Privacy Policy

Last updated: 12 October 2026

Data controller

Nicola Panero — Cervere (CN), Italy

The controller processes this data as a private individual: nicolapanero.dev is a personal portfolio, carries out no commercial activity, sells no goods or services and has no VAT number. No Data Protection Officer (DPO) has been appointed, as the conditions of Art. 37 GDPR do not apply.

Data processed

The site processes only three categories of data:

Technical logs — IP address, user agent, date and time of the request, requested page. They are generated by the hosting infrastructure for every website and are needed for the service to work and stay secure.
Usage statistics — aggregated and anonymous, not attributable to an identifiable person.
Email — address and content of the messages you choose to send through the links on the site.

The site has no forms, requires no registration, handles no payments and collects no special categories of data (Art. 9 GDPR). Email is the only contact channel, so providing data is entirely optional: it is limited to what you choose to write.

Cookies and local storage

This site sets no profiling cookies and no third-party cookies. It uses a single technical one: lang, which remembers the chosen language (Italian or English) for one year and only applies to this domain. It is written only when you switch language with the selector; deleting it falls back to your browser language. That is why there is no consent banner: a technical cookie does not require one.

A sessionStorage entry (np:intro-seen) is also used to remember, within the same browser session, that the opening animation has already been shown. It contains no personal data, does not identify visitors and cannot track them across other sites; it clears itself when you close the tab. It is a technical tool under Art. 122(1) of the Italian Privacy Code (Legislative Decree 196/2003) and the Italian Data Protection Authority's cookie guidelines of 10 June 2021, and as such does not require consent.

Switching language also uses the temporary np:lang-handoff entry in sessionStorage. It keeps the source and target languages and your position on the page so you can continue reading after the switch. The destination page removes it; if the switch does not complete, it disappears when the tab closes. It stays on your device and is not used for tracking.

Fonts are served from the site's own domain, not from an external CDN: opening a page triggers no requests to third parties other than those listed below.

Statistics

The site uses Vercel Web Analytics, a traffic analysis service that uses no cookies and collects no identifiable personal data. The information collected (pages visited, country of origin, device type) is aggregated and anonymous. To count visits, Vercel uses a temporary hash derived from the request, discarded after 24 hours according to the service documentation. This expiry applies to the visitor code, not to all aggregated statistics.

Vercel Speed Insights is also active, measuring perceived performance while browsing (loading time, responsiveness, layout stability). Here too no cookies are used and the data is aggregated and anonymous.

Neither makes it possible to identify a single person, to reconstruct an individual path linked to your personal identity or to follow readers on other sites.

Recipients and transfers outside the EU

The site is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA), which acts as a processor under Art. 28 GDPR and also provides the two statistics services mentioned above. Vercel may keep technical logs (IP address, user agent) for the operation and security of the service. Details: Vercel Privacy Policy.

Since the provider is based in the United States, processing may involve a transfer of data outside the European Economic Area. The transfer relies on the safeguards of Chapter V GDPR, in particular the standard contractual clauses included in Vercel's data processing agreement (Art. 46 GDPR).

There are no other recipients. Data is not sold, transferred or disclosed to third parties for marketing purposes.

Legal basis

Technical logs and aggregated statistics are processed on the basis of the controller's legitimate interest (Art. 6(1)(f) GDPR) in the operation, security and improvement of the site.

Data contained in the emails you choose to send is processed to act on the data subject's request (Art. 6(1)(b) GDPR) or, where the request is not pre-contractual, on the legitimate interest in replying to whoever writes.

Data retention

Technical logs: kept by the hosting provider for the time technically needed for diagnostics and security, according to its retention policies.
Statistics: being aggregated and anonymous, they are not personal data and remain available as statistical data.
Emails: kept for as long as needed to handle the correspondence and its consequences, then deleted.

No profiling

No profiling takes place, there is no automated decision-making within the meaning of Art. 22 GDPR and no advertising is shown, behavioural or otherwise. The site is not aimed at minors and does not knowingly collect their data.

Your rights

Under Articles 15-22 GDPR, you can exercise the following rights by writing to panero.nicola01.np@gmail.com:

Right of access to personal data
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object, including to processing based on legitimate interest

You will receive a reply without undue delay and in any case within one month of the request, as required by Art. 12 GDPR. Exercising your rights is free of charge.

You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la Protezione dei Dati Personali (garanteprivacy.it).

Changes

The controller may update this policy. The date of the last update is shown at the top of the page.