Privacy Policy

This policy covers only the website onmykode.com. It does not cover the HuntForU app, which has its own dedicated policy (in Italian).

1. Data controller

The data controller is Gabriel Mazzaglia, who can be reached at [email protected]. No DPO has been appointed: the law does not require one for processing of this size.

2. What data we collect

This site uses no tracking cookies and no advertising tools. We collect personal data only if you choose to contact us, and we count visits anonymously:

• Contact form: name (or business name), email and the message you write. A hidden anti-spam field (honeypot) collects no real data: it only serves to discard automatic submissions from bots.
• Visit statistics: we use Cloudflare Web Analytics, which measures page views, country and device type in aggregate, without cookies and without identifying visitors.
• Taps on the contacts: we count how many times, on each page and each day, the WhatsApp button or the email address is tapped and the form is sent. We keep only the day, the page and the kind of contact: no cookies, no IP address, nothing that identifies who does it.
• Form protection: before sending, Cloudflare Turnstile checks that a person, not an automated program, is writing, using technical browser data; it is not used to profile you.
• WhatsApp and TikTok: the contact buttons take you off the site, to WhatsApp or TikTok. The site itself neither sends nor receives any data from these platforms: if you choose to write to us there, the privacy policies of WhatsApp/Meta or TikTok apply, not ours.

3. Why we collect it and for how long

We use the contact form data only to reply to you and, if you ask, to prepare a quote. This processing is necessary to take steps at your request before entering into a contract (art. 6.1.b GDPR). We keep the message only for as long as needed to handle your request; if you do not become a client, we do not reuse it for other purposes or keep it longer than necessary.

4. Who we share your data with

The site is hosted by Cloudflare (Cloudflare, Inc.), which also provides the anonymous visit statistics and the form’s anti-bot check, and processes the technical data needed (such as the IP address) as a data processor. The contact form message is then delivered to our inbox by Resend (Resend, Inc.), an email sending service that acts as a data processor for this sending only. Cloudflare and Resend are based in the United States: data is transferred with the safeguards required by the GDPR (standard contractual clauses). Your email address is used only to reply to you: the form sends nothing to your address. We do not sell or share your data with anyone else for their own or third parties' commercial purposes.

If we ever turn on the Trustindex reviews widget (not active on this site today), that section would load a third-party script under Trustindex's policy: we will state it here as soon as it is turned on.

5. Security

The site is always served over HTTPS. The contact form is protected by Cloudflare Turnstile, a hidden anti-spam field and a limit on the number of submissions.

6. Your rights

By writing to [email protected] you can ask at any time for access to your data, its correction or deletion, the restriction of processing, and you can object to processing. We reply within 30 days as required by the GDPR. You can also lodge a complaint with the Italian Data Protection Authority, the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

7. Changes to this policy

We may update this page if what we collect, or how we handle it, changes. The date at the top shows the last update.