Privacy & Cookie Policy
Last updated: 27 September 2026
This page explains what personal data this blog processes, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and the Italian privacy law (D.Lgs. 196/2003).
Data controller #
The data controller is the author of this blog, Cybertuz. Contact: adrian@cybertuz.com.
What data is processed and why #
Browsing the site #
The site is a set of static pages. To deliver them, the web server and the reverse proxy of the hosting receive technical data that every browser sends: IP address, date and time, requested page, browser (user agent) and referring page. This data is used only to run the site and to protect it from abuse and attacks (legitimate interest, art. 6(1)(f) GDPR). Server logs are rotated automatically and kept for a short time.
Comments #
Comments run on Remark42, self-hosted on
comments.cybertuz.com: comments are not sent to third-party comment services.
- To comment you can sign in anonymously (just a nickname) or with an external account (e.g. GitHub). With an external login, the provider shares your username and avatar with the comment system; the provider processes your login under its own privacy policy.
- Stored data: name/nickname, avatar, the text of your comments, date, and a hashed (non-reversible) form of your IP address used against spam and abuse. If you subscribe to replies by email, your email address is stored for that purpose.
- Legal basis: your request to publish a comment (art. 6(1)(b) GDPR).
- Comments stay online until you or the site owner delete them. From the comment widget you can request the deletion of all your data, or write to the contact above.
Comments from the previous version of this blog (WordPress) were migrated with their author name, date and text.
Statistics (Google Analytics) — only with your consent #
If you click accept in the cookie banner, the site loads Google Analytics 4, provided by Google Ireland Ltd. It is used only to count visits and see which pages are read. It is configured with:
- advertising features, Google signals and ad personalisation disabled;
- IP addresses not stored (GA4 does not log or store IP addresses);
- analytics cookies expiring after 13 months;
- data retention in Google Analytics limited to the minimum (2 months).
Legal basis: your consent (art. 6(1)(a) GDPR and art. 122 D.Lgs. 196/2003). If you reject, Google Analytics is not loaded at all. Google may process data in the United States; Google LLC is certified under the EU-US Data Privacy Framework. More info: Google’s privacy policy and how Google uses data.
Email #
If you write to me, I use your address and the content of your message only to reply, and I keep them as long as needed for the conversation.
Cookies and local storage #
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
cz-consent | local storage | cybertuz.com | remembers your cookie choice | 6 months |
JWT, XSRF-TOKEN | technical cookies | comments.cybertuz.com | keep you signed in to comments (only if you sign in) | up to ~8 days |
_ga, _ga_<ID> | analytics cookies | cybertuz.com (Google Analytics) | distinguish visitors for statistics — only with consent | 13 months |
Technical storage does not require consent. You can change or withdraw your
choice at any time: .
If you withdraw consent, the _ga cookies are deleted and Google Analytics
stops loading. You can also delete cookies from your browser settings.
Your rights #
You can ask for access to your data, rectification, erasure, restriction of processing, portability, and you can object to processing (articles 15–22 GDPR), by writing to the contact above. Withdrawing consent does not affect the lawfulness of processing done before.
You also have the right to lodge a complaint with a supervisory authority: in Italy the Garante per la protezione dei dati personali, or the authority of the EU country where you live.
Changes #
If this policy changes (for example a new service), the “last updated” date will change and, when needed, you will be asked for your consent again.