NOTICE · ART. 13 GDPR

Privacy

No ads, no profiling. I only collect what I need to reply to you and to keep the whiteboard clean.

Updated 29 Oct 2026
01

Who is the controller

Giovanni Rapa, private individual. For any request: giva@giovannirapa.com

02

What I collect and why

Whiteboard
The drawing and the name or alias you sign it with. They are published on the site.
IP fingerprint
A hash of your IP address, not the address itself. It's only used to limit spam and abuse on the whiteboard. It is not published.
Cloudflare Turnstile
Technical browser signals to check that you are a person, on the whiteboard and contact form.
Contact form
Name, email and message. I only use them to reply to you.
Comments (giscus)
Below the posts, only if you press "Load comments": your browser connects to giscus.app and GitHub, which process your GitHub account data under their own terms. The choice is saved in this browser.
03

Legal basis

Legitimate interest in protecting the site from abuse (art. 6.1.f) for the IP fingerprint and Turnstile. Your request (art. 6.1.b) for the contact form. Your consent, given when you submit, to publish the drawing.

04

How long

IP FINGERPRINT
30 days
DRAWINGS
until you ask me to remove them
MESSAGES
12 months
05

Who else processes them

Cloudflare, which hosts the site and provides Turnstile, as processor. Transfers outside the EU are covered by the EU-US Data Privacy Framework. I don't sell or share data with anyone.

06

Cookies

No profiling cookies and no analytics. That's why there is no banner.

07

Your rights

You can ask to access, correct or delete your data, restrict its use or object, by writing to giva@giovannirapa.com. If you think I'm mishandling it you can complain to the Italian Data Protection Authority (Garante).