Privacy

Controller and contact details

The site controller is Salvatore Mosaico. For privacy requests: ggeteam@ggeteam.com.

Essential statistics

The site uses first-party, cookieless statistics. To estimate visits it creates a pseudonymous code that changes daily, without storing plain IP addresses, and excludes recognized bots. It records no events when the browser sends Global Privacy Control or Do Not Track.

Opening search and submitting a query are counted separately. Search terms may appear in the administration area as an aggregate summary; they are not linked to a visitor code and are not retained if they look like email addresses, telephone numbers or links. These data follow the retention period for analytics events.

Requests receiving an application response of 403 (access denied) or 404 (page not found) are counted separately, including requests from bots: they do not increase page views or visitor estimates. New events of this kind retain only the path without query parameters, HTTP status and date, with no visitor code, IP, user agent, referrer or form contents. The hosting provider’s independent logs may contain additional technical data depending on the provider’s configuration.

Optional newsletter

If you choose to subscribe, we process your email address, the language active when you request subscription, subscription status, and request, confirmation and unsubscribe dates. Subscription requires your consent and email confirmation. The newsletter has no fixed schedule: it is sent only when the author considers there are important updates, and includes summaries of the ten latest posts published in your chosen language, with links to the website.

Processing is based on your consent, which you can withdraw at any time through the unsubscribe link in the emails, without creating an account. You can also contact the controller to request access, correction or deletion of your data. You can read the website without subscribing.

Emails are sent individually through the email service configured by the controller: subscribers cannot see other recipients’ addresses. The hosting and email providers process the data needed to store subscriptions and deliver messages. We do not insert tracking pixels or individually track email opens or clicks; visits to the website are subject to the general statistics described here.

Active subscription data is retained to manage deliveries. On withdrawal, the address is immediately excluded from subsequent newsletters; unsubscribed records older than 30 days and requests not confirmed within 48 hours are removed using the administration maintenance feature. The controller can delete a subscription earlier on request. Technical delivery outcomes remain linked to the subscription until deletion; afterwards only aggregate counts remain. Backup copies follow the controller’s and hosting provider’s retention arrangements and must not be used to reactivate withdrawn subscriptions.

To limit abuse, we record keyed HMAC hashes of the email address and request origin, without storing plain IP addresses, for a one-hour rate-limit window. Expired hashes are removed on the next request or during maintenance. Confirmation links expire after 48 hours. You can lodge a complaint with the Italian data protection authority, the Garante.

Technical cookies for forms and administration

The protected area and newsletter forms use a technical session cookie marked Secure on HTTPS, HttpOnly, and SameSite Strict. It authenticates administrators or protects forms against unauthorized requests and is not used for profiling. Reading articles alone does not start this session.

Images and external links

Images attached to articles are resized and re-encoded to remove metadata and unrelated data, then stored by this site and displayed through application checks. External videos and further-reading links are opened only when you choose to follow them; from that point, the destination site applies its own privacy policy and may receive the usual technical request data.

External interface assets

Bootstrap and Bootstrap Icons are requested from the jsDelivr CDN. As with any web request, the provider may receive technical transmission data such as the IP address, user agent, and referring page.

Retention

Raw analytics events are deleted after the configured period, normally 90 days. Administrative audit records are retained for security and editorial accountability.

Last updated: 2026-10-13