Privacy policy

We record the product, page and PDF languages, order number, terms and consent to immediate supply. After payment Stripe provides email, name, country, billing address and payment outcome. The shop does not receive full card numbers or CVC.

For delivery we store confirmation content, email identifiers, sending times and outcomes, delays and rejections. The shop does not track opening emails or PDFs. Support involves processing your correspondence.

Ordering, payment, delivery and support serve to enter into and perform the contract — GDPR Article 6(1)(b). Mandatory tax records are processed to comply with law — Article 6(1)(c). Security, troubleshooting and defending rights rely on legitimate interests — Article 6(1)(f), taking the buyer’s rights into account.

Additional PostHog analytics is enabled by consent — Article 6(1)(a). We cannot fulfil orders without necessary payment and delivery data; analytics consent is optional. A purchase does not subscribe you to advertising; immediate-supply consent concerns withdrawal rights, not marketing.

If you request an invoice, we save your first and last name, full address and tax identifier before payment to issue the document; phone is optional. Required details are necessary to issue the invoice. These fields are not sent to analytics or included in the owner notification; they are available in the private order list and backups. Email comes from payment. You may ask the seller to correct details.

Vercel hosts the website and processes orders; Supabase stores orders and private PDFs; Resend receives email addresses and messages with attachments. Stripe handles payment and its own obligations, including fraud prevention; depending on the activity it acts as a processor or independent controller.

The owner receives order notifications in Gmail. Cloudflare Web Analytics provides website statistics, and PostHog receives additional events after consent. Order access is limited to the owner and authorised providers.

Providers may process data outside the EEA, including in the United States. A European database does not exclude transfers to other providers. Agreements, countries and transfer grounds must be verified before real sales: adequacy decisions or appropriate safeguards such as EU standard contractual clauses. This review is incomplete; email the controller for details of safeguards and how to obtain copies.

A necessary cookie lasting up to 24 hours enables access to your order page. Your analytics choice is stored in your browser; with consent PostHog uses browser identifiers and visit events.

You can disable additional analytics using the button on this page. Withdrawal affects future collection without changing the lawfulness of earlier processing. Email us to request deletion of data already collected.

Unpaid checkouts are automatically reviewed for deletion 30 days after their last change. Names, addresses and invoice details are deleted with the checkout after Stripe confirms that no payment was made. If verification is unavailable, payment is uncertain or a support case is open, deletion is deferred until the issue is resolved.

This cleanup does not delete paid orders. Necessary purchase records are retained to perform the contract, keep records and handle claims. Mandatory accounting documents are retained for the applicable statutory period; documents covered by Article 2220 of the Italian Civil Code are retained for 10 years. Pending investigations or disputes may require longer retention of relevant records. Correspondence and technical data are reviewed manually according to support and legal-defence needs.

After deletion, a random checkout identifier and deletion date remain, without a name, email or address, to prevent restoration from an old copy. This ledger is needed while affected archives exist. Encrypted backups are replaced manually; restorations take completed deletions into account. Deletion from the shop does not override the payment provider’s independent retention duties.

Use the contact email to request access, correction, erasure, restriction, portability and objection where applicable. Proportionate identity verification may be requested. We normally respond within one month; any legally permitted extension will be explained.

Erasure may be limited by record-retention duties or the defence of rights in disputes. You may complain to the Italian Garante per la protezione dei dati personali or another competent data protection authority.