Who is responsible
Nicolò Terranova, a freelance digital compositor working in Italy. About anything on this page, write to terranovanicolo@gmail.com.
The contact form
When you send the form on the contact page it carries your name, your email address, the subject you picked and your message. The server also notes the country your connection appears to come from and the time it arrived. Both of those come from the request itself; you are not asked for either.
Why. To read what you wrote and answer it. Under the GDPR that is Article 6(1)(b), steps taken at your request before a possible engagement, and otherwise my legitimate interest in answering my own post.
Where it goes. Straight to me, as a message in a private Telegram chat only I can read. It is not saved on this site, not put in a database, and not passed on to anyone.
Your IP address. Held for a few minutes in the server memory, only to stop one connection flooding the form. It is never written down and never reaches me.
How long. I keep the message while it is still useful and delete it after 24 months at the latest.
Showreel access
Most of the work in my reel is under non-disclosure, so it sits behind a code.
When a code opens the gate I get a message telling me the name that code was issued to, which of the three kinds of code it was, the country the connection appears to come from, and the time. I get a second, shorter one if the video is actually played. That is all of it: no IP address, no email address, nothing about what you did on the page.
Why. The material is confidential and I have to be able to account for who has seen it. Legitimate interest, mine and that of the productions whose work is in there.
How long. 12 months, then I delete them.
If you asked for a code through the contact form, what you wrote there is covered by the section above.
What is stored in your browser
No cookies. Not one.
Two things are kept in your browser's own storage and never leave your device: which theme you chose, so the site does not flash the wrong one at you, and, on the reel page, the fact that you are already through the gate, so a refresh does not ask again. The second is thrown away when you close the tab. The cookie page names both and says how to clear them.
The fonts are served from this domain rather than somebody else's, so opening a page does not tell a third party that you did.
Traffic measurement
Vercel Web Analytics counts page views. It is cookieless: which pages were opened, roughly where from, what kind of browser, and nothing that leads back to a person. There is no Google Analytics here, no advertising network and no profiling of any kind.
Hosting and the video
The site is hosted by Vercel Inc. (United States), which keeps the ordinary technical logs any web server keeps. The reel itself is stored with Cloudflare, Inc. (United States) and served through a link that is signed and expires.
Who else sees any of this
Only those three, each working for me: Vercel for the hosting, Cloudflare for the video, Telegram for carrying the messages to my phone.
All three are outside the EU. Vercel and Cloudflare operate under the European Commission's standard contractual clauses. Telegram Messenger Inc. is also outside the EEA and names the European Data Protection Office in Brussels as its EU representative. That is the honest reason the form asks you for so little, and the reason nothing confidential should be typed into it. If you would rather not use it at all, my email address is at the top of this page.
What this site does not do
No advertising. No newsletter. No profiling, scoring or automated decisions. No selling or sharing your details with anyone. No tracking cookies, no third-party pixels, no social buttons quietly phoning home.
Your rights
You can ask me for a copy of whatever I hold about you, to correct it, to delete it, to limit what I do with it, to have it in a portable form, or to object to my holding it at all. Write to terranovanicolo@gmail.com and I will answer.
If you think I have got it wrong you can also complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, at garanteprivacy.it.
Changes
If any of this changes I will change the date rather than pretend it did not.
Last updated 27 August 2026.