Skip to content

GET/en/privacy

Privacy

What data this site collects, why, and for how long.

controller
Valerio Evangelista
updated
16 October 2026

The contact form

If you write to me through the form, I use what you send only to reply to you, which is why every field is required.

data
Name, email address and message
legal basis
GDPR Art. 6(1)(b), if the message is about a job or a collaboration with youGDPR Art. 6(1)(f), my legitimate interest in replying, in any other case
retention
Until I reply, then at most 12 months in my inbox.
provider
Resend, Cloudflare and Google

Browsing

The server that hosts the site records the requests it receives, to keep it running and to stop abuse, such as repeated messages from the form.

data
IP address, page requested, time of the request and browser
legal basis
GDPR Art. 6(1)(f), the legitimate interest in keeping the site running and secure
retention
Vercel keeps the logs for 1 hour.
provider
Vercel

Statistics

Vercel Web Analytics counts the visits and Speed Insights measures how fast the pages are. They use no cookies and show me aggregated figures only: neither tells me who you are.

data
Page visited, referring site, approximate location, browser and operating system, device type and page speed
legal basis
GDPR Art. 6(1)(f), the legitimate interest in knowing which pages are read and how fast they are
retention
Vercel deletes the code that tells one visitor from another after 24 hours: only aggregated figures remain.
provider
Vercel

Providers

The services the site relies on, which process the data above.

resend
Plus Five Five, Inc., United States.Delivers the messages of the form to my inbox, and keeps a copy for 30 days.The transfer to the United States rests on its certification under the EU-US Data Privacy Framework, which the European Commission recognises as adequate.
cloudflare
Cloudflare, Inc., United States.Forwards the mail of valeva.dev to my inbox.The transfer to the United States rests on its certification under the EU-US Data Privacy Framework, which the European Commission recognises as adequate.
google
Google LLC, United States.Hosts my Gmail inbox, where the messages stay.The transfer to the United States rests on its certification under the EU-US Data Privacy Framework, which the European Commission recognises as adequate.
vercel
Vercel Inc., United States.Hosts the site, its logs and its statistics.The transfer to the United States rests on its certification under the EU-US Data Privacy Framework, which the European Commission recognises as adequate.

Your rights

You can exercise them at any time by writing to me at me@valeva.dev. I do not use your data for profiling or marketing.

art. 15
Know what data I hold about you, and get a copy.
art. 16
Have them corrected.
art. 17
Have them erased.
art. 18
Restrict their processing.
art. 20
Receive them in a machine-readable format.
art. 21
Object to the processing based on legitimate interest.
art. 22
Not be subject to automated decisions: the site makes none.

Cookies

The site sets no cookies.