Privacy
What personal data darceon.it processes, why, who it shares it with and for how long. Regulation (EU) 2016/679 (GDPR), version 2026-10.13.
This is an English translation of the Italian text. In case of differences, the Italian version prevails. Testo originale in italiano
Last updated: 14 October 2026
The [TO BE COMPLETED] fields must be filled in before publication.
01In short
- Without an account the site collects no personal data, apart from the technical data needed to show the pages (including the map images, loaded from OpenFreeMap).
- With an account: email, password (only in encrypted form), first name, last name, date of birth, city and, if you add them, where you play, Instagram and preferences.
- You must be 18 or older to sign up.
- Reservations are free and carry no commitment: no payment data.
- Only anonymous visit statistics, without cookies or external services. No advertising. The data is never sold.
- Three optional, separate consents, all off until you switch them on: newsletter, promotional communications and profiling. You can change them from your Profile at any time; without the profiling consent the site profiles nobody.
- The database and accounts are on a server in the European Union (Frankfurt).
- You can see, correct and delete your data yourself, at any time, from the Profile page.
02Data controller
Davide Cessaria, a private individual running the site in a personal capacity, with no business activity.
Email for privacy matters and to exercise your rights: info@darceon.it.
Data Protection Officer (DPO): not appointed, as it is not required for processing of this size (Art. 37 GDPR).
03What data
| Data | When | Required |
|---|---|---|
| Email and password (stored only as an encrypted hash, never readable) | Sign-up | Yes (no password if you sign in with Google) |
| First name, last name, date of birth | Sign-up or first sign-in with Google | Yes |
| City: an Italian municipality (with ISTAT code and province) or, if you live abroad, city and country | Sign-up or Profile | Yes (for those signing up from 7 October 2026) |
| Where you play: a court in the archive or a point on the map, saved to about 100 metres | Sign-up or Profile | No |
| Instagram username | Sign-up or Profile | No |
| Date, time and version of the notice read and of the terms accepted; newsletter request, confirmation and withdrawal; choices on promotional communications and profiling; for each one the date and version of the notice (consent log) | Sign-up and every change of a consent | Yes (newsletter, communications and profiling are optional) |
| Passkey, if you create one: the public key, the name you give it, creation and last-use dates. The private key and the fingerprint or face that unlock it stay on your device | Profile, Security | No |
| Card number, personal invite code, who invited you | Assigned by the system when you confirm your email | — |
| Size, colours and favourite court | Profile, preferences | No |
| Court suggestions: point on the map (latitude and longitude, to the metre), court name, city, area, text, date, moderation status; courts you back | When you suggest or back a court | No |
| Device location, only if you press “Use my location”: it stays in the browser and is used to place the pin; the site only receives the point of the suggestion you send | On your request, in Suggest a court | No |
| Text of an address or city search (for the pin) | When you search on the Suggest a court map | No |
| Reservations: piece, colour, size, quantity, date, any cancellation date | When you reserve | Yes, to reserve |
| Technical data: IP address, browser, date and time of requests and sign-ins | Every visit and every sign-in | Yes, they keep the site working and protected |
Sign-in with Google. If you choose it, Google shares your email address, name and profile picture with the authentication service, and they stay linked to the account. First and last name are only used to prefill the profile, which you can correct. The site never receives your Google password.
What is not asked. Delivery address, phone number and payment details: they are not needed today, because the site does not sell. They will only be asked when purchases open, with an updated notice published first.
Suggested courts. A suggestion is visible only to you until Darceon approves it; once approved, the point, court name, city, area and text appear on the site, including on the map of courts, never your name or email. Do not write personal data: addresses with house numbers, emails, links and phone numbers are rejected.
Why the city is asked. Darceon is an archive of city courts: knowing which cities its followers live in helps choose which courts to document next and where to bring the drops. It is only used as a count (how many members per city), never to show who lives where. The municipality is enough: no address. The list of municipalities is the ISTAT one, loaded from the site itself, with no external services. “Where do you play?” is optional and has the same purpose: the point on the map is rounded to about 100 metres, enough to know the area, not to identify a home.
Invites. Whoever invited you only sees how many friends signed up with their link, never your name or email.
