Privacy policy
How personal information is handled when you browse the Gostrax marketing website, contact Denis or request early access.
Draft for review · Updated 5 October 2026Who is responsible
Denis Franchi is the controller for the personal information described in this notice. Contact: denis@denisfranchi.dev. This notice covers the marketing website and early access enquiries; it does not describe the processing of client website content inside the authenticated Gostrax workspace.
Information you provide
The early access form requests your name, agency name, work email and the number of Astro sites you manage. Your agency website is optional. If you contact Denis by email, your address, message and any information you include are processed to handle your enquiry. Required fields are needed to review an access request; you can browse the site without submitting them.
Purposes and legal grounds
Enquiries and early access requests are used to respond to you and assess the access you request, including steps taken at your request before entering into a service relationship (Article 6(1)(b) GDPR). Technical measures to protect the site and prevent abuse rely on legitimate interests in operating a secure service (Article 6(1)(f)). Information may also be processed where required by law (Article 6(1)(c)). An access request is not a subscription to unrelated promotional emails.
Technical information and service providers
Website delivery and form infrastructure may process IP addresses, request times and technical connection information. The prepared Supabase early access endpoint derives an HMAC identifier from the forwarded IP address for rate limiting, rather than storing the raw IP in its rate-limit table. Hosting or network providers may separately process technical logs. The definitive providers, regions and any international transfer safeguards must be confirmed for the public deployment.
Website statistics
The public marketing website uses Vercel Web Analytics for aggregate visitor and page-view statistics. Measurements can include the page URL, referrer, approximate location and browser or device information. Vercel describes its analytics as cookie-free, with a visitor hash that resets daily. The marketing integration does not send the early access form contents or configure custom events.
How long information is kept
Enquiry information is kept for the purposes described above and any applicable legal obligations. A specific retention period for early access requests is still being confirmed. The current code does not automatically delete early access requests. Rate-limit entries older than one day are cleaned when the submission function runs; this does not delete access requests or provider logs.
Your rights
Where applicable, you may request access, correction, erasure, restriction or portability of your information, and object to processing based on legitimate interests. If processing relies on consent, you may withdraw it without affecting earlier lawful processing. Email denis@denisfranchi.dev to make a request. You may also lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali, or your competent supervisory authority.
Decisions and updates
The marketing form does not implement automated decisions with legal or similarly significant effects or behavioural profiling. This notice will be updated when the site’s processing changes. The date at the top identifies this draft’s latest update.