Privacy policy

Last updated on September 25, 2026.

In short

This site uses no tracking cookies and loads nothing from third-party services. We count visits anonymously, without cookies and without keeping your IP address, to know how many people come, from where, and what they read. Beyond that, we only process what you write to us, through the contact form or by email, to reply to you.

Who is responsible

The data controller is Alexandre Montagna, doing business as Bussola (bussola.company). For any question about your data, write to or through the contact form.

What data we process

  • From the contact form: your name, email, business (if you give it), the topics you choose, and your message.
  • If you email us: your address and what you write.
  • To protect the form from abuse: the server uses your IP address for a few moments and keeps only an encrypted fingerprint of it, made with a key that changes every day and deleted within 48 hours. The address can’t be recovered from it.
  • To count visits: the page you open, the name of the site you came from (google.com, say, not the page), the campaign tags of the link if it has any, whether you use a phone, a tablet, or a computer, how long the page stays in view, and whether you send the form or click our email address. From the request the server determines your country, browser, operating system, and browser language; it shortens your IP address right away, then forgets it. The details are under Visit statistics.
  • Technical logs: like every web server, our hosting provider’s records requests (IP address, page, date, and time) for security reasons and keeps them for a limited time.

Why, and on what basis

  • To reply to your request and, if you want, prepare a quote: pre-contractual steps (GDPR art. 6(1)(b)).
  • To protect the site and the form from abuse: legitimate interest (GDPR art. 6(1)(f)).
  • To understand how the site is used and improve it, with anonymous, aggregate statistics: legitimate interest (GDPR art. 6(1)(f)).

Visit statistics

Each page sends our server a short message when you open it, one when you leave it, and one if you send the form or click our email address. The server removes the last part of your IP address right away, determines your country from it, and, together with your browser’s name, turns it into an encrypted fingerprint that is valid for today only: it tells which pages belong to the same visit, not who you are. The fingerprint’s key changes every night and the old one is deleted: the address can’t be recovered from the fingerprint, and we don’t recognize you from one day to the next.

At the end of each day the details become totals (how many people, which pages, from where) and are deleted, within 48 hours at the latest. Only the totals remain, for 25 months, and only the data controller sees them. No third-party service receives this data, and we don’t combine it with anything else, not even with the messages sent through the form.

We count visits to the previews of the sites we build for our clients, at bussola.company/client-name/, in the same way, to know whether and how they are seen before they go live. Each preview has its own counts and its own fingerprints, separate from this site’s and from the other previews’. There we also count the taps that lead to contacting or reaching the business (a phone number, WhatsApp, an email address, a map, a social profile, a payment) and the site’s own actions, such as an order or a booking sent: only the fact that they happened, never the number, the address, or the text of the message. The choice below also applies to the previews, in the same browser. Our clients’ sites, once they are live on their own domains, are not counted.

The Italian data protection authority treats statistics like these as technical cookies, which need no consent, when they are aggregate, cover a single site, mask the IP address, and don’t allow anyone to be singled out (Garante, guidelines on cookies and other tracking tools, June 10, 2021, § 7.2): that is why the site shows you no banner.

We don’t count people whose browser asks not to be tracked (Global Privacy Control or Do Not Track), automated programs, or anyone who chooses below not to be counted. Without JavaScript, visits are not counted.

How long we keep it

Messages from the form stay on the server for 12 months at most, then they are deleted automatically. The emails we exchange, including the copies of form messages that reach the studio’s mailbox, are kept for as long as we need them to handle your request. If you become a client, we keep our correspondence for as long as we work together and as the law requires.

Visit statistics: the details for 48 hours at most, the totals for 25 months.

Who can see it

Only us. The site is hosted by Hostinger International Ltd. in a data center in France, in the European Union, and the studio’s email is with Hostinger too: Hostinger processes the data on our behalf, as our processor. We never sell or share data with anyone, and we don’t use it for advertising.

Cookies

This site sets no cookies for its visitors and uses none to count visits. Only when Hostinger’s network needs to check that a visit comes from a real browser, a protection against attacks, it may set a technical session cookie (“hcdn”) that is deleted when you close your browser: it is there for security, not to recognize you, so it needs no consent. The area reserved for the data controller uses two technical cookies, only for whoever signs in there: one keeps them signed in, the other keeps their own visits to the site from being counted.

On your device the site stores only the choices you make, in your browser’s local storage: the light or dark theme, if you change it with the button at the top (under “bussola-theme”), and the choice not to be counted (under “bussola-stats”). They stay in your browser and are never sent to anyone. The site loads no fonts, scripts, or images from third-party services.

Your rights

You can ask us at any time to see, correct, or delete your data, to restrict its use, to object to its processing, and to receive it in a readable format (GDPR articles 15–22): write to or through the contact form. You can object to the visit statistics at any time, with the button under Visit statistics or with your browser’s Global Privacy Control setting. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.