04Why, and on what basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and managing the account, signing you in (password, Google or email link), card, field notes and invite link | Service you request by signing up (Art. 6(1)(b)) |
| Checking that you are at least 18 (your date of birth is not visible to others) | Requested service (Art. 6(1)(b)) and legitimate interest in not registering minors (Art. 6(1)(f)) |
| Recording reservations, sending their confirmation and letting you know when the reserved drop is out | Your request ahead of a possible purchase (Art. 6(1)(b)) |
| Service emails: sign-up confirmation, sign-in links, new password | Requested service (Art. 6(1)(b)) |
| Court suggestions: moderating them, publishing approved ones without your name, counting votes | Service you request by suggesting or backing a court (Art. 6(1)(b)) |
| City and “Where do you play?”: counting members per city and per court, to choose the next courts to document and where to bring the drops | Legitimate interest in growing the archive where its followers are (Art. 6(1)(f)); counts only, no profiling. The city is required; “Where do you play?” is not |
| Newsletter: drop releases and new reports | Only with your separate, optional consent (Art. 6(1)(a)), confirmed through the link sent by email (double opt-in). It can be withdrawn from your Profile at any time |
| Promotional communications by email: early access to drops, events at the courts, initiatives | Only with your separate, optional consent (Art. 6(1)(a) and Art. 130 of the Italian Privacy Code). It can be withdrawn from your Profile at any time |
| Profiling: using size, colours, favourite court, city and reservations to choose which communications to send you | Only with your separate, optional consent (Art. 6(1)(a)). Today it is active for nobody: without consent it never will be |
| Sign-in with a passkey (your device's fingerprint, face or PIN instead of the password) | Service you request (Art. 6(1)(b)) |
| Security: attempt limits, anti-bot check, blocking of disposable emails, check of exposed passwords, technical logs | Legitimate interest in protecting the site and its users (Art. 6(1)(f)) |
| Showing the map of courts and searching an address for the pin | Legitimate interest in showing where the archive's courts are (Art. 6(1)(f)); device location only on your request, with the browser's permission |
| Responding to requests from authorities and legal obligations | Legal obligation (Art. 6(1)(c)) |
The notice box in the form records the date, time and version of the text you read: it proves that you received it. The account is not based on consent, but on the service you request.
Security checks, in detail. When you type your email, the server checks that the domain is not disposable and that it receives mail (public DNS records; only the domain is queried, never the address). When you choose a password, the server computes its SHA-1 hash and sends only the first 5 characters to Have I Been Pwned's Pwned Passwords service, which replies with the compromised hashes starting that way: the comparison stays on the server and neither the password nor its full hash leaves the site. Attempt limits use the IP address, kept in memory for 10 minutes.
Profiling only with consent. Without the optional consent the site profiles nobody; with it, preferences are only used to choose what to send you, never for third-party advertising. There are no decisions based solely on automated processing that produce legal effects on you.
05Minimum age
You must be 18 or older to sign up. Your date of birth is compared with today's date both in the form and in the database, which rejects profiles of minors. If you find out that a minor has signed up, write to info@darceon.it: the account will be deleted.
06Who receives the data
The data is processed only by whoever runs the site and by the providers below, each for its own task. It is not sold or passed on for marketing purposes.
| Provider | What for | What it receives | Where |
|---|---|---|---|
| Supabase Inc. (processor) | Database, accounts, sign-in, service emails | All account and reservation data, IP and technical data of sign-ins (logs: see “For how long”) | Servers in the EU (Frankfurt, Germany); company based in the United States |
| Cloudflare, Inc. (Turnstile) | Anti-bot check on sign-up, sign-in and password recovery | IP, browser and device characteristics, signals of interaction with the page | Global network; company based in the United States |
| Hostinger International Ltd (site hosting, processor) | Hosts the site and answers requests, also through its content delivery network (CDN) | IP, browser, requested pages (server logs) | Servers in the EU (Frankfurt, Germany); company based in the EU (Larnaca, Cyprus) |
| Google LLC (only if you choose “Continue with Google”) | Sign-in with your Google account | That you are signing in to darceon.it; Google is an independent controller of your Google account data | United States and other countries |
| OpenFreeMap (map tiles) | Draws the map on the court pages, the home page and Suggest a court | IP and technical data of the request (browser, referring site), as for any image loaded from another site; no cookies | [TO BE COMPLETED] |
| OpenStreetMap Foundation (Nominatim, address search) | Finds the address or city you search for the pin | Only the search text, sent by the site's server: your IP does not reach Nominatim | United Kingdom |
| Have I Been Pwned (Pwned Passwords) | Check of exposed passwords | Only 5 characters of the password hash: not personal data | Global service |
Upcoming services, not active today. Resend (sending reservation and newsletter confirmation emails and the notice for inactive accounts; it will receive the email address and message content), Printful (production and shipping of the T-shirts) and Stripe (payments). Before they are activated this notice will be updated with who they are, what they receive and where.
07Transfers outside the EU
The database and accounts stay in the European Union. Some providers are companies based in the United States or use global networks, so a transfer of data outside the EU is possible:
- Cloudflare and Google: European Commission adequacy decision for companies participating in the EU-U.S. Data Privacy Framework (Art. 45 GDPR).
- Supabase: the data is stored in Frankfurt; any access from outside the EU (for example technical support) is covered by the standard contractual clauses of the data processing agreement (Art. 46 GDPR).
- OpenStreetMap Foundation (Nominatim): United Kingdom, European Commission adequacy decision (Art. 45 GDPR). It only receives the search text.
- OpenFreeMap: [TO BE COMPLETED].
- Hostinger: the site is hosted in Frankfurt, Germany, by a company based in the EU; no transfer outside the EU is planned for visitors from Europe.
You can ask for a copy of the safeguards by writing to info@darceon.it.
08For how long
| Data | For how long |
|---|---|
| Account, profile, card, preferences | Until you delete the account, or 24 months after your last activity (sign-in or use of the account). At least 30 days before, you receive an email with the date: signing in is enough to keep it |
| Sign-ups never confirmed | 48 hours: if the confirmation link is not opened, account and data are deleted automatically (the check runs every hour) |
| Reservations, including cancelled ones | Until you delete the account |
| Court suggestions and votes | Until you delete the account or withdraw the pending suggestion; unpublished ones stay visible only to you |
| Newsletter choice and dates | With the account; consent lasts until withdrawn |
| Consents to communications and profiling, consent log | With the account; each consent lasts until withdrawn, the log proves the choices made |
| Passkey (public key and name) | Until you remove it from your Profile or delete the account |
| Newsletter confirmation link (only as an encrypted hash) | Until confirmation, 7 days at most |
| Date and version of the notice read and of the terms accepted | With the account |
| IP address for attempt limits | 10 minutes, in memory only |
| Log of the administration area (who acted, what, on what, when; for a deletion, only the card number) | As long as it is needed to prove correct management; it cannot be changed or deleted from the area itself |
| Address searches and results (without the name of whoever searched) | Up to 24 hours, in memory on the server only, to avoid repeating the same search |
| Supabase logs: database and API requests (with IP address) | 1 day (free plan; source: supabase.com/pricing, “Log retention”, consulted on 5 October 2026) |
| Supabase Auth sign-in log (action, date, IP, browser) | 1 hour in the log service (free plan, same source, “Auth Audit Logs”); any copy in the database is deleted after 7 days |
| Deletion notices for inactivity | Until the account is deleted or you come back |
| Server logs (Hostinger) | [TO BE COMPLETED] |
| Cookies and browser storage | See the cookie policy |
09Deleting the account
From your Profile, “Delete the account”: the account, profile, card, preferences, reservations and suggested courts are deleted immediately and for good, and the session closes. Anyone who signed up with your invite stays signed up, but no longer linked to you.
Only the providers' technical logs remain, for the time stated above, and whatever the law requires to be kept.
Inactive accounts. After 24 months without sign-ins or use of the account, the account is deleted in the same way. A notice email with the date arrives first, at least 30 days before: signing in is enough to keep it. Without a delivered notice the account is not deleted.
10Your rights
At any time you have the right to ask for:
- access to your data and a copy (Art. 15);
- rectification of incorrect data (Art. 16);
- erasure (Art. 17);
- restriction of processing (Art. 18);
- portability, that is, your data in a machine-readable format (Art. 20);
- objection to processing based on legitimate interest (Art. 21);
- withdrawal of your consent to the newsletter, promotional communications and profiling, without affecting what was done before (Art. 7);
- objection to direct marketing and related profiling, at any time and without giving a reason (Art. 21(2)).
You can do many things yourself in your Profile: see and correct the profile, change the newsletter, communications and profiling, manage passkeys, cancel reservations, download a copy of your data in JSON format (access and portability), sign out of all devices, delete the account. For everything else write to info@darceon.it: you will get an answer within a month.
You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or with the authority of the EU country where you live.
11How it is protected
- Encrypted connection (HTTPS) across the whole site.
- Passwords stored only as an encrypted hash; session cookies cannot be read by the page's scripts.
- Each person can read and change only their own data: the database rules enforce it, not just the site.
- Accounts become active only after email confirmation; anti-bot check and attempt limits.
- The administration area opens only to the data controller, only with two-step verification, and closes by itself after 30 minutes of inactivity. It does not show who wrote a suggestion; for reservations it only shows the card number. A member's record opens only by searching for it, to answer a request of theirs, and is read-only: you correct your data yourself from your Profile. Suspending or deleting an account (at your request, or for use contrary to the terms) and exporting data require the verification code again, and every action is kept in a log that cannot be changed.
12Visit statistics
To know which pages are useful, the site counts visits anonymously, without external services: for each page view the browser sends darceon.it's server only the page path, the source in one category (Instagram, Google, direct, other site, internal page), the device type (phone, tablet, computer), the page language and whether the visit starts there.
No IP address, browser, identifier or account is stored; the time is rounded to the hour; no cookies or browser storage are used. The rows cannot be linked to each other or to a person: they are not personal data. With «Do Not Track» or Global Privacy Control on, nothing is counted. Profile and admin pages are not counted. The data stays in the EU database (Supabase, Frankfurt) for 13 months, then deletes itself.
14Changes
When this notice changes, the version and date at the top change too. The version read is saved with each sign-up. If the changes substantially affect data already collected, members receive a notice by email.