Privacy & cookies
This is my personal portfolio. It has no forms, uses no cookies, collects no statistics and embeds no content from other sites. Here I explain which data is still processed, and why.
Last updated: 10 November 2026
1. Data controller
Samuele Napolano, product designer, Florence (FI), Italy. Email [email protected] · Phone +39 329 742 8095.
2. What data is processed
Browsing data
As with any website, the service hosting these pages automatically logs some technical data on every visit: IP address, date and time, requested page, browser and device type. It is used only to run the site and protect it from abuse. I have no access to these logs and do not use them to identify or profile visitors.
Data you give me
If you email me, call me or contact me on social media, I process the data you choose to share (usually your name, contact details and the content of your message) in order to reply. Please do not send me data the request does not need, especially health data or other special categories of data.
3. Why it is processed, and on what legal basis
- Replying to your messages, for example about collaborations, interviews or job opportunities: pre-contractual steps at your request (Art. 6(1)(b) GDPR) or my legitimate interest in replying (Art. 6(1)(f) GDPR).
- Running the site and keeping it secure: my legitimate interest (Art. 6(1)(f) GDPR).
- Complying with any legal obligations (Art. 6(1)(c) GDPR).
Giving me your data is optional, but without a contact I cannot reply. I make no automated decisions and do no profiling.
4. How long it is kept
- Browsing data: technical logs (such as the IP address) are processed by Cloudflare only for as long as strictly necessary to run and secure the service, under its own privacy policy, and then deleted.
- Messages and contacts: kept in my mailbox for up to 24 months after our last exchange. After that period I delete messages that did not lead to a collaboration. You can ask me to delete them earlier.
5. Who can see the data
Data is never published or sold. Only the providers needed for the site and email can access it, acting as data processors on my behalf (Art. 28 GDPR):
- Hosting: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages). Privacy contact: [email protected] · Cloudflare privacy policy ↗.
- Email: Italiaonline S.p.A. (Libero Mail service), for the messages you send me.
- Domain: registered with OVHcloud (OVH SAS, France). OVH registers the domain name but does not host the site, so it does not process visitors' data.
Where the servers are
Cloudflare runs a global network: the site is served from the server closest to whoever opens it. According to its privacy policy, data is stored mainly in the United States and the European Economic Area, but may be accessed from every country where the group operates. Transfers to the United States are covered by the EU-U.S. Data Privacy Framework, which Cloudflare has joined, and alternatively by the European Commission's standard contractual clauses (Arts. 45 and 46 GDPR).
6. Links to other sites
Some links lead to LinkedIn, Instagram and Google Drive (where the two PDF books on the Download page are stored). These services are not embedded in my pages: no data is sent to them until you click the link. Once on their site, their own privacy notices apply.
7. Cookies and browser storage
This site uses no profiling cookies and no third-party analytics, advertising or tracking tools. Fonts are loaded from my own server, not from Google; libraries and the video are hosted with the site too: opening the pages, your browser does not contact any other service.
I only use your browser's local storage for three technical items, needed for features you ask for. They contain no personal data and are never sent to me or anyone else:
| Name | Purpose | Duration |
|---|---|---|
lang | Remembers the language you chose (English or Italian) | Until you clear it in your browser |
seen | Shows the opening animation only the first time | Until you close the tab |
pt | Starts the transition when you move from one page to another | A few moments, until you close the tab |
As these are purely technical tools, the law requires neither your consent nor a banner (Art. 122 of the Italian Privacy Code, Legislative Decree 196/2003, and the Italian Data Protection Authority's guidelines of 10 June 2021). You can still delete them at any time in your browser settings, under site data.
If I ever add analytics, maps or embedded videos, I will update this page and, where needed, ask for your consent before enabling them.
8. Your rights
You can ask me at any time to access, correct or delete your data, restrict its use, receive it in a readable format or object to its processing (Arts. 15-22 GDPR), by writing to [email protected]. I reply within one month.
If you believe your data is not being handled correctly, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it ↗), or with the authority of the EU country where you live.
9. Changes
I update this notice when something changes on the site or in the law. The date at the top shows the latest version.