Privacy Policy

Who is responsible for your data

Roberto Salodini is the data controller for GardaDay. Questions or requests about your data can be sent to roberto.salodini@gmail.com.

What we collect

If you register an account:

• Your email address and password (password is stored encrypted, never in plain text)
• The date you registered

If you submit an event, a correction, or a cover image:

• Your email address, linked to the submission, so we can follow up if needed
• The content of the submission itself
• The date and time of submission

If you send us feedback:

• Feedback is sent directly to our email via your own email client (a "mailto" link). We don't store feedback submissions in our database — it goes straight to our inbox, the same as any email you'd send us directly.

Automatically, as part of running the site:

• Standard hosting logs (e.g. IP address, browser type, pages visited) collected by our hosting provider for security and performance purposes. We don't use this data for tracking or advertising.

What we collect (and don't)

We use Vercel Analytics, a cookieless, privacy-focused analytics tool that doesn't use tracking cookies and doesn't collect personally identifiable information — it gives us aggregate traffic numbers (like how many people visited a page), not information about you individually. Beyond that, we don't run advertising cookies or any other third-party tracking, and we don't sell your data to anyone, for any reason.

Why we collect it

• Account email/password: so you can log in and submit events or corrections under your own name.
• Submission email: so we can moderate submissions responsibly and contact you if there's a question about something you submitted.
• Hosting logs: to keep the site secure and running properly.

The legal basis for this processing is your consent (given when you register or submit something) and our legitimate interest in running a functioning, moderated platform.

Where your data is stored

Your data is stored with our infrastructure providers:

• Neon (Postgres database) — event and submission data
• Vercel Blob — user accounts and uploaded images
• Vercel — site hosting

These providers process data on our behalf under their own security and compliance standards; we don't share your data with them for any purpose beyond running the site.

International data transfer: Neon and Vercel are US-based companies, so your data may be processed in the United States as well as the EU. Both rely on the EU Standard Contractual Clauses (and, for Vercel, the UK Addendum) as the legal safeguard for this transfer — the standard mechanism recognized under GDPR for exactly this situation.

Cookies

GardaDay uses one cookie: a session cookie that keeps you logged in after you register or sign in. This cookie is strictly necessary for the site to function and doesn't track you across other sites, so it doesn't require a consent banner under EU rules — but we're disclosing it here for transparency.

How long we keep your data

We keep account and submission data for as long as your account is active, or as long as the submission remains relevant to the site. If you ask us to delete your account, we'll remove your personal data within a reasonable time, except where we're required to keep records for legal reasons.

Your rights

If you're in the EU (or covered by similar data protection law), you have the right to:

• Ask what data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data
• Object to how we're processing your data

To exercise any of these rights, email roberto.salodini@gmail.com. We'll respond as promptly as we can.

You also have the right to lodge a complaint with your national data protection authority. In Italy, this is the Garante per la Protezione dei Dati Personali (garanteprivacy.it).

Children's privacy

GardaDay isn't directed at children, and we don't knowingly collect data from anyone under 16.

Changes to this policy

If we change what data we collect or how we use it, we'll update this page and change the "Last updated" date above. If the site starts using affiliate links, ads, or third-party tracking in the future, we'll update this policy to reflect that before making the change.

Contact

Questions about this policy or your data: roberto.salodini@gmail.com