About this site
Privacy and cookies.
Last updated: .
Your privacy choices
Optional audience and performance measurement is disabled on all English pages and on the privacy pages. The English section does not load Google Tag Manager, Google Analytics, iubenda, Vercel Web Analytics, Speed Insights or the website’s web-vitals reporter. A choice previously made in the Italian section does not enable these tools on English pages. Technical processing needed to deliver the website and handle correspondence still takes place, as described below.
The Italian section provides an Italian-language consent panel. Its Measurement choice governs Google Analytics, Vercel Web Analytics, Speed Insights and the website’s web-vitals reporter together. You can change that choice through the permanent “Preferenze privacy” control on Italian pages. Withdrawing consent stops subsequent optional measurement; it does not undo data already sent or affect the lawfulness of processing before withdrawal.
Data controller
Matteo Vincenti is the controller of personal data processed through matteovincenti.com. For questions or to exercise your rights, write to info@matteovincenti.com.
Data, purposes and legal bases
The website has no public registration, contact forms or newsletter. The hosting infrastructure processes technical data, such as IP address, requested URL, date and time, browser and response status, to deliver pages, diagnose errors and prevent abuse. The legal basis is the legitimate interest in operating and securing the website (Article 6(1)(f) GDPR). These data are necessary to access the website.
If you send an email, your address, message and any attachments are used to handle your request. Messages sent to info@matteovincenti.com are forwarded by Cloudflare Email Routing to a Gmail mailbox managed by the controller. Providing information is optional, but without the necessary details it may not be possible to reply. The legal basis is the legitimate interest in responding to correspondence or, for requests about a professional engagement, steps taken at your request before entering into a contract (Article 6(1)(f) or (b) GDPR).
Optional measurement relies on consent (Article 6(1)(a) GDPR). The consent manager stores choices and records the evidence needed to respect them and demonstrate consent, in fulfilment of the applicable legal obligations, including Article 7(1) GDPR (Article 6(1)(c) GDPR). Hosting and security logs remain separate from optional measurement.
What we measure
After consent in the Italian section, the following tools measure visits and performance to understand which content is read and improve loading speed, responsiveness and visual stability. We use the reports for these purposes, without advertising campaigns, session recordings or custom analytics events. These tools are not required to use the website.
Google Analytics 4. Measures page views, scrolling, outbound clicks and file downloads, using browser and session identifiers, page addresses and titles, referrers, time, browser, operating system, device information and approximate location. Page addresses include their URL parameters, such as text entered in the blog search. Automatic measurement of embedded videos is also enabled in Analytics, although the public site does not currently include embedded videos. Google receives connection data and states that GA4 does not log or store IP addresses. This does not make all Analytics data anonymous. We do not intentionally send names, email addresses or message contents to Analytics; automatic email redaction is enabled. Google Signals, user-provided data collection, advertising personalisation and optional account data sharing are disabled. Google’s data collection documentation.
Google Tag Manager and iubenda. Tag Manager loads the consent manager and the authorised Google Analytics tag on Italian pages. The browser contacts Google to load the container and iubenda to display the consent interface before any optional measurement is authorised. These technical requests are distinct from Analytics measurement. iubenda manages the banner, preferences and consent records, which can include technical identifiers, IP address, choice, date and time, and the version of the information presented. iubenda consent-management privacy notice.
Vercel Web Analytics. Records page views, including navigation between pages: URL and route, filtered query parameters, referrer, time, approximate location, browser, operating system and device type. Vercel provides aggregate reports and distinguishes visitors using a hash derived from the request, without third-party cookies or identifiers shared across websites. The visitor session expires after 24 hours; this does not mean that the statistics are deleted after 24 hours.
Vercel Speed Insights. Uses 10% sampling to send performance measurements to Vercel. Reports can include URL and route, network speed, browser, device and operating system, country, event time and technical selectors for page elements involved in the metrics. Vercel states that these measurements are not linked to an individual visitor or IP address and do not reconstruct browsing sessions.
The website’s web-vitals reporter. With consent, independently samples 10% of eligible loads that start on the Italian home or profile page. It sends loading speed (LCP), responsiveness (INP) and visual stability (CLS) to this website, which records them in Vercel runtime logs. Reports contain the initial page path, metric name, value, change and rating, navigation type and a temporary metric ID. They exclude query strings, fragments, page content and persistent visitor IDs. Metrics can include later navigation within the same document, including to the blog. Collection does not start on blog, English or privacy pages and stops if consent is withdrawn. The library sends no reports to Google.
