01
What we do NOT collect
No Google Analytics, Meta Pixel, Hotjar, Matomo or advertising trackers. No browser fingerprinting. No profiling cookies. No selling or sharing of data with third parties for commercial purposes.
privacy
Privacy
Last update: April 2026
This page describes, honestly, what SalentoSec knows and does not know about you when you visit the site. By design, we want to collect the absolute minimum.
02
Aggregate stats (self-hosted)
To understand how many people visit the site (and to improve it) we use an analytics system we wrote ourselves, hosted on our own domain: no third-party service, no external sharing. For every visit we record date/time, page viewed, browser user-agent, and a cryptographic hash (SHA-256 + salt) of your IP address — not the raw IP. The hash is one-way: its only purpose is to deduplicate visits from the same visitor within 30 minutes, not to identify you. The data is only visible to us. You can disable tracking anytime by enabling "Do Not Track" in your browser or by using an ad-blocker.
03
Cookies
The site sets no cookies. None. That's why you see (and will see) no cookie banner: there's nothing to accept.
04
localStorage
We store one single key in your browser localStorage: salentosec-theme (possible values: "light" or "dark"). Used only to remember your theme preference. It never leaves your browser. You can clear it from your browser settings whenever you want.
05
Fonts
Fonts (Inter and JetBrains Mono) are served from our own domain. We do NOT load them from Google Fonts: this prevents your IP from being sent to Google on every visit.
06
If you write to ciao@salentosec.org, we keep the email only as long as it takes to reply to you and to track the conversation. No sharing with third parties. No automatic newsletter unless you ask.
07
Newsletter form
The newsletter form on the site opens your local mail client (mailto:) and sends the message to ciao@salentosec.org. There is no SalentoSec server receiving the data: it goes from your mail client straight to our inbox.
08
Hosting & logs
The site is hosted on a shared server. The hosting provider keeps technical logs (IP, user agent, requested URL) for a few days for DDoS protection and diagnostics, according to its own privacy policy. We don't see these logs in identifiable form.
09
GDPR rights
You have the right to request access, rectification, deletion or portability of your data. To exercise these rights, write to ciao@salentosec.org. Reply within 30 days.
10
Changes
If anything substantive changes, we'll update this page with a new date at the top. If the change directly affects you (e.g. we introduce a system that collects data), we'll tell you before activating it.