Privacy Policy

Site Operator

This website is operated by Federico Cafagna, who acts as the data controller pursuant to GDPR Art. 13(1)(a).

For any privacy-related inquiries, you can reach the controller at: privacy@cafa.dev

Hosting & CDN — Cloudflare

This website is hosted and served by Cloudflare Inc. through Cloudflare Workers, which also acts as CDN and reverse proxy. To deliver and protect the site, Cloudflare processes technical data such as visitor IP addresses, browser information, requested URLs and access timestamps. The legal basis for this processing is GDPR Art. 6(1)(f) — legitimate interest, as it is technically necessary to serve the website securely. Data may be transferred to the United States under the EU-US Data Privacy Framework.

For security purposes, Cloudflare may set the following cookies:

• __cf_bm — bot management
• cf_clearance — security challenge verification

These cookies are strictly necessary for the security of the website and are exempt from consent requirements under ePrivacy Directive Art. 5(3).

No Analytics or Tracking

This website does not use any analytics services, tracking pixels, or advertising technologies.

External Links

This site contains outbound links to third-party websites (GitHub, LinkedIn). These sites have their own privacy policies, and the site operator is not responsible for their data processing practices.

Your Rights

Under GDPR Articles 15–21, you have the right to access, rectify, erase, restrict processing of, and port your personal data, as well as the right to object to processing. You can exercise these rights by contacting the controller. Since the data is operationally held by a third-party provider, the controller will assist you and forward requests as needed. You may also contact the provider directly:

• Cloudflare Privacy Contact

You also have the right to lodge a complaint with a supervisory authority. For Italy, this is the Garante per la protezione dei dati personali.

No Direct Data Collection

The site operator does not directly collect or store any personal data. All data processing described on this page is performed by a third-party infrastructure provider on behalf of the controller.