Privacy and cookies

Last updated: 9 October 2026

Your poster stays on your device. Text, photos and projects are processed in your browser: Papiro Studio does not upload them to an online archive. The site does not require registration and does not use advertising or profiling.

Who operates the site and how to get in touch

The data controller is Alessandro Perozzo. For information or requests about personal data, write to lupin28 [at] gmail [dot] com, replacing [at] with @ and [dot] with a full stop. The address is written this way to limit automated collection for spam.

Projects and saving on your device

Content you enter, including any information about other people, is used only in your browser to create and export your poster. The controller does not receive this content. Downloaded JSON, PDF and PNG files stay wherever you choose to save them.

Autosave uses your browser’s local storage (localStorage) under the key papiro-laurea-autosave. It keeps the latest project, its name and the save date so you can continue working. It has no automatic expiry: it remains until replaced by a new save, deliberately deleted or removed by the browser.

You can delete it using “Delete local autosave” on the home page, after downloading a file if you want to keep a copy. Close other editor tabs first: a tab still open could save the project again. You can also remove this site’s data in your browser settings. Files already downloaded are not deleted.

When you change language while editing, a temporary sessionStorage flag lets the editor reopen the same local project after navigation. The flag is removed on arrival and does not identify you. Language is determined by the page URL; no language cookie is used.

Technical data and statistics

To deliver pages and protect the service, Cloudflare infrastructure processes connection data such as your IP address, request date and time, requested URL and technical browser information. The purpose is site operation and security; the legal basis is the controller’s legitimate interest in providing a reliable service and preventing abuse (GDPR Article 6(1)(f)). Pages cannot be delivered without the necessary connection data.

The controller does not maintain a separate archive of visit logs. Technical data managed by the provider follows the retention periods necessary for delivery, security and applicable obligations, described in Cloudflare’s privacy policy; it is not stored in the export counter database.

Export counts: when a file is generated, the site sends its own service only the format (PDF, PNG or draft). The database stores day, format and total, without visitor identifiers or project content. Aggregated totals are retained to measure use of the project, and the overall total is public. They do not measure unique people.
Visit statistics: Cloudflare Web Analytics produces usage and performance statistics. According to the service documentation, it does not use cookies or local storage to track visitors and does not collect personal data for analytics. Statistics help us understand and improve site operation.

Cookies and other local technologies

The application does not install advertising or profiling cookies. The local storage described above helps recover your work without identifying you for advertising. Fonts, template images and editor libraries are served by the site, without external font services.

Strictly necessary technical tools do not require prior consent, but information about their use is still required. No consent banner for advertising or profiling is shown, because these are absent. Any new tools requiring consent will only be activated after introducing the relevant choice.

Providers and transfers outside the European Economic Area

Cloudflare provides hosting, network infrastructure, analytics and the export count database. It may act as a processor for data handled on behalf of the controller and for its own purposes in the cases described in its privacy notice. Its infrastructure is international: we do not assume that all technical data stays within the European Union.

The Cloudflare Data Processing Addendum describes safeguards for transfers, including, where applicable, standard contractual clauses and other mechanisms provided by law. Contact the controller for information about safeguards applicable to this site.

Contact and voluntary contributions

If you send an email, the controller receives your address and message to answer your request, on the basis of legitimate interest in managing contacts or, where relevant, GDPR obligations. Correspondence is retained for the time necessary to handle the request and any related obligations or disputes, with periodic checks of whether it is still needed. It is not used for newsletters or marketing.

PayPal and Instagram links open external sites only when you select them; we do not embed their widgets. Their respective privacy policies apply from that point. If you contribute through PayPal, PayPal handles the payment and this site does not receive card details. PayPal may show the recipient transaction and sender information according to its settings and terms. The controller uses this information to manage the contribution and applicable obligations, on the basis of performing the transaction and legal obligations, retaining it for the time necessary for those purposes. See PayPal’s privacy notice.

Your rights

For personal data processed by the controller, you may request access, rectification, erasure, restriction and, where applicable, portability, and object to processing based on legitimate interest. If processing relies on consent, you may withdraw it without affecting earlier processing. No automated decisions producing legal or similarly significant effects are made.

Write to the contact address above: the controller normally responds within one month, subject to extensions allowed by the GDPR. For projects stored only on your device, you can manage your browser data directly because the controller does not hold them. You may lodge a complaint with the Italian Data Protection Authority or the competent authority in your country.

This notice covers Papiro Studio at papiro-studio.pages.dev. It will be updated if features, providers or processing change.