Privacy policy

We collect only the following: the information you send us voluntarily through the contact form, listed below; browsing data used to measure how the site is used, described under "Audience measurement"; client-account data, described under "Client accounts and XDataCore units"; and, only if you send us an application, the data described under "Job applications". We do not buy data from third parties and we do not build commercial profiles of visitors.

We use this information solely to respond to your request, assess the context of your project, and maintain the communication relating to that enquiry.

We do not use your data to send unsolicited marketing, and we do not share or sell it to third parties for advertising purposes.

If you have a client account, we process your display name, your email address and, if you created or use it with Google, the identifier Google assigns to your account. The first time you sign in with Google, we create the account automatically with the name and verified email Google provides; we never receive your Google password.

If you use a password, we store it only as an irreversible cryptographic digest (Argon2id); nobody, including us, can read it.

We also record your XDataCore unit balance and every movement: amount, reason, date and the administrator who made it. The units are symbolic, for internal use only and have no monetary value.

We use this data solely to give you access to your private area and show you your balance.

You can delete your account at any time from your private area or by asking us. Deletion is immediate, but for 90 days you can restore the account by signing in. After that we permanently erase your name, email, password and Google link; the XDataCore unit history is kept without anything that identifies you, because unit accounts must still square. If you would rather we did not wait the 90 days, ask us and we will do it straight away.

If you send us your application through "Work with us", we process the data you include: name, email, phone (optional), area of interest, a link to your professional profile (optional), your message and your CV. We use it solely to assess your application and, if it fits, to contact you.

Only the people who handle recruitment at XDataCore can access it. We keep it for at most 12 months from submission, after which it is deleted automatically together with the CV, and you can ask us to delete it sooner at any time.

To protect the form against automated spam, we limit how many submissions a connection can send and, when enabled, use a Cloudflare Turnstile check, which processes technical data from your browser to tell people from automated programs.

If you select a language on the site, we store that choice in a technical cookie so we can show you the right language on later visits. That cookie holds only a language code and cannot be used to identify you. It is described in detail in the cookie policy.

To learn which pages are visited and which content is useful, we use Google Analytics 4, integrated through Firebase. The data processed is about browsing, not identity: pages viewed, chosen language, device and browser type, approximate country inferred from the IP address, where you arrived from, and specific actions such as opening the contact form or following a link to a hosting provider.

Until you accept measurement, no identifier is generated and two pages or two visits cannot be linked to the same person: only aggregate data is recorded. If you accept, an identifier stored in your browser is used for that single purpose. In neither case do we send Google your name, your email address or the content of the contact form.

We do not use this data to make automated decisions about you, to build profiles with legal effects, or for any advertising purpose. How it works in detail, and which cookies are involved, is set out in the cookie policy.

Processing of the form data is based on the consent you give by ticking the corresponding box before sending it, and on our legitimate interest in responding to business enquiries addressed to the company.

The use of measurement cookies rests on your consent alone. You can give or withdraw it at any time from the "Measurement preferences" link in the footer; withdrawing it does not affect the lawfulness of processing carried out beforehand.

We keep contact details for as long as needed to handle your request and, after that, for any period required by applicable law. If no business relationship follows, we delete the information once it is no longer necessary.

Audience measurement data is retained in Google Analytics for at most fourteen months, after which Google deletes it automatically. Aggregate reports, which cannot identify anyone, may be kept for longer.

To operate the site and handle email we use infrastructure and email service providers that may process the data on our behalf, always under confidentiality and security obligations. The specific list of providers must be detailed before this document is published in final form.

Site hosting (Firebase Hosting), audience measurement (Google Analytics) and the non-personalised ads on the QR generator page (Google AdSense) are provided by Google: Google Ireland Limited for visitors in the European Economic Area, Switzerland and the United Kingdom, and Google LLC elsewhere. This may involve transferring data to the United States, covered by the European Commission’s standard contractual clauses and by Google’s certification under the EU-U.S. Data Privacy Framework.

Information is transmitted encrypted over HTTPS. We validate and bound the data received on the server and apply rate limits to the form to reduce automated submissions. No technical measure offers absolute security, so we recommend not including confidential or sensitive information in your initial message.

You may request access to, correction of, deletion of, or restriction of the processing of your personal data, and you may withdraw your consent at any time. To exercise these rights, write to us using the contact channel shown on this site.

If we change this policy we will update the date shown at the top of the document. We recommend reviewing it periodically.