Privacy notice
Last updated: 30 September 2026
Data controller
The data controller is FSdev. For any question about your data you can write to info@devfs.space.
Data sent with the brief
When you send the brief I process the data you enter: name, email, preferred follow-up channel, phone number (only if you choose WhatsApp or phone), service of interest, project description and timing.
I use it only to answer your request and, if you wish, to prepare a proposal. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR). Providing it is optional, but without it I can't reply.
The brief travels by email through the Resend service: a notification reaches me and a summary reaches you. The site does not store the brief in a database.
Spam protection
The brief page uses Cloudflare Turnstile to tell people from bots. According to Cloudflare's privacy notice, Turnstile processes data such as the IP address, the TLS fingerprint and the browser User-Agent.
To limit repeated submissions, your IP address is turned into a hash (it is not stored in plain text) and used as a temporary counter on Upstash Redis; the counter deletes itself within about two hours. The legal basis is the legitimate interest in protecting the site from abuse (Art. 6(1)(f) GDPR).
Visit statistics
The site uses Vercel Web Analytics for aggregated visit statistics. According to Vercel's documentation it does not use third-party cookies: visitors are recognised by a hash of the request, discarded after 24 hours, and the data collected (page, referrer, geographic area, operating system, browser, device type) is used only for aggregated statistics.
Cookies and browser storage
The site does not use profiling cookies. The choice you make on the cookie banner is saved only in your browser (localStorage).
How long
I keep the brief emails for as long as needed to handle your request and any collaboration that follows. You can ask for their deletion at any time.
Your rights
You can request access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing (Arts. 15–22 GDPR), by writing to info@devfs.space. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Italian Data Protection Authority website (opens in a new tab)
Providers that process data
These services process data on behalf of the site. Some are based outside the European Union: the safeguards for data transfers are described in their privacy notices.