Privacy
Why this page exists. Everything on this site is self-hosted: the blog, the guestbook and the visit counter all run on my own server. That's great for your privacy, but it also means I'm the one operating the services you use here, and EU law (the GDPR) requires me to have a privacy policy. Here it is, written to be read, not to be skimmed past.
The short version. This site sets no cookies, runs no analytics, loads no third-party trackers, and sends nothing to anyone else's servers while you browse. Two things here process a small amount of data: the guestbook and the visit counter. Both are described in full below. As the owner of this site I'm the data controller, reachable at hello@tulite.it.
The guestbook
What you type is what gets stored: your name, your message, and, if you add them, your country and your website, together with the date and time you sent it. Nothing else is collected: no IP address, no cookies, no browser fingerprinting, no analytics.
The spam check (ALTCHA) is self-hosted too: it runs entirely in your own browser as a proof-of-work computation and only ever talks to this server.
Your message is stored and published only with your consent (Article 6(1)(a) GDPR), the consent you give by choosing to submit the form. Every message waits for manual review before it appears; spam and messages containing personal information about other people won't be published. When you submit an entry, I may receive a Telegram notification that contains no personal data at all, just the fact that a new entry awaits review. Your name, message, country and website never leave the server, and nobody else receives them.
Approved entries stay until you ask me to delete them (or until I prune old ones). Pending entries that aren't approved are deleted.
The visit counter
The visitor number in the sidebar is self-hosted. For each page view it receives only the path of the page. To count visitors fairly it computes a SHA-256 hash of your IP address, your browser's User-Agent and a random salt that lives in memory only and is destroyed at midnight. Only the hash and the daily count are stored: the hash cannot be traced back to you, and because the salt changes every day, visits on different days can never be linked together. No cookies, no localStorage, no fingerprinting, no third-party requests.
Your data, your rights
Under the GDPR (Articles 15-22) you can ask me to confirm what data of yours is processed, access it, have it corrected or erased, restrict or object to its processing, or withdraw consent at any time. Since the guestbook doesn't collect your email address, just write to hello@tulite.it and identify the entry (by name, date, or a quote of its text).
About corrections: entries are written by their authors and I don't edit other people's words, so there is no edit button. If something needs to be corrected, tell me what to fix: I'll delete the entry and you can submit it again, corrected. Or simply ask for it to be deleted for good, no questions asked either way.
If you're unhappy with how I handle your data, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.
Changes. If this policy changes, the "last updated" date below changes too. Updates never apply retroactively.
Last updated: 7 November 2026