Privacy Policy

Last updated: May 31, 2026

1. Introduction

Welcome to ghidini.net. I respect your privacy and am committed to protecting your personal data. This privacy policy explains how I handle information when you visit my website, in compliance with the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller for this website is Alessandro Ghidini, established in Italy. You can contact me regarding any privacy matter at: privacy@ghidini.net

3. What Data I Collect

This is a static website. By itself, it does not collect, store, or process any personal data. Specifically:

  • No first-party cookies are set by this website
  • No user accounts or registration
  • No contact forms that store data
  • No analytics or tracking scripts
  • No advertising networks

Two forms of processing do occur and are described below: technical server logs created by my hosting provider (Section 5), and the optional comments section (Section 4), which only loads a third-party widget after you explicitly choose to load it.

4. Comments

Comments on blog posts and guides are powered by giscus, an open-source comment system built on GitHub Discussions.

The comments widget does not load automatically. A placeholder is shown until you click “Load comments”. Only then is the widget loaded from giscus.app, which embeds content from GitHub. This loading connects your browser to giscus.app and github.com, which may receive your IP address and set their own cookies. Because this happens only after your explicit action, the legal basis for this processing is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time by not loading the widget; if you have already loaded it, clearing your browser cookies and reloading the page restores the placeholder.

To post a comment you must additionally sign in with a GitHub account and authorize the giscus app. When you do so, your comment, GitHub username, and avatar are stored as a GitHub Discussion in this site’s public repository and are publicly visible. This processing is carried out by GitHub, Inc. and is governed by the GitHub Privacy Statement. You can edit or delete your comments at any time through GitHub.

5. Hosting

This website is hosted as a static site on Cloudflare (Cloudflare, Inc.). As is standard for web hosting, Cloudflare may process technical data such as your IP address, browser type, and request metadata in server and security logs to deliver the site and protect it against abuse. This processing is based on my legitimate interest in ensuring the security and availability of the website (Art. 6(1)(f) GDPR). Cloudflare acts as my processor and handles this data in accordance with its own privacy policy.

6. Third-Party Services

Fonts used on this website are self-hosted and served from this domain, so no font data is sent to third parties. The only third-party service that may receive your data is the giscus comments widget, and only after you choose to load it (see Section 4). Blog content may also link to external websites; following those links is subject to their own privacy policies.

7. International Data Transfers

Some of the processors named above (Cloudflare, Inc. and GitHub, Inc.) are based in the United States and may process data outside the European Economic Area. Where this occurs, the transfer is safeguarded by appropriate mechanisms under Chapter V of the GDPR, such as the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. Please refer to each provider’s privacy policy for details of the safeguards they apply.

8. Data Retention

I do not store personal data on my own systems. Server and security logs are retained by my hosting provider for the period set out in its policies. Comments remain published as GitHub Discussions until you or I delete them; you can remove your own comments at any time through GitHub.

9. Your Rights

Under the GDPR, you have the right to:

  • Access any personal data held about you
  • Rectification of inaccurate data
  • Erasure of your data
  • Restrict processing of your data
  • Data portability
  • Object to processing
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with a supervisory authority

To exercise any of these rights, contact me at privacy@ghidini.net. I will respond without undue delay and in any case within one month, as required by the GDPR. Note that comments and account data held by GitHub are controlled by GitHub; you may need to exercise some rights directly through your GitHub account. If you believe your rights have been infringed, you may lodge a complaint with your local data protection authority (in Italy, the Garante per la protezione dei dati personali).

10. Changes to This Policy

I may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.