Privacy & cookies

xem

This website is presented under the project name xem. This name does not identify a registered company or establish the legal identity of the person operating the website. That information remains to be completed.

Browsing this website

The website does not use advertising trackers, audience analytics, fingerprinting, session recordings or third-party embeds. Fonts and visual assets are served with the site. There are no visitor accounts, mailing lists or application databases.

Loading a website still involves technical data. Vercel, the hosting provider, processes requests and may process IP addresses, browser and device information, requested URLs and timestamps to deliver and protect the service. Removing analytics does not remove this infrastructure processing.

See Vercel's privacy notice for its own processing. This site does not promise that Vercel keeps no logs or that all hosting data stays in the European Economic Area.

Cookies and browser storage

The website code does not set cookies or store information in localStorage, sessionStorage or IndexedDB. Display preferences apply only to the current page session. No optional analytics or advertising tools are loaded, so no consent banner is used for those purposes.

The hosting provider may use technical security mechanisms to deliver and protect the site. Any future addition of optional tracking would require this notice and the site's consent controls to be reviewed first.

Contact messages

The planned contact service uses an email address and message, with a name as an optional field, solely to handle the request. It sends messages through Gmail to a private inbox. The recipient's email address is held on the server and is not published in the website code. No automatic marketing subscription is created.

When activated, this service will process contact data through Vercel and Google. Messages will remain in the receiving mailbox until deleted; the website cannot automatically remove them from Gmail. Google has its own privacy policy and data retention processes. The applicable legal basis, retention criteria and arrangements with providers must be completed before activation.

The application does not write message content to a database or application logs. Its abuse controls use short-lived, keyed digests in server memory for rate limits and duplicate requests. They are not advertising identifiers. Infrastructure logging is separate.

Your rights

Where the GDPR applies, you may request access, correction, deletion or restriction of your personal data, and exercise portability or objection rights where applicable. You may also complain to a supervisory authority, including the Italian Data Protection Authority. A working contact route and the operator's legal identity must be published before the contact service opens.

External websites

Links to Hostem, Carem and other websites take you to services governed by their own privacy information. Those services are not loaded as embedded content on this website. This site sends no referrer header when you follow a link.