Privacy notice

Privacy in plain words.

You can read the whole site without signing up and without leaving any data. You only sign up if you want to take part.

In short

Why we ask for your emailSigning up is a light safeguard: it means people are not anonymous in the parts where you can write (Assistant, Board, Reports), to protect the platform from abuse, fake messages and spam. Your email is used only for that and for service messages (sign-up confirmation, password recovery). We do not use it for advertising, we send no commercial newsletters and we never sell or hand it to anyone.

Who is the controller

The data controller is Vittorio D'Alberto, a citizen of Atri and the site's operator (see Who is behind this). Contact for any request: ciao@opencivtech.it.

What data we collect

When	What data	Why and legal basis (GDPR art. 6)
If you sign up	Name, email, password, historic centre/village/district (optional), date of consent. The password is handled in protected form by the authentication service: we cannot see it.	A safeguard against anonymity and access to member features. Legal basis: your consent (art. 6.1.a).
If you post on the Board	The text (up to 500 characters) and the name it appears under, visible to other members.	To run the Board. You are responsible for what you write. Legal basis: the service you asked for (art. 6.1.b).
If you submit a report	Title, description and map position, linked to your profile. Approved reports are public; your name is not shown.	A public map of local problems. Legal basis: the service you asked for (art. 6.1.b).
If you ask the Assistant	The question is processed by Cloudflare (search in the records) and Google (Gemini, which writes the answer). We store anonymously, not linked to your account, the first 200 characters of the question in usage statistics.	To answer, to count daily use (a site-wide limit of 5 questions a day) and to improve the service. Legal basis: the service you asked for (art. 6.1.b) and the legitimate interest in limiting abuse (art. 6.1.f).
When you browse	Aggregate visit statistics (Cloudflare Web Analytics, no profiling cookies) and a few anonymous events, such as a click on a table of contents or the menu. Nothing that identifies you.	To see which pages are useful and improve them. Legal basis: legitimate interest (art. 6.1.f).

Do not write your own or other people's personal data in questions to the Assistant (tax code, addresses, health data): they end up in external services.

Who we share it with

Only with the technical providers that make the site work: Supabase (database and login), Cloudflare (hosting, statistics and Assistant search) and Google (only the text of Assistant questions). We do not sell data and we do not use it for advertising.

If you do not provide the data

Reading the site requires no data. Name and email are needed only to sign up: without them you cannot use the Assistant, the Board or Reports. The district or village is optional.

Data outside the European Union

The database holding your account data (name, email, messages, reports) is hosted in Frankfurt, Germany, in the European Union. Supabase, Cloudflare and Google are however US companies: the text of Assistant questions is processed by Google and Cloudflare, and the providers may access data from countries outside the European Economic Area. The safeguards are those in their contracts: the EU-US Data Privacy Framework adequacy decision for certified providers and, where needed, the European Commission's standard contractual clauses.

Automated decisions

The Assistant uses artificial intelligence to write answers, but it makes no decisions about you and does not profile you: it has no legal effect on you.

For how long

Account and sign-up data: as long as you stay signed up or until you ask for deletion.
Board messages: as long as you stay signed up.
Reports: as long as they are needed for the map, or until you ask for removal.
Assistant question texts and usage statistics: 12 months, then deleted.

Your rights

You can ask at any time to see, correct or delete your data, to restrict its use or object to it, to receive it in a readable format (portability) and to withdraw consent, by writing to ciao@opencivtech.it. If you ask for deletion we remove your account and the linked data (including Board messages and, on request, reports). You also have the right to lodge a complaint with the Italian data protection authority (Garante).

Cookies

We use no profiling cookies and no advertising. In your browser we store only the technical data needed to keep you logged in after sign-in.

Last updated: 19 September 2026.