Privacy policy

Information under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR"). Last updated: 30 September 2026.

Data controller

The data controller is [to be completed]. For any privacy request, send a direct message on Instagram to @tightsandthecity.

What data we process and why

Browsing data

The servers hosting the site (Vercel) automatically log some technical data about requests, such as IP address, date and time, requested page and browser, to keep the site running and secure. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). The data is kept only as long as necessary.

Performance measurement

We use Vercel Speed Insights to measure page speed in an aggregated, anonymous way. It uses no cookies and does not identify visitors.

Analytics (Google Analytics 4)

With your consent we use Google Analytics 4, by Google Ireland Ltd, to learn which articles are read and how people reach the site. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from the "Manage cookies" link at the bottom of every page. Without consent Google receives only anonymous, cookie-free signals (Consent Mode). Google Analytics 4 does not store IP addresses.

Advertising (Google AdSense)

The site shows Google AdSense ads. Google and its partners may use cookies to serve and measure ads, including based on your interests, only with your consent collected by Google's certified consent management platform (CMP). Without consent, non-personalised ads may be shown. More information:how Google uses data from partner sites.

Embedded content

Some articles contain Getty Images photos, Instagram posts or YouTube videos. They load only when you click to view them; from then on the third-party service may collect data under its own policy.

Messages you send us

If you write to us, we use the data in your message only to reply. Legal basis: handling your request.

Recipients and transfers

Data may be processed by the providers that help us run the site, as processors or independent controllers: Vercel Inc. (hosting), Google Ireland Ltd and Google LLC (analytics and advertising). Some are based in the United States: transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We do not sell personal data.

How long

Analytics data is kept for 14 months, messages for as long as needed to handle the request, technical data for the period set by the hosting provider.

Your rights

You can request access to, rectification, erasure, restriction and portability of your data and object to its processing (Articles 15–22 GDPR), and withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority, such as the ItalianGarante per la protezione dei dati personali.

Cookies

For details on cookies and how to manage them, see the cookie policy.