Privacy notice · Art. 13 EU Regulation 2016/679 (GDPR)
Privacy and cookies.
Last updated: 28 October 2026
In short. This website has no forms, no sign-up, no cookies, no advertising and no profiling. It counts visits anonymously, without cookies and without knowing who you are. If you write to me or call me, I use your details only to reply.
1. Who is responsible
The data controller is Mattia Crapanzano, freelancer, Italian VAT number 05209460236, registered office Via Campania 1, 37045 Legnago (Verona), Italy.
Contact: crapanzano.work@gmail.com · certified email mattia.crapanzano@ultracert.it · phone +39 351 465 8810.
2. What data and why
Technical browsing data
The website is hosted by GitHub Pages (GitHub, Inc., United States). Like any web server, it records technical connection data such as your IP address and browser type to run the site and protect it from abuse. Legal basis: legitimate interest in providing a secure website (Art. 6(1)(f) GDPR).
Anonymous statistics
To understand how many people visit and what they find useful, I use Umami Cloud (Umami Software, Inc.), with data stored in the European Union. Umami uses no cookies, stores nothing on your device and cannot identify visitors: it counts, in aggregate, page views, country, device type, referring site and a few actions on the site (for example opening a panel in the workshop, downloading a résumé, clicking a contact link). It does not record what you type in the search box. Legal basis: legitimate interest in improving the site (Art. 6(1)(f) GDPR).
When you contact me
If you email me, call me or send a message, I use the details you give me (name, contact details, message) only to reply and, if we start working together, to manage the job (Art. 6(1)(b) GDPR) and meet tax and legal obligations (Art. 6(1)(c) GDPR). The "Message me" button opens WhatsApp, a Meta service: WhatsApp's privacy policy also applies.
Client area
Clients I work with get a private area (crapanzano.work/area-clienti) where they can read and download the documents that concern them, such as quotes, deliveries and invoices. Each client has a personal address, with a reference code instead of their name, and a separate access code: documents are published only in encrypted form and open in the browser of whoever enters the code, which is never sent or stored. The area uses no cookies, stores nothing on the device and does not count visits. Data processed: the client's name and the content of the documents, to manage the working relationship (Art. 6(1)(b) GDPR). Clients can ask at any time to change their code or remove their documents by writing to crapanzano.work@gmail.com.
Third-party content
- YouTube and Vimeo videos: thumbnails are stored on this site and videos load only when you press play, YouTube in privacy-enhanced mode (youtube-nocookie.com) and Vimeo with "do not track" on. From then on Google or Vimeo receive browsing data under their own policies.
- 3D workshop libraries: the graphics engine (three.js) is delivered by the jsDelivr network, which receives your IP address to send the files.
- External links (LinkedIn, Instagram, client websites): when you open them you leave this site and their policies apply.
- Fonts are hosted on this site and are not requested from Google.
3. Cookies and browser storage
This website uses no cookies, neither technical nor profiling, and shows no advertising. That is why there is no consent banner.
The site saves only a few technical preferences in your browser (localStorage and sessionStorage). They stay on your device and are not sent to anyone:
| Name | Purpose | Duration |
|---|---|---|
| lab-lang | remember your language (Italian or English) | until you delete it |
| lab-audio | remember whether music and sounds are on or off | until you delete it |
| intro, wipe, chatSeen | on the classic site: avoid repeating the intro animation and the invitation to write, handle transitions between pages | until the tab is closed |
These are technical tools needed for the service you request (Art. 122 of the Italian Privacy Code, Legislative Decree 196/2003) and do not require consent. You can delete them at any time from your browser settings.
4. How long
- GitHub technical data: for the period set by GitHub for security and operation.
- Umami statistics: anonymous and aggregated only, for the period set by the service.
- Messages and contacts: as long as needed to reply and manage any working relationship; tax documents for ten years, as required by law.
- Client area documents: for as long as the working relationship lasts, or until the client asks for them to be removed.
5. Who receives the data, and where
Data is never sold or shared for marketing. It may be processed by the providers listed above (GitHub, Umami, jsDelivr and, only if you press play, Google/YouTube or Vimeo), each for its own part. GitHub, Google and Vimeo are based in the United States and take part in the EU-U.S. Data Privacy Framework, recognised as adequate by the European Commission.
6. Your rights
You can ask at any time to access, correct, delete or restrict your data, object to processing or receive it in a portable format (Articles 15–22 GDPR) by writing to crapanzano.work@gmail.com. I reply within one month.
If you believe your data is being processed unlawfully, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
7. Other information
I make no automated decisions and do no profiling. Giving your details when you contact me is optional, but without them I cannot reply. This notice may be updated: the date at the top shows the latest version.