Privacy Policy (UE)

Ultimo aggiornamento: 10 luglio 2026

This Privacy Policy explains how personal data relating to users who visit febogamedev.com is processed, in accordance with Regulation (EU) 2016/679, known as the General Data Protection Regulation or GDPR, and the applicable Italian data protection legislation.

1. Data Controller

The Data Controller is:

Salvatore Liotta – FeboGameDev

VAT number: 03628530838

Country of establishment: Italy

Email: febogamedeveloper@gmail.com

The Data Controller has not appointed a Data Protection Officer, or DPO.
Users may contact the Data Controller at the email address above for any request relating to personal data or the exercise of their rights.

2. Categories of personal data

Browsing data

The systems and services used to operate the website may automatically collect certain technical information during browsing, including:

IP address.

date and time of the request

equested page or resource

browser and device type

operating system

referring page

technical information concerning server requests and responses

This information is processed to operate the website, maintain its security, diagnose technical problems and prevent unauthorised or harmful activities.
Technical information may also be recorded in logs maintained by the hosting provider or the website’s security tools.

Contact form data

The website uses Contact Form 7 and allows users to send messages containing:

name

email address

subject

message

This information is used exclusively to read and reply to the request and, where applicable, to manage requests for quotations, collaborations or professional engagements.
Messages are not stored in the WordPress database. They are sent through the website’s email system to the Data Controller’s Gmail account.
Contact form data is not used for newsletters, advertising or unsolicited promotional communications.

Comments

Users may submit comments under articles. All comments are moderated and are published only after approval by the Data Controller.
The following information may be processed when a comment is submitted:

name, where provided.

email address, where provided.

comment content.

date and time of submission.

IP address.

browser and device information, including the browser user-agent string.

The email address is not made public and is available only to the Data Controller for comment management and moderation.
Once a comment is approved, the name provided by the user, the comment, and the publication date and time may be displayed publicly.
The website does not use Gravatar to display profile images alongside comments.

Professional relationship data

Where an enquiry submitted through the website results in a professional engagement, the Data Controller may subsequently request additional information by email in order to:

prepare a quotation.

enter into and perform an agreement.

issue invoices.

comply with accounting, tax and administrative obligations.

This information is not collected directly through the website. Electronic invoicing is managed through Aruba Electronic Invoicing.

3. Purposes and legal bases

Website operation and security

Technical and browsing information is processed to ensure that the website works correctly, protect its systems and prevent unauthorised access or misuse.
The legal basis is the Data Controller’s legitimate interest in the security and proper operation of the website, under Article 6(1)(f) GDPR.

Responding to contact requests

Contact form data is processed to reply to users and, where appropriate, to take steps requested by the user before entering into a contract.
The legal bases are:

taking pre-contractual steps at the user’s request under Article 6(1)(b) GDPR;

the Data Controller’s legitimate interest in replying to communications that are not contractual in nature.

Publishing and moderating comments

Comment data is processed to allow users to participate in discussions and to enable moderation before publication.
Publication is based on the user’s voluntary request and action. Moderation, abuse prevention and security are based on the Data Controller’s legitimate interest.
Users may request the removal of their comments at any time.

Contractual, tax and administrative obligations

Where a professional relationship is established, personal data is processed to perform the agreement and comply with legal requirements.
The legal bases are:

performance of a contract or pre-contractual steps.

compliance with legal, accounting and tax obligations.

4. Google Analytics

The website uses Google Analytics through Google Site Kit to obtain aggregated information about website use.
Google Analytics may collect information such as:

pages visited.

session duration and characteristics.

interactions with the website.

browser and device type.

operating system.

approximate geographical area;.

technical connection information.

Google Analytics nonGoogle Analytics is not used for advertising, remarketing or commercial profiling. Google Signals and Google Ads integrations are not enabled.
Analytics cookies and tools are activated only after the user has given consent through the Complianz cookie banner. The “Statistics” category remains disabled until consent is provided.
Users may reject, change or withdraw their consent at any time through the consent-preferences button available on the website.
The legal basis is the user’s consent under Article 6(1)(a) GDPR.
Analytics data is retained for the period configured in the Google Analytics property.

5. Google Fonts

The website uses Google Fonts loaded directly from Google’s servers.
When a page is displayed, the user’s browser may connect to Google’s servers to download font files. Technical information such as the user’s IP address, browser type and device information may be transmitted during this connection.
The purpose is to provide consistent typography and presentation across the website.

6. Cookies and consent management

The website uses Complianz to display a cookie banner, collect user preferences and allow consent to be changed or withdrawn.
The banner enables users to:

accept optional categories.

reject consent.

save customised preferences.

change their previous choices.

ICookies that are strictly necessary for website operation and security may be used without consent. Optional analytics cookies and tracking tools are used on the basis of consent.
Further details concerning cookies, their duration and the services that set them are provided in the website’s separate Cookie Policy.

7. Hosting and technical infrastructure

The website is hosted by Hostinger.
The hosting provider may process technical and browsing information in order to:

provide the website infrastructure.

process server requests.

ensure security and service availability.

prevent misuse.

diagnose technical problems.

