability — receive your data in a portable format, where applicable.

Exercising your rights and complaints

You can exercise any of these rights, or withdraw consent where processing is based on it, by emailing [email protected]. You also have the right to lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali.

Children

This site is not directed at children and does not knowingly collect their personal data.

Changes to this policy

I may update this policy as the site grows — for example, if I ever add a newsletter, comments, or an account area. The date shown at the top reflects when it was last changed.