Privacy: what we know about you

Who handles the data

The data controller is Ciro Simone Irmici, a private individual, who runs Nonnese. For any question or request about your data: [email protected].

If you just read

We ask you nothing and use no cookies. Your votes, where you got to in the word check, the light or dark theme and the numbers of your proposals stay in your browser's storage: they reach us only when you send them. If you leave a form half-filled, the draft stays in your browser until you close the tab.

Visit statistics

We count visits with Vedetta, a tool of our own running on Cloudflare, without cookies. We keep the page, clicks on links to other sites or to email, the site you came from, the country, the type of device, the operating system, the browser, the language and how long you stay. To avoid counting a visitor twice we compute a code from IP address and browser with a secret key that changes every day and is deleted after two days: from then on the code no longer leads to anyone. We don't store the IP address. We keep these numbers for 25 months, don't combine them with anything else and don't give them to anyone. Why: legitimate interest in knowing which pages are useful (GDPR art. 6(1)(f)). You can object by writing to us.

If you vote «is it said like this?»

We keep the answer, the right form if you write it and, if you say so, whether you are from there. To stop people sending too much we also keep a technical fingerprint: a code derived from your IP address with a secret key, which changes every day and is deleted after 30 days. We don't store the IP address. The vote stays, with nothing left that leads to you. Why: legitimate interest in protecting the site from abuse and in knowing how sure a word is (art. 6(1)(f)).

If you share a word

We keep what you write: the word, its meaning, the sentence, the town and your name if you want to add it, plus the technical fingerprint for 30 days. The word, its meaning, the sentence and the town show up right away on the home page among the «just arrived» words, marked «to be checked», so others can vote on it; your name is never shown. If a keeper approves it, it enters the dictionary. Everything is published under the free CC BY-SA 4.0 license, as you accepted by ticking the box. Proposals stay as long as the dictionary exists; we remove your name whenever you ask. Why: your consent to publication (art. 6(1)(a)), which you can withdraw by writing to us: from then on the word no longer appears under your name. If you are under 14, ask an adult to help you.

If you apply as a keeper

We keep name, town, how long you have spoken the dialect, your reasons if you write them and your email, to write to you. You must be at least 18 to apply. Your name appears on the bell tower page only if you become a keeper and want it. If we answer «not now», the email is deleted after 12 months; if you become a keeper, the data stays as long as you are one. Why: your request (art. 6(1)(b)).

If you are a keeper

To enter moderation you use a personal code: we keep only an encrypted version of it, never the code. When you log in, a technical cookie keeps the session open for 12 hours (or until you press «Esci»). Every decision is written down, with who made it and why, as the EU Digital Services Act (DSA) requires. Why: the service you do for Nonnese (art. 6(1)(b)) and the DSA obligation (art. 6(1)(c)).

If you report a problem

We keep the report and, if you leave it, the email to answer you, deleted after 6 months. The report and the decision stay on record. Why: the EU Digital Services Act requires it (art. 6(1)(c) GDPR).

The anti-robot check

Only when you start filling in a form, Cloudflare Turnstile loads to check that there is a person on the other side. To do this, Cloudflare reads some technical data about the browser and the device, receives the IP address and saves a small technical item in the browser's storage, on its own domain. It sets no cookies and does no advertising. If you don't use the forms, Turnstile doesn't load. Why: legitimate interest in keeping robots out (art. 6(1)(f)).

If you write to us

Emails to [email protected] go through Cloudflare (Email Routing) to a Gmail inbox, that is to Google: we use them only to reply and delete them at the latest 24 months after the last exchange. Why: your request (art. 6(1)(b)).

Who else handles the data

Cloudflare hosts the site, the functions, the database, the statistics and the anti-robot check, and forwards the mail; Google keeps the Gmail inbox. They work for us as data processors. They are US companies: when data leaves the European Union it is protected by the EU-US Data Privacy Framework, which both take part in, and by the European Commission's standard contractual clauses. Every time you open a page, Cloudflare's servers receive the technical data of the request (IP address, browser, page, time) to deliver it and protect it from attacks. We don't sell or share data with anyone, and no decision about you is made automatically: the swear-word filter only rejects the text, and you can send your word again.

Your rights

You can ask to see your data and get a copy, to correct it, to delete it, to restrict its use, to object and to receive it in a readable format (GDPR arts. 15-21), and withdraw your consent at any time, by writing to [email protected]. We answer within one month. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the one in the country where you live.

Updated on 21 October 2026. The Italian version is the reference text.