Privacy & cookies

This page explains what happens to your data on leonardocassone.com: what I collect, why, where it goes and how long I keep it. In short: only what I need to reply to you, never sold, and analytics only if you say yes.

Who is responsible

The data controller is Leonardo Cassone, based in Vilnius, Lithuania. For anything about your data, write to [email protected].

What I collect

When you send the contact form, I receive:

• your name and email address;
• the subject and message you write;
• how you found this site (the option you pick);
• the page you sent the form from, the date and time, and any campaign tags in the link you followed (UTM parameters).

If you accept analytics cookies, Google Analytics also records which pages you visit, roughly where you are (country/city level), and the device and browser you use. It doesn't tell me who you are.

Why

• To reply to your message and, if we work together, to follow up on it. The legal basis is your request and the steps before a possible contract, plus the consent you give when sending the form.
• To understand which channels bring people here (the "how did you find me" answer, campaign tags and, with your consent, Google Analytics).

Your data is never sold, rented or used for advertising profiles.

Where it goes

To run the site and the form I use these providers, each acting on my behalf:

• Cloudflare hosts the website and runs the form: privacy policy.
• Google (Sheets) stores form messages in a private spreadsheet only I can access: privacy policy.
• Telegram sends me a private notification with your message so I can answer quickly: privacy policy.
• Resend delivers the notification email to me and the confirmation email to you: privacy policy.
• Google Analytics and Google Tag Manager (which loads the analytics tags), only if you accept cookies: privacy policy.

Some of these providers process data outside the European Union, for example in the United States. Where they do, they rely on the safeguards required by EU law, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long I keep it

Form messages are kept for up to 24 months, then deleted, unless we start working together (then I keep what the work and the law require). You can ask me to delete them sooner at any time. Google Analytics data is kept according to the retention set in Google Analytics, which is never longer than 14 months.

Cookies

This site uses two things that are stored in your browser:

• Your cookie choice (a small value called cookie-consent saved in your browser's local storage), so I don't ask you again on every page. It is needed for the site to remember your answer and doesn't need consent.
• Google Analytics cookies (named _ga and _ga_…), used to count visits and see how the site is used. They are only set after you click "Accept", and they last up to two years.

No advertising or social media cookies are used. You can change your choice whenever you like: open cookie settings, or delete cookies from your browser.

Your rights

Under the GDPR you can ask to see the data I hold about you, correct it, delete it, limit or object to how it's used, receive it in a portable format, and withdraw your consent at any time (this doesn't affect what was done before). Write to [email protected] and I'll answer within one month.

You can also complain to a data protection authority. In Lithuania that's the State Data Protection Inspectorate (vdai.lrv.lt); you can also contact the authority in the EU country where you live.

Changes

If what the site does with your data changes, I'll update this page and the date at the top.