Who is responsible
This site is run by Matteo Pelliccione, a private individual based in Italy, who is the data controller for the processing described here. For anything about this policy or your data, write to contact@mpellicc.dev.
What is collected, and why
Contact form
If you use the form on the home page, your name, email address and message are sent to Web3Forms, which delivers them to my inbox. I use them only to reply to you. The legal basis is my legitimate interest in answering messages sent to me, or steps you ask for before entering into an agreement (Art. 6(1)(f) and 6(1)(b) GDPR). Nothing is sent until you press Send.
Hosting logs
The site is hosted on GitHub Pages. Like any web server, GitHub records technical data for every request, such as your IP address, browser and the page requested, to serve the site and keep it secure. I have no access to these logs and do not use them. The legal basis is legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
What is not collected
- No cookies of any kind, so there is no cookie banner.
- No analytics, advertising or tracking scripts.
- No fonts, scripts or embeds loaded from third-party servers.
- Nothing you type or paste into the tools leaves your browser. Files you generate there, such as QR code downloads, are created on your device.
Stored in your browser
The theme switch saves your choice (light, dark or system) in your browser's local storage under the key theme. It never leaves your device and is not a cookie. You can remove it by clearing this site's data in your browser settings.
Third parties
Two services process data on my behalf, as described above. Each has its own policy:
- GitHub, Inc. (hosting), based in the United States and certified under the EU–US Data Privacy Framework. GitHub Privacy Statement.
- Web3Forms (contact form delivery). Web3Forms Privacy Policy.
Links to GitHub, LinkedIn and Telegram in the footer go to those sites. They only receive data if you follow the link.
Retention
Contact messages are kept in my mailbox for as long as the conversation is relevant, and deleted on request. Hosting logs are kept by GitHub according to its own policy.
Google Drive backup app
I own a Google Cloud OAuth app that is used only by me, with rclone, to back up my own files to my own Google Drive. It requests the drive.file scope, so it can only see files it created. It is not offered to anyone else, and no Google user data is collected, stored on any server of mine, shared or sold. Its use of data received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Future usage counts
I may later count how often each tool is used. If that happens, the only thing sent will be the tool name and the action (for example, “JSON, format”): never what you typed, never an identifier for you or your session, and no fingerprinting. This page will be updated before it goes live.
Your rights
Under the GDPR you can ask to access, correct or delete your personal data, restrict or object to its processing, or receive it in a portable format. Write to contact@mpellicc.dev and I will reply within one month. You can also lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali.
Changes
If this policy changes, the new version will be published on this page with an updated date.