The location of the data centre used by the hosting plan and the applicable log-retention periods must be checked in the Hostinger control panel or contractual documentation.

8. Hosting e infrastruttura tecnica

The website uses Really Simple Security and an HTTPS connection to improve communication security and protect the website against unauthorised access.
Security tools and the hosting provider may process technical information, including IP addresses and request information, where necessary to identify and prevent suspicious activity.
The legal basis is the Data Controller’s legitimate interest in protecting the website and the personal data processed through it.

9. Backups

The website uses UpdraftPlus to create backups of WordPress files and databases.
Backups are stored in the Data Controller’s personal Google Drive account and may include:

the website database.

WordPress content and settings.

files uploaded to the Media Library.

PDF documents.

comment data.

other information stored in the website’s database or files

Backups are created to prevent data loss and enable the website to be restored following errors, failures, cyberattacks or accidental deletion.
The legal basis is the Data Controller’s legitimate interest in website security, continuity and recovery.

10. Google services

The website uses or may use the following Google services:

Gmail, to receive and retain contact-form messages.

Google Analytics and Google Site Kit, for website statistics.

Google Drive, for backup storage.

Google Fonts, for website typography.

Google’s processing activities are governed by the contractual terms and privacy information applicable to each service.

11. Links to third-party websites

The website contains external links to third-party services and platforms, including:

Facebook

YouTube

Instagram

itch.io

Patreon

PayPal

Amazon

These services are not directly embedded through feeds, videos, payment forms or widgets. Displaying the links does not itself involve direct use of the linked service.
When users select an external link, they leave this website and access the selected third-party platform. Any subsequent processing is governed by the terms and privacy policy of that platform.
The Data Controller does not control how third-party websites collect or use personal data.

12. PDF documents and downloads

PDF documents available on the website are hosted directly in the WordPress Media Library and may be viewed or downloaded using the standard WordPress File block.
No third-party service is used to display the PDF documents.
Viewing or downloading a document may nevertheless generate ordinary technical server-log information, as with other website resources.

13. Recipients of personal data

Personal data may be processed, where necessary, by:

Hostinger, as the hosting and technical-infrastructure provider.

Google group companies, in connection with Gmail, Google Analytics, Site Kit, Google Drive and Google Fonts.

Aruba, for electronic invoicing where a professional relationship is established.

technical providers engaged for maintenance or security where necessary.

public, judicial or administrative authorities where disclosure is required by law.

Personal data is not sold or shared with third parties for advertising purposes.

14. International data transfers

The use of services provided by international companies, particularly Google services, may involve processing or transferring personal data outside the European Economic Area.
Such transfers are carried out using the safeguards provided by the GDPR, which may include:

European Commission adequacy decisions.

participation in a recognised data-protection framework, where applicable.

Standard Contractual Clauses approved by the European Commission.

other safeguards provided by applicable data-protection law.

15. Retention periods

Retention periods:

contact-form enquiries: for up to 24 months from the last communication, unless longer retention is required to protect a legal right or comply with the law.

comments: for as long as the comment remains published, unless the user requests deletion or the comment is removed for breach of website rules;

client and accounting information: for the period required by applicable tax, accounting and civil law.

Google Analytics information: for the period configured in the Analytics property.

technical and security logs: for the period necessary for security purposes and according to the configuration of the relevant services.

backups: according to the backup rotation configured in UpdraftPlus and for as long as needed to restore the website.

cookie preferences: for the period stated in the Cookie Policy or until the user changes or withdraws their choices.

At the end of the applicable period, information is deleted, anonymised or overwritten unless further retention is required by law or for the establishment, exercise or defence of legal claims.

16. Provision of personal data

Providing information through the contact form is voluntary. However, without a valid email address, the Data Controller may be unable to reply.
Submitting a comment is voluntary. The comment itself is required in order to request publication, while the name and email address may be provided according to the fields displayed in the form.
Contractual and tax information requested after the beginning of a professional relationship is necessary to perform the engagement and comply with legal obligations.

17. Automated decision-making and profiling

The website does not use automated decision-making and does not profile users.
Personal data is not used to automatically personalise content, infer personal characteristics or make decisions producing legal or similarly significant effects.

18. Data-subject rights

Where the GDPR applies, users have the right to:

obtain confirmation as to whether their personal data is being processed.

access their personal data.

request the correction of inaccurate or incomplete information.

request the deletion of their personal data.

request restriction of processing.

object to processing based on legitimate interests.

receive their data in a structured, commonly used and machine-readable format, where applicable.

withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

lodge a complaint with the Italian Data Protection Authority.

Requests may be sent to: febogamedeveloper@gmail.com
The Data Controller may request information necessary to confirm the identity of the person making the request.

19. Children

The website is intended for a general audience and is not specifically designed to collect personal data from children.
Where the Data Controller becomes aware that a child’s data has been improperly collected, reasonable measures will be taken to delete the information or restrict its processing.

20. Modifiche alla presente informativa

This Privacy Policy may be updated to reflect changes in the law, the website’s technical configuration or the services used.
The updated version will be published on this page and will state the date of the latest revision.