Privacy Policy

August 18, 2026

Data Controller

Daniel Nunes Locatelli
Email: contact@daniellocatelli.com
Website: daniellocatelli.com

Data Processing Overview

This website collects minimal personal data. There are no cookies, no third-party font loading, and no advertising or fingerprinting trackers. The only analytics tool is Cloudflare Web Analytics, a cookieless, privacy-focused service described below. The following sections describe the limited data processing that occurs.

Hosting (Cloudflare)

This website is hosted on Cloudflare Workers (static assets plus a small server-side component for the AI chat) and delivered via the Cloudflare CDN. When you visit this site, Cloudflare automatically processes:

  • Your IP address
  • HTTP request headers (browser type, operating system, referrer URL)
  • Timestamp of access

This processing is necessary for the delivery of the website (Art. 6(1)(f) GDPR — legitimate interest). Cloudflare Inc. is based in the United States. Data transfers to the US are covered by Cloudflare's Data Processing Addendum and EU Standard Contractual Clauses.

The site also uses Cloudflare Workers KV to store operational data (AI model availability status and daily usage counters). This storage contains no personal data.

More information: Cloudflare Privacy Policy

Web Analytics (Cloudflare)

This website uses Cloudflare Web Analytics to understand aggregate traffic and site performance. A small script (beacon.min.js, loaded from static.cloudflareinsights.com) runs in your browser and reports:

  • The page URL and referrer
  • Browser and operating system type, screen size
  • Approximate country, derived from your IP address
  • Page-load performance metrics (Core Web Vitals)

The data is aggregated. Cloudflare Web Analytics sets no cookies, uses no local storage, does not fingerprint your device, and does not track you across websites or build individual profiles.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in measuring the use and performance of this website with a privacy-preserving, cookieless tool. Data transfers to the US are covered by Cloudflare's Data Processing Addendum and EU Standard Contractual Clauses.

More information: Cloudflare Web Analytics · Cloudflare Privacy Policy

AI Chat Feature (Anthropic, Supabase & Voyage AI)

This website includes an optional AI chat feature. When you use the chat:

  • Your question is sent to Supabase, which forwards it to Voyage AI to compute a numerical embedding used for vector similarity search (query only — your input is not stored persistently by either service)
  • Your question and the retrieved context are sent to the Anthropic Claude API for generating a response (processed but not stored long-term by Anthropic)

Chat messages exist only in your browser session state and are lost when you close or refresh the page. No conversation history is stored on any server.

Legal basis: Art. 6(1)(a) GDPR — consent (you actively choose to use the chat). Anthropic, Supabase, and Voyage AI are US-based. Data transfers are covered by their respective Standard Contractual Clauses.

More information: Anthropic Privacy Policy · Supabase Privacy Policy · Voyage AI Privacy Policy

Embedded Videos (YouTube)

Some pages on this website embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Videos are embedded using YouTube's privacy-enhanced mode (youtube-nocookie.com), which does not set cookies until you actively play a video.

When you play an embedded video, YouTube may collect:

  • Your IP address
  • Browser and device information
  • Viewing behavior and interaction data

If you are logged into your Google account, YouTube may associate your viewing activity with your profile.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in presenting project work through video content. Google LLC is based in the United States. Data transfers are covered by Google's Standard Contractual Clauses.

More information: Google Privacy Policy

Self-Hosted Fonts

This website uses the fonts Montserrat and Poppins. All font files are served directly from this domain. No requests are made to Google Fonts or any other third-party font service.

No Cookies or Tracking

This website does not set any first-party cookies. There are no advertising networks and no tracking that identifies individual visitors. Aggregate, cookieless analytics are provided by Cloudflare Web Analytics (see above). Note that embedded YouTube videos (in privacy-enhanced mode) may set cookies when you choose to play them.

External Links

This website contains links to external services including LinkedIn, GitHub, GitLab, Instagram, Bluesky, and ORCID. When you follow these links, you leave this website and the respective service's privacy policy applies. The operator of this website has no control over the data processing practices of these third-party services.

Data Retention

This website does not persistently store any personal user data. Server logs and aggregated analytics data maintained by Cloudflare are subject to Cloudflare's own retention policies.

Changes to This Policy

This privacy policy may be updated from time to time. Changes will be posted on this page with an updated revision date.