Privacy, explained clearly

Who manages the data

Site owner: Salvatore Mosaico · Via Aurelia 233 17025 Loano. Contact for privacy questions: info@a041.org.

Data that may be collected

We collect only what is needed to provide and protect the service.

• Technical request data, such as IP address, date, time, requested page, and essential browser information, which may appear in server logs.
• The first-party technical access log stores visited pages, internal or external clicks, 404 errors, and a referrer reduced to the data needed. It does not store the IP address in plain text: it calculates a pseudonymous HMAC code that changes each day, so “visitors” is an estimate of visitor-days and does not identify people with certainty. It adds no cookies, excludes recognised bots, and does not record the event when the browser sends GPC or DNT. After 90 days, expired rows are progressively removed when the site is next active.
• If you use the admin area, account details, login attempts, and administrative activity needed for security and content management.
• When you take a quiz, the random question selection, answers, score, an anonymous attempt identifier, and a pseudonymised connection fingerprint needed for scoring and abuse prevention.
• When you open Find the Matching Symbol, the nickname, room code, role (P1, P2, or spectator), and temporary scores needed for the match.

Public quizzes, games, and articles do not require an account. Find the Matching Symbol asks only for a temporary nickname to identify you in the room.

Why we use this data

Today we use technical data to deliver requested pages, load Bootstrap, protect the site, score quizzes and limit abuse, manage the admin session and, when you open Find the Matching Symbol, the technical room session. The first-party log provides aggregate page, click, and error statistics for site maintenance and improvement without adding cookies. We load no third-party analytics or marketing tools.

Our basis for handling data

Technical data is handled to provide the requested page and for the legitimate interest of protecting, maintaining, and improving the site and its content. The first-party log operates on this basis with data minimisation and respect for GPC and DNT signals. The quiz session and attempt record score the requested activity and prevent abuse; the admin session manages authorised access, and the Dobble session provides the requested match. These necessary functions do not require consent. Optional analytics and marketing tools remain disabled.

How long it is kept

Access-log rows expire after 90 days; the application removes them in batches when the site is next active. Quiz attempts, including answers, scores, and the pseudonymised fingerprint, become eligible for deletion after 90 days; the application removes them progressively while quizzes are active. Temporary results remain in the quiz session for the configured period. The Dobble cookie ends when the browser is closed or the game session expires, and room data remains only for its configured technical lifetime.

Who it may be shared with

Essential technical providers, such as hosting and maintenance services, may handle data only to deliver the service. We do not sell personal data.

Bootstrap through jsDelivr

To load the Bootstrap files, the browser contacts cdn.jsdelivr.net. jsDelivr and its CDN providers receive technical request data such as the IP address, requested resource, date, time, and essential browser and referrer information. jsDelivr states that this data is used for technical analytics and security without tracking individual users.

Processing outside the European Economic Area

Bootstrap file requests may be handled by jsDelivr’s global network and its CDN providers, including outside the European Economic Area. Current providers and safeguards are listed in jsDelivr’s documentation. No data is transferred to analytics or marketing tools because none are active.

How we protect it

We use secure connections, access controls, protected sessions, and technical logs to reduce unauthorized access and abuse.

Your choices

You do not need to make a choice about optional cookies because none are active today. The technical log adds no cookies and honours GPC and DNT signals sent by the browser. The Dobble session is created only when you open the game and is necessary for room play. You can contact the site owner with questions about technical data, the game, or the admin area.

Automated decisions and profiling

We do not use data to make automated decisions that have effects on people, and we do not carry out profiling.

Possible future public accounts

Public registration is not active. Before enabling it, we will update this notice with the required data, purposes, legal basis, retention periods, and rights.

Your rights

Where applicable, you can request access, correction, deletion, restriction, or portability of your data and object to its use. You can also withdraw any future consent without affecting earlier processing.

If you believe your data is not being handled correctly, you can lodge a complaint with the Italian Data Protection Authority.

Cookies and preferences

The Cookie page describes the necessary technical cookies currently in use. The first-party access log sets no additional cookie; the analytics-cookie category remains disabled, so no preferences panel is required.