Privacy Policy

The data controller is Federico Bebber (Italian Tax Code: BBBFRC74H30L483P), reachable at info@federicobebber.com.

Depending on how you use the site, the following data may be collected:

• Browsing data: pages visited, browser type, operating system and approximate usage statistics, collected in aggregated and anonymous form through Google Analytics 4, and only after your consent. Before consent, GA4 runs in cookieless mode (Google Consent Mode v2) and stores nothing on your device.
• Chat data: messages you type in the on-site chat, together with an anonymous session identifier. Messages addressed to Federico are forwarded to his Telegram account; conversations with the AI characters are processed by Google Gemini to generate replies. No account or identification is required.
• Anti-abuse data: an anti-spam challenge (Cloudflare Turnstile) and rate limiting protect the chat and the contact form. For rate limiting, the IP address is stored only as a salted, irreversible hash.
• Contact data: name, email address and message content you voluntarily submit through the contact form, delivered to the controller by email.
• Cookies: please refer to the dedicated Cookie Policy for full details.

Personal data is processed for the following purposes:

• Responding to messages sent through the on-site chat and the contact form
• Operating the chat itself, including the optional AI-character conversations
• Preventing spam and abuse of the chat and forms (security)
• Aggregate and anonymous web traffic statistical analysis (subject to consent)
• Legal obligations and judicial protection

Processing is based on: (a) the data subject's consent for analytics and marketing cookies; (b) the controller's legitimate interest for security, anti-abuse measures and strictly necessary technical data; (c) the execution of pre-contractual measures for contact and chat requests.

Data is processed using electronic and digital tools, following logic strictly related to the stated purposes and in a manner that ensures the security and confidentiality of the data. No individual profiling activities are carried out.

Personal data is not sold. It may be disclosed to the following service providers, acting as data processors, strictly for the purposes above:

• Vercel Inc.: site hosting
• Sanity AS: content management and delivery
• Supabase Inc.: chat session and message storage
• Telegram: delivery of chat messages addressed to Federico
• Google LLC: aggregated analytics (GA4, subject to consent) and AI replies in the chat (Gemini)
• Cloudflare Inc.: anti-spam protection (Turnstile)
• Upstash Inc.: rate limiting (salted IP hash only)
• Mux Inc.: video streaming
• Competent authorities, upon request and within the limits of the law

Some service providers are based in the United States or other non-EU countries. Transfers occur on the basis of Standard Contractual Clauses approved by the European Commission and/or the EU-US Data Privacy Framework.

Data submitted through the contact form is retained for the time necessary to fulfil the request and in any case no longer than 12 months. Chat conversations are retained for the time necessary to handle the exchange and are deleted upon request. Aggregate analytics data is retained for 14 months (GA4 default setting).

Under Articles 15–22 of EU Regulation 2016/679 (GDPR), data subjects have the right to access, rectify, erase, restrict, object to processing, and request portability of their data. To exercise these rights, please write to info@federicobebber.com.

You may also file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

The controller reserves the right to modify this policy at any time by publishing the updated version on this page.