Privacy and cookies.

The data controller is Gabriele De Santis, the author of this portfolio. For any question about your data, write to me at desantis.gabriele97@gmail.com.

The site is hosted by Cloudflare, Inc. To deliver the pages and protect them from attacks, Cloudflare processes technical data such as your IP address, browser, the page requested and the time. I don’t use it to identify you.

Legal basis: legitimate interest in running the site securely (GDPR Art. 6(1)(f)).

On phones the home page can read the motion sensor, to roll the lens when you tilt the phone and split it when you shake it (on iPhone and iPad only if you tap “Tilt your phone” and allow it). This data stays on your device: the site doesn’t send or store it.

Only if you accept in the banner, the site loads Google Analytics 4 by Google Ireland Limited. It tells me which pages are viewed and for how long, on what kind of device and browser, where visits come from (for example a link on LinkedIn) and the city or country, derived from the IP address: Google Analytics 4 does not log or store IP addresses.

I don’t use this data for advertising or to profile you, and Google Signals is turned off. Visit data is kept in Google Analytics for 2 months.

Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.

After six months the banner asks you again. You can change your mind at any time, including from “Cookies” at the bottom of every page.

Change cookie choices

You can also delete cookies and site data from your browser settings.

Some pages show content from other services. When it loads, these services receive your IP address and may use their own cookies, under their own privacy policies:

• Vimeo, for videos. The player opens with the “Do Not Track” option, which asks Vimeo not to track the visit.
• Spline and unpkg.com, for the interactive 3D scenes.
• Figma, for the interactive prototypes, which only open when you press the button.

If you use the contact form, your name, email, and message pass through Cloudflare, which delivers them to me as an email in my Google Gmail inbox. The site doesn’t store them anywhere. The same applies if you email me directly at the address above.

I use this data only to reply to you and keep it in my mailbox for as long as our conversation needs it; you can ask me to delete it at any time.

To block spam, the form uses Cloudflare Turnstile, which automatically checks that a person is writing. It only loads once you start filling in the form, and it receives technical data such as your IP address and browser, which Cloudflare uses only for this check.

Legal basis: replying to your request (GDPR Art. 6(1)(b)) and legitimate interest in protecting the form from spam (Art. 6(1)(f)).

Some of the services listed are based in the United States. Transfers rely on the EU-U.S. Data Privacy Framework, for companies certified under it, or on the European Commission’s standard contractual clauses.

You can ask me to access your data, correct it, delete it, restrict its use, object to its processing, receive it in a readable format and withdraw your consent, by writing to the address above.

If you think your data is being handled improperly, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.