This notice explains what personal data the filecc.dev website processes when you visit it or write to me, under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003. It covers this site only, not the external sites it links to.
Data controller
Filippo Giampapa, Torino
E-mail: hi@filecc.dev
What data I process and why
Browsing data
To show you the pages, the hosting provider’s servers (Vercel) receive the technical data every browser sends: IP address, browser and operating system, requested page, date and time, referring page. They’re needed to run the site, protect it from abuse and fix errors.
Legal basis: legitimate interest in running and securing the site (Art. 6(1)(f) GDPR).
Anonymous statistics (Vercel Web Analytics and Speed Insights)
To know how many people visit the site, where they come from, which pages they look at, what they do (for example a click on “Let’s talk” or on a project’s website) and how fast the pages load. These tools use no cookies and store nothing on your device: a visitor is recognised by a fingerprint (hash) computed from the request, which is discarded after 24 hours, and the data can only be seen in aggregate.
Legal basis: legitimate interest in understanding how the site is used and improving it (Art. 6(1)(f) GDPR).
Experience analytics (Microsoft Clarity), only with your consent
If you accept, Microsoft Clarity records how you use the pages (clicks, taps, scrolling, mouse movements, screen size, device type, approximate country) to produce heatmaps and anonymised recordings of visits. The site has no forms; Clarity masks text typed into fields by default anyway. Clarity uses cookies (see below). If you don’t accept, Clarity isn’t loaded.
Legal basis: consent (Art. 6(1)(a) GDPR), which you can refuse or withdraw at any time from Cookie settings, with no effect on your use of the site.
Contact (e-mail and WhatsApp)
If you write to me, I process the data you send (name, e-mail address or phone number, the content of the message) to reply and, if you ask, to prepare a quote. If you write on WhatsApp, the service is provided by WhatsApp Ireland Ltd. (Meta group) under its own privacy policy.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and the legitimate interest in handling the conversation (Art. 6(1)(f) GDPR).
Cookies and other data on your device
The site stores on your device only what it needs to work, plus Clarity’s cookies if you accept them. On your first visit a banner asks you to choose: “Accept” and “Reject” carry the same weight, and closing the banner with the × counts as rejecting. Your choice is remembered for 6 months and you can change it any time from Cookie settings, at the bottom of every page.
| Name | Type | What it’s for | Duration |
|---|---|---|---|
cc_cookie |
Technical, cookie | Remembers your cookie choices | 6 months |
locale-astro |
Technical, cookie | Remembers the site’s language | 1 year |
theme |
Technical, localStorage | Remembers the light or dark theme you chose | Until you delete it |
dock-closed |
Technical, sessionStorage | Keeps the “Got a project in mind?” bar closed during the visit | Until the tab is closed |
_clck |
Analytics, Clarity cookie (with consent) | Recognises the same browser from one visit to the next | 1 year |
_clsk |
Analytics, Clarity cookie (with consent) | Links the pages seen in the same visit | 1 day |
CLID, MUID, ANONCHK, SM, MR |
Analytics, third-party cookies on clarity.ms and bing.com (with consent) | Used by Microsoft to make Clarity work | Up to 1 year |
You can also block or delete cookies in your browser’s settings.
Who I share data with
Data is not sold or used for advertising. It’s processed, on my behalf or as independent controllers, only by the providers of the services the site uses:
- Vercel Inc. (United States): hosting, anonymous statistics and performance measurement, as a processor.
- Microsoft (Microsoft Ireland Operations Ltd. and Microsoft Corporation): Clarity, only with your consent. Microsoft’s privacy statement.
- My e-mail provider and, if you write there, WhatsApp Ireland Ltd., to receive your messages.
Transfers outside the European Union
Vercel and Microsoft may process data in the United States. Transfers rely on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework, for certified providers, or on the standard contractual clauses approved by the Commission (Art. 46 GDPR).
How long
- Browsing data: for the short period the hosting provider keeps its technical logs.
- Anonymous statistics: in aggregate only; the visitor fingerprint is discarded after 24 hours.
- Clarity: according to Microsoft’s retention periods (30 days for recordings, up to 13 months for aggregated data and saved recordings).
- Messages: as long as needed to reply; if work follows, for the length of the engagement and then as required by law (10 years for tax and accounting records).
Your rights
At any time you can ask me to access your data, correct it, delete it, restrict its processing, receive it in a machine-readable format and object to processing based on legitimate interest (Articles 15–21 GDPR), by writing to hi@filecc.dev. You can withdraw your cookie consent from Cookie settings: withdrawing doesn’t affect what was done before.
If you believe your data is processed unlawfully, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority of the EU country where you live.
I make no automated decisions and do no profiling (Art. 22 GDPR). The site is not aimed at children under 14.
Changes
If something changes, for example a new tool, I’ll update this page and the date at the top. If new consent is needed, the banner will ask you again.