Privacy Policy

Last updated:

This Privacy Policy explains how this website (francescocastronuovo.com) handles information when you visit it. The site is a personal portfolio and free educational resource run by Francesco Castronuovo. My aim is to keep this simple and honest: the site collects as little as possible and does not track you.

The short version

No analytics, no advertising, no tracking cookies, and no third-party embeds. The site loads only its own resources. The only thing stored on your device is your light/dark theme choice — and only if you set it. You can contact me by email or submit feedback on the AI tutorial pages.

Who is responsible for your data

The data controller for this website is Francesco Castronuovo. For any privacy question or request, you can write to francesco@francescocastronuovo.com.

What information is processed

Technical and hosting data. The site is hosted on Cloudflare Pages. Like any web server, Cloudflare automatically processes the basic technical information needed to deliver the site and keep it secure — such as your IP address, your browser and device type, and the pages you request. This is standard for every website and is used only for delivery, performance, and security, not to identify or profile you.

Theme preference. If you switch between light and dark mode, your choice is saved locally in your browser (in “localStorage”) so the site can remember it on your next visit. This stays on your device and is never sent to me or anyone else.

Email contact. If you email me, I receive the information you choose to include — your address and your message — so that I can reply to you.

AI tutorial feedback. The form sends your optional name, required email and message, page identifier and interface language through Cloudflare to my Google Workspace mailbox, which I read in Gmail. The email address is needed so I can reply. Providing the information is voluntary; without an email address and message the form cannot send the feedback. The application does not store feedback in a database or log message content. Cloudflare processes technical request data, including your IP address, to deliver the message and limit abuse. Please leave out passwords, confidential project details and sensitive personal information. You can request deletion using the contact address above.

Cookies and local storage

This site sets no tracking or advertising cookies. It uses a single piece of functional local storage — your theme preference — which is strictly necessary to honor a choice you actively made, and so does not require a consent banner.

Cloudflare, as the provider that delivers and protects the site, may set a strictly necessary security cookie to guard against abuse. This is used only for security and not to track you across sites.

Legal bases for processing

Where the GDPR applies, necessary technical data is processed on the basis of my legitimate interest in delivering and securing this website (Article 6(1)(f)). General email inquiries and tutorial feedback are processed on the same basis: receiving and answering messages sent to me, and using the feedback to improve the tutorials. The processing is limited to those purposes; messages and email addresses are not used for marketing or profiling. You may object by writing to the contact address above. The theme setting is a functional preference you request; no consent for tracking is requested or used.

Third parties

Website and form delivery. Cloudflare provides hosting, content delivery, form processing and notification delivery. It processes the technical data needed for those services and, when you submit the form, the feedback content.

Email. Google Workspace/Gmail receives and stores the feedback notifications and correspondence so I can read and answer them. Messages sent directly to the personal-domain contact address also pass through the existing Mailgun forwarding service. Form notifications go from Cloudflare directly to Google Workspace.

External links. The site links out to platforms such as YouTube, LinkedIn, and X. Following those links takes you to separate services that have their own privacy policies, which I do not control.

I do not sell or trade your personal information.

International transfers

I am based in Japan. Hosting, form delivery and email services use international infrastructure, so technical data and the messages you send may be processed outside your country, including outside the European Economic Area. The providers publish data-processing terms that provide for European Standard Contractual Clauses where required, or other applicable transfer mechanisms. The links below describe their terms and safeguards. You can contact me for information about the arrangements relevant to your data or to request a copy of the applicable safeguards.

How long information is kept

Technical logs and service copies are retained according to the providers’ applicable terms. In my mailbox, the criteria for keeping feedback and correspondence are whether the request is still open, an answer or agreed follow-up is pending, or the message is still needed to resolve the reported tutorial issue. Messages no longer needed for those purposes are deleted, unless a specific legal obligation or dispute requires retention. There is no automatic deletion schedule for the mailbox; deletion requests can be sent to the contact address above. Provider backups may persist for the periods specified in their terms. Your theme preference stays on your device until you clear it.

Your rights

If you are in the European Union or the United Kingdom, you have the following rights over your personal data:

  • access — ask what data is processed;
  • rectification — ask to correct inaccurate data;
  • erasure — ask to delete your data;
  • restriction — ask to limit how it is processed;
  • objection — object to processing based on legitimate interest;
  • portability — receive your data in a portable format, where applicable.

Exercising your rights and complaints

You can exercise any of these rights, or withdraw consent where processing is based on it, by emailing francesco@francescocastronuovo.com. You also have the right to lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali.

Children

This site is not directed at children and does not knowingly collect their personal data.

Changes to this policy

I may update this policy as the site grows — for example, if I ever add a newsletter, comments, or an account area. The date shown at the top reflects when it was last changed.