Privacy

Last updated: 1 October 2026

This notice explains how Adiark handles your data when you visit adiark.com and when you join its update list. It’s short because I collect very little.

Who is responsible

The data controller is Andrea Albini, Italy. For anything about your data, write to privacy@adiark.com.

What I collect

• Your email address, which you enter yourself.
• Proof of your consent: when you signed up and confirmed, and which version of this notice was in force.
• A pseudonymised code of your IP address, made with a secret key. I use it only to stop abuse, such as someone signing up many addresses at once, and I delete it as soon as you confirm.

Giving your email is optional; without it I can’t send you updates.

Why, and on what legal basis

• Emailing you about the launch of Adiark and about what’s new: your consent (Art. 6(1)(a) GDPR), which you give by signing up and then confirming through the link I send you.
• Keeping proof of your consent: my legitimate interest in being able to show that you agreed (Art. 6(1)(f) and Art. 7(1) GDPR).
• Protecting the site and the list with the IP code and the security checks described below: my legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

I don’t sell your data, I don’t use it for advertising, and I don’t track whether you open my emails or click their links. The Adiark logo in my emails loads from adiark.com: it is the same image for everyone and tells me nothing about who opens them.

Who helps me

• Cloudflare, Inc. runs this website and stores the list, in a database restricted to the European Union. It also runs the security check on the sign-up form (Turnstile), which looks at technical signals from your browser to tell people from bots. Cloudflare acts on my instructions, except that it uses Turnstile signals to improve its bot detection as an independent controller, under its Turnstile privacy policy.
• Plus Five Five, Inc., the company behind Resend, sends my emails from its European region (Ireland), on my instructions.

Both are US companies. Any transfer of data outside the EU is covered by the EU–US Data Privacy Framework, under which both are certified, and by the EU Standard Contractual Clauses. You can ask for a copy of these safeguards at privacy@adiark.com.

If you write to one of the @adiark.com addresses, Cloudflare forwards your message to a mailbox provided by Google, which handles it under the Google Privacy Policy. To block mass mailings, Cloudflare keeps only an irreversible code derived from your address, for two days. My replies are sent through Resend.

The video

The video on the home page is hosted on YouTube, a Google service, and shown in its privacy-enhanced mode. Nothing is loaded from YouTube until you press play. From that moment YouTube receives your IP address and technical data from your browser, and may store cookies or similar data on your device. The legal basis is your consent, which you give by pressing play after the notice under the video (Art. 6(1)(a) GDPR). If you’d rather not share this data, simply don’t play the video.

This site uses YouTube API Services: by playing the video you agree to the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy.

Visit statistics

I count visits with Cloudflare Web Analytics, which uses no cookies. Each page loads a Cloudflare script that records the page, where you came from, your browser, device, country (from your IP address) and loading times. I see only totals, never an individual visitor. Cloudflare keeps the full data for 7 days, then only in aggregate, viewable for six months. The legal basis is my legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR).

Cookies

This site uses no analytics or advertising cookies. To protect the site from abuse, Cloudflare may set strictly necessary security cookies: __cf_bm, which lasts 30 minutes, and cf_clearance, only if you are shown a security check. YouTube may set its own only if you play the video.

If you choose a language with the EN | IT switch, the site stores the technical cookie lingua for one year, to show you the same language on your next visit. Without that choice, the home page opens in Italian if you connect from Italy or your browser is set to Italian, and in English otherwise. Nothing is stored.

How long I keep it

• Your email and proof of consent: until you unsubscribe. At that moment they are removed from the list; the copies that remain in my email provider’s logs and in automatic database backups are erased within 30 days.
• If I remove you from the list, for example because the address is wrong, your sign-up first goes to a trash: there it receives nothing and stays for at most 30 days, then it is deleted. This is a safety measure against accidental deletions. If you ask me to delete you, I do it right away, without the trash.
• A sign-up you never confirm is deleted after 30 days.
• The IP code is deleted when you confirm, or with the unconfirmed sign-up.

Your rights

You can unsubscribe at any time with the link on the page that confirms your sign-up, and at the bottom of every update I send. You can also ask me to access, correct or delete your data, to restrict or object to its use, or to receive it in a portable format, by writing to privacy@adiark.com. Withdrawing consent doesn’t affect what happened before.

If you think I’ve handled your data wrongly, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority in your country.

Changes

If this notice changes, I’ll update this page and its date. If a change affects how I use your email, I’ll tell you before it applies.