This notice explains what Muretto Box collects, why, who it's shared with, and how to exercise your rights over it. It covers this site (the Muretto Box landing) end to end.
Muretto Box is the name of the project and site. The data controller — the person legally responsible for this processing — is a natural person, not a company:
Controller: Alberto Signorini
Contact email: murettobox@outlook.it
Postal address: available on request via the contact email above.
Pseudonymous usage events about how the interface is used — which race panel you viewed, which driver pill you opened, whether the notify form was opened, attempted or failed. Each event is recorded individually, with technical properties attached to it; the grouping into totals happens later, when reports are produced. We don't describe these events as anonymous. They are cookieless and held in memory only for the length of one page load — the events themselves write nothing to a cookie, to localStorage or to sessionStorage, and no profile tied to you is created just from browsing. Purpose: understanding how the portal is used.
To be precise about what "memory only" covers: it's the browser-side identifier for these events that resets on every page load. The events themselves are sent to PostHog and retained for the period stated in §6.
Separately from those events, this site remembers your driver pick and signup status locally on your device (localStorage), so a revisit doesn't reset what you've already told it. That storage starts at the pick itself, not at signup — see the Cookie Policy for exactly what's stored, whether it's shared, and how we treat it.
Vercel Web Analytics also runs on these pages, separately from the events above. According to Vercel's own documentation it can process the timestamp of the visit, the URL or route you visited, the referrer that brought you there, your browser, operating system and device type, an approximate location, and a short-lived identifier derived from the request. Purpose: measuring traffic to the site.
Your email address, the driver you picked, and the delivery state of the emails we send you (for example, whether the post-qualifying analysis for a given race was sent to you, and whether you've unsubscribed). Purpose: sending you the post-qualifying analysis email you asked for, and not re-sending it to you twice or after you've opted out.
Vercel produces runtime and access logs for this site and for its API endpoints (/api/notify, /api/publish-race, /api/unsubscribe). These logs can include the request path, the timestamp, the HTTP status code, the user agent string, and the IP address the request came from. They are generated by the hosting platform as part of serving the site, not by anything we add to the page. Purpose: operating the service, diagnosing errors, and preventing abuse. Retention: see §6.
Your IP address is transmitted to PostHog when an event is sent, and may be used transiently for bot detection. It is not stored alongside the event, and no location is derived from it: GeoIP enrichment is switched off in the PostHog project, so events captured from that point onward carry no location properties at all.
Events captured before GeoIP enrichment was switched off do still carry a country and city derived from the IP address at the time. Those historical events remain in place until they age out under the retention period in §6.
Your IP address also reaches Vercel as an ordinary part of serving the page, where it can appear in the technical logs described in §2c, and reaches Google when your browser requests the web fonts described in §5.
Receives the usage events described in §2a and, for anyone who submits the form, the email address and chosen driver described in §2b. This project is on PostHog's EU Cloud, so the project's data is hosted in the EU.
PostHog Inc. is nevertheless a US company, and it engages a chain of its own subprocessors. EU hosting of the project's data does not by itself mean that no processing can take place outside the EU. PostHog publishes its subprocessor list and its Data Processing Addendum, which incorporates the EU Standard Contractual Clauses for transfers outside the EEA; you can request a copy of the safeguards via the contact email in §1.
Hosts this site and its serverless API endpoints (/api/notify, /api/publish-race, /api/unsubscribe). Vercel also runs Vercel Web Analytics on these same pages — a separate, lightweight visit-counting tool from PostHog, covering only pageviews.
Vercel Inc. is a US company. Serverless functions run in the US (region iad1) by default unless explicitly configured otherwise, and account/control-plane data is processed in the US regardless of function region.
Vercel's published Data Processing Addendum incorporates the EU Standard Contractual Clauses for transfers outside the EEA, but by its own terms it applies to customers on paid plans. This site is not on one. We have not independently confirmed whether the same contractual coverage extends to our current plan tier, and we are looking into it. We would rather state that openly here than imply a safeguard we cannot yet evidence.
Sends the post-qualifying analysis email to subscribers.
Resend is a US company. Account data — including email content, delivery logs, and metadata — is stored in the United States regardless of the sending region configured. Transfers outside the EEA are made under the EU Standard Contractual Clauses incorporated in Resend's Data Processing Addendum; you can request a copy of the safeguards via the contact email in §1.
Not a deliberate data-sharing relationship — an incidental side effect of loading web fonts. Every page load requests font files from Google's CDN, which transmits your IP address and browser information to Google in the US. Muretto Box does not receive, store, or use this data. Self-hosting these fonts to remove this exposure is planned, but not done yet.
Not shared with: Splitforms (no longer used; its account and data were deleted) or Amazon SES (confirmed out of the live email path).
Under GDPR, you have the right to access, rectify, erase, restrict or object to the processing of your data, and to receive it in a portable format where that applies. Where processing relies on consent (§3), you can withdraw that consent at any time, with no effect on processing already carried out.
To unsubscribe from emails, use the unsubscribe link at the bottom of any email we've sent you — it carries the identifier needed to remove the right person, so it only works from the email itself. For any other request — access, correction, deletion, or a question about this notice — write to murettobox@outlook.it.
No automated decision-making with legal or similarly significant effects for you takes place on this site.
You also have the right to lodge a complaint with the Garante per la protezione dei dati personali, the Italian data protection authority.
This service is not directed at children under 14 — the age from which a person can consent to information society services on their own account in Italy. We do not knowingly collect personal data from anyone below that age.
If we become aware that a minor has submitted personal data without the necessary basis for it, we will delete it. If you believe that has happened, write to the contact email in §1 and we will remove it.
There is no cookie banner on this site — it was removed because the Tier 1 usage events need no consent gate: they write nothing to your device, and browsing alone builds no profile of you. They run for every visitor.
A person profile is created only when you submit the email/pick form. At that point, the temporary id from your browsing session cannot be attached to that profile — it resets on every page load, so sending it would create a new profile per visit for the same address. Instead, the profile is keyed by a SHA-256 hash of your email address. This is a pseudonym, not anonymisation: your raw email address is still processed and stored in PostHog for anyone who signs up.
A second tier — an explicit consent checkbox at signup, enabling identified tracking linked across visits — does not exist yet. It's planned, with no date set. This notice will be updated when it ships.