Privacy, explained clearly

Who manages the data

Site owner: Salvatore Mosaico · Via Aurelia 233 17025 Loano. Contact for privacy questions: info@a041.org.

Data that may be collected

We collect only what is needed to provide and protect the service.

• Technical request data, such as IP address, date, time, requested page, and essential browser information, which may appear in server logs.
• The first-party technical access log stores visited pages, internal or external clicks, 404 errors, opening and submitting a search, reading-control actions, and a reduced referrer. Search terms are not linked to a visitor ID: they are counted in a separate table by day and language; empty phrases, email addresses, URLs and long numbers are not retained. The log does not store IP addresses in plain text: it calculates a pseudonymous HMAC code that changes daily, so “visitors” estimates visitor-days. It adds no cookies, excludes recognised bots, and records no event when the browser sends GPC or DNT. Expired rows and counts are progressively removed after 90 days when the site is next active.
• If you use the admin area, account details, login attempts, and administrative activity needed for security and content management.
• When you take a quiz, the random question selection, answers, score, an anonymous attempt identifier, and a pseudonymised connection fingerprint needed for scoring and abuse prevention.
• When you open Find the Matching Symbol, the nickname, room code, role (P1, P2, or spectator), and temporary scores needed for the match.

Public quizzes, games, and articles do not require an account. Find the Matching Symbol asks only for a temporary nickname to identify you in the room.

Why we use this data

Today we use technical data to deliver requested pages, load Bootstrap, protect the site, score quizzes and limit abuse, manage the admin session and, when you open Find the Matching Symbol, the technical room session. The first-party log provides page, click, interface-action, search-submission and error statistics; eligible search terms are aggregated separately by day and language without a visitor ID to improve content and navigation. We add no cookies and load no third-party analytics or marketing tools.

Our basis for handling data

Technical data is handled to provide the requested page and for the legitimate interest of protecting, maintaining, and improving the site and its content. The first-party log operates on this basis with data minimisation and respect for GPC and DNT signals. The quiz session and attempt record score the requested activity and prevent abuse; the admin session manages authorised access, and the Dobble session provides the requested match. These necessary functions do not require consent. Optional analytics and marketing tools remain disabled.

How long it is kept

Access-log rows and daily search-term counts expire after 90 days; the application removes them in batches when the site is next active. Quiz attempts, including answers, scores, and the pseudonymised fingerprint, become eligible for deletion after 90 days; the application removes them progressively while quizzes are active. Temporary results remain in the quiz session for the configured period. The Dobble cookie ends when the browser is closed or the game session expires, and room data remains only for its configured technical lifetime.

Who it may be shared with

Essential technical providers, such as hosting and maintenance services, may handle data only to deliver the service. We do not sell personal data.

Bootstrap through jsDelivr

To load the Bootstrap files, the browser contacts cdn.jsdelivr.net. jsDelivr and its CDN providers receive technical request data such as the IP address, requested resource, date, time, and essential browser and referrer information. jsDelivr states that this data is used for technical analytics and security without tracking individual users.

Processing outside the European Economic Area

Bootstrap file requests may be handled by jsDelivr’s global network and its CDN providers, including outside the European Economic Area. Current providers and safeguards are listed in jsDelivr’s documentation. No data is transferred to analytics or marketing tools because none are active.

How we protect it

We use secure connections, access controls, protected sessions, and technical logs to reduce unauthorized access and abuse.

Your choices

You do not need to make a choice about optional cookies because none are active today. The technical log adds no cookies and honours GPC and DNT signals sent by the browser. The Dobble session is created only when you open the game and is necessary for room play. You can contact the site owner with questions about technical data, the game, or the admin area.

Automated decisions and profiling

We do not use data to make automated decisions that have effects on people, and we do not carry out profiling.

Possible future public accounts

Public registration is not active. Before enabling it, we will update this notice with the required data, purposes, legal basis, retention periods, and rights.

Newsletter

We process your email, language, subscription status and dates based on consent to send occasional updates. Confirmation expires after 48 hours. Administrative cleanup removes expired requests and subscriptions cancelled over 30 days ago; active subscriptions remain until withdrawal or service closure. Queues record delivery outcomes: deleting a subscriber removes their individual queue data, retaining aggregate totals only. Hosting and email providers process data to deliver the service. We do not use tracking pixels. Forms use a technical session cookie for security and temporary anti-abuse hashes, removed during subsequent operations after their one-hour expiry. Email links contain personal tokens: do not share them. You can withdraw consent at any time by unsubscribing or contacting the controller. Backups follow the service retention schedule.

Your rights

Where applicable, you can request access, correction, deletion, restriction, or portability of your data and object to its use. You can also withdraw any future consent without affecting earlier processing.

If you believe your data is not being handled correctly, you can lodge a complaint with the Italian Data Protection Authority.

Cookies and preferences

The Cookie page describes the necessary technical cookies currently in use. The first-party access log sets no additional cookie; the analytics-cookie category remains disabled, so no preferences panel is required.