Privacy
This notice covers the demo site at nextstory.marcopontili.com. The source code is public; running it yourself is outside this notice.
Controller
Marco Pontili
Contact: marcopontili.com/contact
What is processed
Analytics: self-hosted Matomo
This site uses a self-hosted, cookieless installation of Matomo, run by the controller. No cookies are set and nothing is stored on your device. IP addresses are anonymised. The browser's Do Not Track signal is honoured: when it is on, no page view is recorded.
When an AI assistant fetches a page on a user's behalf (for example ChatGPT-User or Claude-User), the server records that request in Matomo with its URL and user agent. No browser data is involved.
Data processed: anonymised IP address, pages visited, referrer, browser and device type, and link clicks. Place of processing: European Union (the owner's Matomo server, hosted by Netsons S.r.l., Italy).
Hosting: Vercel
The site is hosted by Vercel Inc. (United States), acting as processor. Vercel processes request data such as IP address, user agent, and timestamps to deliver and secure the site. Transfers to the United States rely on Vercel's Data Processing Addendum, which incorporates the EU Standard Contractual Clauses.
Content and fonts
Page content is loaded from Storyblok on the server; your browser does not contact Storyblok on public pages. Fonts are served from this site, with no requests to Google.
Purposes and legal basis
Hosting data is processed to operate and secure the site. Analytics data is processed for aggregate, privacy-friendly traffic measurement. Both rely on legitimate interests under Art. 6(1)(f) GDPR. No marketing profiles are built and no data is sold or shared for advertising.
Cookies
Public pages set no cookies. Editors who open an authenticated preview from Storyblok receive a strictly necessary draft-mode cookie. No consent banner is shown because none is required for this behaviour.
Retention
Data is kept only as long as the purposes above require. Analytics reports hold aggregate data only.
Your rights
You may have the right of access, rectification, erasure, restriction, objection, and portability. Use the contact page above. You may lodge a complaint with the data protection authority where you live or work. The same rights and the same contact route apply wherever you are in the world.