Privacy & cookies

Last updated: September 22, 2026. nougates.com is a personal site run as a hobby project. Privacy is taken seriously here too: the data processed is kept to an absolute minimum, and this page explains exactly what happens when you visit the site or email me.

Data controller

The data controller is nougates. For any privacy question you can write to privacy@nougates.com.

Data processed and why

Hosting and access logs. The site is hosted on Cloudflare Pages. Like any website, the server briefly records technical connection data: IP address, browser type, requested pages, date and time. This keeps the site working and secure; the legal basis is the legitimate interest of the controller (Art. 6(1)(f) of Regulation EU 2016/679, GDPR).

Contact emails. If you email me through the site's mailto links (the "free consult" offer or the case-study pages), I receive your email address and the content of your message. They are used solely to reply to you and to discuss a potential collaboration; the legal basis is the taking of pre-contractual steps (Art. 6(1)(b) GDPR).

The site has no contact forms, newsletter, analytics, advertising or profiling tools. No visitor data is collected in any other way.

Cookies

The site uses a single cookie, nf_lang, created only when you explicitly pick a language from the selector at the top right. It remembers your choice for one year. It is a first-party cookie, protected by the Secure and SameSite=Lax attributes.

Since it is created only in response to an explicit request from the user, it is considered strictly necessary and is exempt from the consent requirement (Art. 5(3) of Directive 2002/58/EC). You can delete it at any time from your browser settings. No other cookies are set, including third-party ones.

Recipients of the data

• Cloudflare (Cloudflare Pages for hosting and Cloudflare Email Routing for receiving email) — infrastructure provider, bound by a Data Processing Agreement;
• Google (Gmail) — emails sent to the site are forwarded to the controller's Gmail inbox. The transfer outside the EU/EEA to the United States relies on the safeguards provided by the GDPR (standard contractual clauses);
• your email provider — when you use a mailto link, the message travels through your own email client.

The site loads no external resources (fonts are hosted directly on the site), so simply visiting the pages involves no data transfers to other services.

Retention

• technical logs: for the time strictly needed to keep the site secure;
• contact emails: until the exchange is concluded; any accounting records are kept as required by tax law (10 years);
• nf_lang cookie: 1 year, or until you delete it manually.

Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data (Art. 15–22 GDPR). You can exercise these rights by writing to privacy@nougates.com. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it).

No automated decisions

The site does not perform automated decision-making or profiling. This policy may be updated: the current version is always available on this page.