Who manages this website
This website is jointly managed by Antonio Rocchia, Domenico Del Giudice, Francesco Corti, Giovanni Lorenzo Murfuni, founders of the informal Calabrute group and controllers for the processing described here. Calabrute is not currently an incorporated legal entity and does not sell products or commercial services through the website.
Contact the founders through [email protected] for privacy questions, information or to exercise your rights.
Browsing, infrastructure and security
The website runs on a private server managed by the founders and is made accessible through Cloudflare Tunnel. Delivering and protecting requests involves technical data such as IP address, request time, requested URL, browser information and response status. The app does not use these data to build visitor profiles.
The legal basis is legitimate interest in providing and protecting the website, Article 6(1)(f) GDPR. Connection data are needed to deliver the page. Accepting analytics is not required to browse, use the Lab or watch the video.
The app does not create a browsing-log archive. The chosen retention limit for technical logs collected on the private server is 180 days, approximately six months; logs may be deleted sooner when no longer needed. Data related to a specific incident may be kept longer only where necessary for investigations or legal obligations.
Cloudflare
Cloudflare, Inc. processes technical data to route, deliver and protect requests as an infrastructure provider. Its services may process data outside the European Economic Area. Its data processing agreement provides for the Data Privacy Framework where applicable and standard contractual clauses for transfers requiring them.
Our server-log limit does not mean that Cloudflare retains all data for six months. Its retention depends on the data type, service and purposes described in its terms and privacy policy. The app does not export Cloudflare HTTP logs or use Cloudflare Web Analytics.
Optional Google Analytics 4
GA4 integration is prepared but not currently configured: it does not load or receive events. Enabling it in the future requires your consent before the service loads.
If you accept, measurements cover page visits, Lab visibility and selections, active time in that area, interest in member photos and profile or social-link clicks. Custom parameters do not include visitor names or email addresses, typed text, screen recordings or mouse coordinates. URLs sent by the app exclude query strings and fragments. Google also processes technical data arising from the service under its terms.
The legal basis is consent under Article 6(1)(a) GDPR. Advertising features and Google Signals are disabled in code. The app creates no visitor accounts or custom visitor identifiers. Data are sent to the Google Analytics provider, with possible processing outside the European Economic Area under the safeguards of the service contract.
The intended GA4 property setting is two months of user and event data retention, without renewal on new activity. Aggregate reports follow the service rules and may have a different retention period. No website analytics data exist while GA4 is unconfigured.
Consent preferences
Klaro is served locally and does not send your choice to an external CMP. The technical cookie calabrute-klaro-v2 remembers acceptance or rejection, policy version and choice date for 186 days, without a visitor identifier.
Rejecting is as easy as accepting. Closing an initial request keeps analytics disabled; scrolling or watching the video does not express consent. Cookie preferences lets you change your choice at any time. Withdrawal blocks sends, removes readable GA cookies on this domain and reloads the page to remove Google code. It does not automatically erase previously transmitted data.
Video and Play your ace
The trailer is hosted on our website without YouTube, Vimeo or a third-party player. The video file is requested only when you press Play. It does not start automatically, set cookies or enable analytics. Its delivery involves the same technical connection data needed for the rest of the site.
Play your ace increments an aggregate total, not a count of unique people. It stores no browser identifier or preference. To limit repeated submissions, an IP address may be used only in temporary server memory for the four-second limiting interval and is then removed. The persistent file contains only the aggregate total for as long as the counter is maintained. Purpose: operating the action and preventing abuse; legal basis: legitimate interest under Article 6(1)(f).
Contact, preregistration and external links
There are no signup forms, payments or lead-collection forms. The preregistration announcement does not enrol anyone. If you contact us by email or social media, the information you send is used to reply and handle the conversation under legitimate interest, for as long as necessary for the request and applicable obligations. You are not automatically added to marketing lists.
LinkedIn, Instagram and GitHub are links without embedded widgets or pixels. Their policies apply when you open them. Fonts, images and video are served by this website; the browser does not contact Google Fonts to display the page.
Recipients and your rights
Data may be accessed by the founders and the providers involved in their respective functions, in particular Cloudflare and, only after consent and when enabled, Google Analytics. Data are not sold and no automated decisions producing legal effects are made about visitors.
Where Articles 15–22 GDPR apply, you may request access, rectification, erasure, restriction, portability or object to processing by contacting [email protected]. You may withdraw consent without affecting earlier lawful processing and complain to the Italian data protection authority or your competent supervisory authority.