Website Privacy Policy

1Scope of this policy

This policy describes how data is handled on the My Safe Circle website. The mobile app has separate notices available on the App Privacy and App Terms pages.

The data controller is Giovanni Rizzotti, operator of My Safe Circle. For privacy and data rights, email [email protected]; you do not need to use the contact form.

2Data we collect

When you use the contact form, you submit your name, email address, and message. The server stores this data together with the selected language and the UTC date and time of the request.

The server may also generate technical data and logs needed to deliver and protect the site, such as IP address, date and time, requested resource, browser or device type, and errors.

The language you chose and the fact that you dismissed the language-switch suggestion are stored locally in your browser.

The contact form is protected by Cloudflare Turnstile. Cloudflare processes technical connection and browser data to distinguish visitors from automated submissions. Your name, email and message text are not included in the verification request. We use this service to protect the form from spam. See the Cloudflare Turnstile privacy notice.

If you email us directly, we process the sender address, content and attachments you send to handle your request. The published mailbox is provided by Gmail (Google).

We measure website visits and store interactions using Cloudflare Workers and Analytics Engine. From 18 October 2026, version 2 records only fixed labels: source facebook/linkedin/instagram for campaign 1post, or google/bing/othersearch, direct, internal or referral for campaign website; medium, event pageview/storeopen/qrshown, store ios/android where applicable, placement auto/badge/footer/popup/link, version 2 and timestamp. The referrer is processed locally to select an allowed category: raw URLs and referrers, IP addresses and personal identifiers are not stored in the dataset. This tracking uses no cookies or browser storage and respects Do Not Track and Global Privacy Control. Cloudflare still processes the technical connection data needed to receive requests. A displayed QR does not indicate a scan or installation; storeopen indicates an attempt to open the store, not an installation.

3Purposes and legal bases

We use contact-form data to reply to your request and provide support. We process technical data and logs to operate and secure the site and diagnose errors. Local preferences remember your choices.

To understand in aggregate which pages are read, we use Cloudflare Web Analytics, a tool that does not use cookies and does not store anything in your browser. The applicable legal bases are taking steps requested by you, our legitimate interest in site security and operation, and our legitimate interest in measuring aggregate page usage.

These statistics assess visit sources, store openings and displayed QR codes in aggregate.

4Cookies and local preferences

The site does not use cookies, either of its own or from third parties. Only two preferences saved by your browser remain on your device: the language you chose and the fact that you dismissed the language-switch suggestion. You can remove them by clearing the site's data in your browser settings. See the Cookie Policy for details.

5Recipients and transfers

The hosting provider and authorized maintainers may process data to deliver and protect the site. Cloudflare, Inc. provides protection, page delivery, Web Analytics and Turnstile. For anti-spam it acts as our processor; to improve Turnstile it also processes technical signals as an independent controller under its own notice. We do not sell personal data. Disclosures to authorities occur as required by law.

Providers may process data outside the European Economic Area, including the United States. Cloudflare describes applicable transfer mechanisms in its data processing addendum and Turnstile processing in its specific notice. You may ask us about applicable safeguards.

The email channel involves Google as the Gmail provider, under its privacy policy.

6Retention and security

Contact messages are stored in a server file that is not publicly accessible. The intended retention is 60 days after receipt: older messages are removed by periodic automatic cleanup and on new submissions, without guaranteeing deletion at the exact end of day 60. Technical logs follow the server’s operational and security configuration. We use access controls and protected communications; no system guarantees absolute security.

The automatic 60-day cleanup applies to the form file, not the mailbox. Email correspondence is retained as needed to handle the request and any legal obligations or protection of rights.

Campaign data in Analytics Engine is retained for three months.

7Your choices and no ads

The site does not display personalized ads, does not sell products directly, and does not use contact-form data to send promotional communications. The statistics do not use cookies or identifiers, so there is no consent to withdraw.

8Rights and contact

Depending on applicable law, you may request access, rectification, erasure, restriction, portability, or object to processing, and you may withdraw consent without affecting earlier processing. You may also complain to the competent supervisory authority. For privacy requests, use our contact form. We may update this policy and will show the new date here.

To exercise your rights, email [email protected] directly, without passwords or unnecessary data. For processing based on legitimate interests, you may object as provided by law. We normally respond within one month and explain any permitted extension. You may complain to the competent supervisory authority; in Italy, the Garante per la protezione dei dati personali.