About this site

Privacy notice

Updated on 1 November 2026

This notice describes data processing when you visit the Droidsembly site or contact its controller. The site showcases a personal project: it does not offer registration or purchases. The form lets you request information and ask to be contacted.

1. Controller and contact details

The data controller is Rosario Moscato. For information, requests about your data or to exercise your rights, write to ros.moscato@gmail.com.

2. Browsing and operational data

Hosting the site on Vercel involves processing technical data needed to deliver pages and protect the service, such as IP address, browser information, requested resources, date and time and diagnostic data. These are used to make the site available, handle errors and prevent abuse. The legal basis is the legitimate interest in site availability and security under Article 6(1)(f) GDPR. The controller does not use these data for advertising.

3. Optional statistics with Vercel Web Analytics

Statistics are enabled only if you accept analytics. The legal basis chosen for this site is consent under Article 6(1)(a) GDPR. Declining does not prevent browsing. You can change your choice at any time through Privacy preferences in the footer.

According to Vercel documentation, the service does not use third-party cookies to identify visitors: it uses a hash derived from the request and discards the temporary session identifier after 24 hours. Visit data may include the page visited, referral source, date and time, approximate location, device type, browser and operating system. The controller views aggregate statistics. The site sends no custom events or account identifiers; it removes query strings and fragments from transmitted URLs. The 24-hour period relates to the session and does not mean all aggregate reports are deleted. For details, see: Vercel Web Analytics privacy.

4. Preferences on your device

Your analytics choice, its date and the notice version are stored in localStorage under the key droidsembly.privacy.v1, valid for up to six months. On the first visit after expiry, the preference is ignored and removed; you can delete it earlier in your browser settings. This technical storage is needed to respect your preference; it contains no name or email and is not transmitted to the controller. If local storage is blocked, the choice applies only to the open page.

5. Contact requests and email messages

The form collects first name, last name and email, which are needed to handle your request and contact you. Providing these details is optional, but the form cannot be submitted without them. It does not subscribe you to newsletters or promotional communications. Processing serves to respond to your request under Article 6(1)(b) GDPR for requested pre-contractual steps and, in other cases, Article 6(1)(f) for the legitimate interest in answering correspondence. A Vercel function processes the form and Resend (Plus Five Five, Inc.) delivers the email to the controller’s mailbox. The site does not create a contact database.

If you send a request, the controller processes your email address, message content and any data you choose to provide in order to reply. The legal basis is the legitimate interest in handling correspondence and, where relevant, steps requested before a potential relationship under Article 6(1)(f) or (b) GDPR. The listed address uses Gmail: email processing also involves Google under the terms applicable to that service. The site does not embed Google tools or load remote fonts.

6. Recipients and transfers

Data may be processed by necessary technical providers: Vercel for hosting and, with consent, analytics; Resend for delivering form requests; Google for the Gmail mailbox. For Resend, see the Privacy Policy and the Data Processing Addendum, including the applicable safeguards for international transfers. The controller does not sell or publicly disclose data. Providers may also process data outside the European Economic Area. For Vercel, the Data Processing Addendum describes applicable contractual safeguards, including standard contractual clauses where required. Email is subject to the Google privacy information. The controller uses these services under the applicable agreements.

7. Retention

• Technical data: for the periods set by the hosting service and project configuration, within the limits necessary for delivery, diagnostics and security.
• Analytics: temporary identifier discarded after 24 hours according to Vercel; aggregate reports available within the limits of the active plan and service documentation.
• Privacy preference: valid for up to six months; the expired record is removed on the first subsequent visit unless you change or delete it earlier.
• Form requests and emails: for as long as needed to handle the request and related obligations, or to protect a legal right where necessary.

8. Your rights

Where provided by Articles 15–22 GDPR, you may request access, rectification, erasure, restriction, portability and objection. You may withdraw analytics consent without affecting prior processing. Write to the controller with any requests. You have the right to lodge a complaint with the competent authority; in Italy, the Italian Data Protection Authority. The controller does not carry out automated decision-making with legal effects on visitors.

9. External links and changes

External website links and the email link are activated at your choice: destination services follow their own privacy notices. This page is updated when the site, providers or processing purposes change.