Privacy

Short version: this site runs no analytics, has no accounts, and sets one cookie on one page. There is nothing to consent to, which is why you were not asked.

The website

No tracking scripts. No third-party scripts of any kind. No analytics package, so no visitor statistics are collected or stored.

One cookie, on one page. The contact form on About is protected against cross-site request forgery, and that protection needs a cookie named csrftoken. It is set only where the form is rendered, holds no information about you, and is not used to recognise you or to track anything. Every other page on this site sets no cookie at all.

The site is served through Cloudflare, which processes requests as a network provider and keeps its own operational logs. That is outside this site’s control and is covered by Cloudflare’s own terms.

The contact form

If you send a message from the About page, it is delivered to a private Slack channel so that it reaches me. The delivery includes your name, your message, the time you sent it, and your IP address. Nothing else is collected, and it is not stored anywhere on this site.

Server errors send the failing URL and a stack trace to the same private channel, so they get fixed. Nothing about the visitor is included.

The demo API

One part of this site does process data, and it should be stated plainly.

api.cybernotes.it hosts a synthetic demo API used in the training. When you request demo credentials or make calls against it:

• Your IP address is processed for rate limiting and abuse prevention. This is necessary to keep a public, unauthenticated endpoint usable for everyone.
• A demo client record is created, holding a generated client identifier, a hashed secret, and an expiry timestamp.
• Any data you create through the API — policies, vehicle registrations — is stored against that demo client.

All of it is deleted automatically when the credentials expire, within 24 hours. Nothing is retained afterwards and nothing is used for any purpose beyond running the demo.

Do not put real personal data into the demo API. It is a teaching tool with public credentials, it is not a secure store, and anything you enter should be assumed visible to anyone. The material never asks you to enter real data, and the vehicles and people it suggests are fictional.

Server logs

The web server and the API keep standard access logs — timestamp, requested path, response status, user agent, IP address — rotated and retained for a short operational period. They are used for debugging and abuse investigation, and nothing else.

Your rights

Under GDPR you may request access to, or deletion of, personal data held about you. In practice the only identifier held here is an IP address in short-lived logs and expiring demo records, and demo data deletes itself within 24 hours. If you want something removed sooner, get in touch at [email protected].

Changes

If this changes, this page changes with it, and the date below moves.