Privacy policy
This notice explains how leafranger.dev processes personal data, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003).
1. Data controller
Mirko Cisternino, who works online as “Leafranger”, based in Italy. Contact: leafrangerit@gmail.com. This is a personal, non-commercial portfolio; no Data Protection Officer is appointed, as none is required.
2. What data, why, and on what legal basis
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Hosting & security | IP address, user agent, requested page, date and time | Serve the site, prevent abuse | Legitimate interest (Art. 6(1)(f)) | Provider’s technical logs, usually a few days |
| Analytics (Google Analytics 4) | Pseudonymous ID, pages viewed, device, approximate region | Understand how the site is used | Consent (Art. 6(1)(a)), withdrawable at any time | 2 months |
| Emails you send me | Address, name, message content | Reply to your request | Pre-contractual steps / legitimate interest (Art. 6(1)(b)–(f)) | As long as needed to handle the request, then at most 24 months |
| Third-party content | IP address and technical request data | Show images/audio, my Discord status, videos and changelogs | Legitimate interest (Art. 6(1)(f)) | According to each provider’s policy |
3. Recipients and providers
- Vercel Inc. (USA): hosting, as processor.
- Google Ireland Ltd.: Google Analytics 4, only with your consent; IP anonymised, advertising signals off.
- Cloudinary Ltd.: delivers the portfolio’s images and audio.
- Lanyard (api.lanyard.rest): shows my public Discord status on the Contact page; your browser connects to it directly.
- GitHub, Inc.: some project pages read public changelogs through the GitHub API.
- YouTube (privacy-enhanced mode, youtube-nocookie.com): videos embedded on some pages.
- PayPal (Europe) S.à r.l.: donations happen on PayPal’s site, which acts as an independent controller.
Some providers are based in the United States. Transfers rely on the EU–U.S. Data Privacy Framework adequacy decision or the European Commission’s Standard Contractual Clauses (Art. 46 GDPR).
4. Cookies
Details are in the cookie policy. In short: no non-essential cookie is used without your consent, and you can change your mind at any time.
5. Your rights
You can ask at any time to access, correct or delete your data, restrict processing, receive it in a portable format, and object to processing based on legitimate interest (Arts. 15–22 GDPR). You can withdraw consent without affecting earlier processing. Write to leafrangerit@gmail.com; I reply within 30 days.
You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
6. Other information
Providing data is optional: the site works without analytics consent. There is no automated decision-making or profiling. The site is not directed at children under 14.
This notice may be updated; the date at the top shows the latest change.