Privacy policy

HartwellBridge, based in Bologna, Italy, is the data controller for personal data collected through this Site. For any request relating to personal data, write to [email protected].

Technical browsing data: when you visit the Site, our hosting provider and content-delivery network (CDN) automatically log technical information such as your IP address, browser and device type and the pages you visit. This is used to deliver the Site securely and prevent abuse.

Contact data: if you email us (for example at [email protected]) we receive your email address and the content of your message.

No registration is required, and we do not ask for personal data to browse the Site. For aggregate traffic statistics we use Umami, a privacy-first, cookieless analytics tool that collects no personal data and does not track individual visitors.

The Site uses only technical cookies strictly necessary for it to function. We do not use profiling, advertising or analytics cookies, so no cookie consent banner is required.

We process your data to: deliver and secure the Site, on the basis of our legitimate interest (Art. 6(1)(f) GDPR); respond to your requests, on the basis of legitimate interest or steps taken at your request (Art. 6(1)(b)/(f)); and comply with legal obligations (Art. 6(1)(c)).

Donations are processed by Stripe. Payment data is collected and processed directly by Stripe under its own privacy policy. We do not receive or store your full card details.

The Site links to third-party services, including GitHub, WhatsApp (for Whispy) and the project subdomains. When you follow these links or use these services, their own privacy policies apply; we are not responsible for their processing.

We do not sell your personal data. We share it only with providers acting on our behalf (hosting, CDN, payment processing, traffic analytics via Umami) and where required by law.

Some providers (for example Stripe) may process data outside the European Economic Area. Where this happens, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

We keep technical logs for 3 months and email correspondence for as long as needed to handle your request and meet legal obligations, after which we delete it.

Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your data, and to data portability. You may also lodge a complaint with your supervisory authority (in Italy, the Garante per la protezione dei dati personali). To exercise your rights, write to [email protected].

We may update this Policy. The current version is always published on this page, with the date of its last update.