Only the custom web-vitals reporter excludes all query strings as described above; Vercel’s services have their own URL processing rules. Technical hosting and security logs are separate from these measurements.
You can read the privacy documentation for Web Analytics and Speed Insights, as well as the Vercel privacy policy.
Cookies and external links
On Italian pages, iubenda uses the necessary first-party cookies _iub_cs-s4735652 to remember privacy choices and _iub_previous_preference_id to link preference records. Both have a configured lifetime of 180 days. The site also stores the technical marker site:measurement-choice in the browser’s local storage. It records only whether the last confirmed Measurement choice was a grant or a refusal, so that measurement never starts before a choice is confirmed and a withdrawal made in another tab or page is respected. It has no expiry of its own and can be deleted through the browser’s settings. With Measurement consent, Google Analytics can set the first-party cookies _ga and _ga_J2PBDZG3DC to distinguish browser visits and sessions. Google documents a default expiry of two years, renewable when the service is used; the browser can impose a shorter limit. Vercel Web Analytics and Speed Insights do not use analytics cookies. Withdrawing consent stops future collection; cookies already present can also be removed through the browser’s controls.
The website does not use advertising cookies or advertising profiling tools. It does not make automated decisions about visitors. Fonts are served locally and no social widgets are embedded. External websites apply their own privacy notices when you visit them.
The hosting provider may use strictly necessary technical mechanisms to prevent automated abuse. The __prerender_bypass session cookie is used only when an authorised editor activates draft preview and is removed on leaving preview. It is not set during ordinary public browsing. These technical functions do not require consent. You can manage cookies in your browser settings.
Service providers and transfers
The website uses Vercel for hosting, security and measurement; Sanity for blog content and downloadable files; Google for Tag Manager and Analytics; and iubenda for consent management. These providers process data under the terms applicable to each service, including processing on the controller’s behalf and processing for their own stated purposes. Downloading a file hosted by Sanity sends technical connection data to its content delivery network.
For correspondence, Cloudflare Email Routing forwards messages and Google receives and stores them in a consumer Gmail mailbox, governed by Google’s terms and privacy policy. The public contact address remains info@matteovincenti.com. Cloudflare · Google.
Vercel may process data outside the European Economic Area, including in the United States. Its privacy notice describes the EU–US Data Privacy Framework for transfers within its scope and the use of Standard Contractual Clauses or other applicable safeguards. Further details are available in Vercel’s privacy notice.
Sanity may process data outside the European Economic Area, including in the United States. Its data processing terms provide for applicable adequacy decisions or other safeguards, including the European Commission’s Standard Contractual Clauses. Details and copies of the safeguards are available in the terms of Sanity. You can also contact the controller for information.
Google, Cloudflare and iubenda may also use infrastructure or suppliers outside the EEA. Depending on the transfer and service, safeguards include applicable adequacy decisions, the EU–US Data Privacy Framework for transfers within its scope, or Standard Contractual Clauses. Consent to measurement does not replace these transfer safeguards. Further details are available in the providers’ documentation: Google Analytics · Gmail · Cloudflare · iubenda.
Retention
Google Analytics is configured to retain user and event data for two months, without restarting the user-data retention period on each new visit. Google states that changes take effect after 24 hours. This setting does not determine the lifetime of Analytics cookies and does not apply to most standard reports based on aggregated data. Google’s retention documentation.
iubenda states that consent-management records may be retained for up to five years from collection to document users’ choices. This is separate from the browser storage used to remember your current preferences. iubenda’s retention notice.
On the current Hobby plan, Web Analytics provides a one-month reporting window and the free Speed Insights dashboard provides date ranges up to seven days. These are consultation windows, not guaranteed deletion deadlines: Vercel states that it may retain Web Analytics data longer. Provider storage and deletion follow the applicable service terms and privacy notices.
On Vercel Hobby, the website owner can consult runtime logs, including the custom web-vitals reports, within a one-hour window. This access limit does not establish when Vercel deletes the data: Vercel states that upgrading the plan can make older logs accessible. Separate infrastructure and security records follow the provider’s retention criteria. The website does not maintain its own visitor database. Vercel runtime-log limits · Vercel privacy notice · Sanity privacy notice.
Correspondence is kept for the time needed to answer the request and handle its follow-up, then deleted when no longer needed. Records required to meet a legal obligation or establish, exercise or defend a legal claim are kept for the relevant period.
Your rights
Where applicable, you can request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests, by writing to info@matteovincenti.com. Requests are normally answered within one month, subject to the extensions allowed by the GDPR. You can lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority.