Privacy Policy

Last updated: October 12 2025

1) What this policy covers

This policy explains what personal data we collect, how we use it, and your choices. “Risorgi” means our website and related services. “We,” “us,” and “our” mean the entity operating Risorgi.

2) Data we collect

• Account data: email, username, name, and password (stored by our authentication provider using industry-standard hashing).
• Content: anything you create or upload on Risorgi and related metadata (for example, timestamps and tags).
• Usage and device data: limited technical information such as IP address and browser user‑agent, used for security, rate‑limiting, and abuse prevention.
• Analytics: privacy‑friendly product analytics via Vercel Analytics to understand service performance and usage. We don’t use tracking cookies for analytics.
• Cookies and similar: we use strictly necessary cookies to keep you signed in and to remember basic UI preferences (for example, a sidebar state cookie and a short‑lived flash message cookie). We also use Cloudflare Turnstile (a security CAPTCHA) which may set essential cookies to prevent abuse.

3) How we use your data

• Operate, maintain, and improve Risorgi.
• Authenticate users and keep accounts secure.
• Prevent spam, fraud, and abuse; enforce our Terms.
• Measure service reliability and performance.
• Send transactional messages (for example, sign‑in or password emails).

4) Sharing and processors

We don’t sell your personal data. We share data with service providers who help us run Risorgi:

• Vercel (hosting and analytics; infrastructure may operate in the United States).
• Supabase (authentication and database; we use an EU region).
• Cloudflare R2 (file storage for media). Regional locations may vary.
• Email service provider (to deliver account emails).

These providers process data on our behalf under their terms and security measures.

5) Data retention

We keep account data for as long as your account exists and as needed to operate the service. Backups and logs may persist for a time after deletion. If you ask us to delete your data, we will delete or anonymize what we can, but copies may remain in backups or archives despite our efforts.

6) Your rights and choices

• Access, correction, deletion, or export of your personal data.
• You can request these by emailing hey@risorgi.com.
• We currently do not use targeted advertising.

7) International transfers

Your data may be processed in multiple countries (for example, the EU and the US) due to how our providers operate. We rely on those providers’ safeguards to protect your information.

8) Security

We use reasonable safeguards and trusted providers to protect your data (including encryption in transit and at rest by our providers). No method of transmission or storage is completely secure.

9) Children

If you are under 18, use Risorgi only with the consent of a parent or guardian.

10) Changes to this policy

We may update this policy from time to time. If we make material changes, we’ll post the updated version and change the “Last updated” date above.

11) Contact

Questions or requests about privacy: hey@risorgi.com