Privacy Policy.

1. Who we are

Superdots ("we", "us") operates the website superdots.sh (the "Site"). For questions about this policy, contact us at privacy@superdots.sh.

2. What data we collect

We collect the minimum data needed to run this Site:

Data	Purpose	Legal basis (GDPR)
Usage analytics (page views, referrer, device type) via Google Analytics 4	Understand which content is useful so we can improve the Site	Consent — Art. 6(1)(a)
Theme preference (sd-theme in localStorage)	Remember your light/dark mode choice	Legitimate interest — Art. 6(1)(f)
IP address & server logs (via Cloudflare)	Deliver pages, protect against abuse	Legitimate interest — Art. 6(1)(f)

We do not collect names, email addresses, or any other personal information. There are no user accounts, contact forms, or newsletter sign-ups on this Site.

3. Cookies and similar technologies

See our Cookie Policy for the full list of cookies, their purposes, durations, and how to manage them.

4. Third-party data processors

Service	Purpose	Data shared	Privacy policy
Google Analytics 4	Traffic analytics	Pseudonymised usage data, IP address (anonymised by default in GA4)	Google Privacy
Google Fonts	Web fonts	IP address, HTTP headers sent with font requests	Google Privacy
Cloudflare Pages	Hosting, CDN, DDoS protection	IP address, request metadata	Cloudflare Privacy

5. International data transfers

Google and Cloudflare may process data outside the EEA. Both rely on Standard Contractual Clauses (SCCs) and, where applicable, the EU–US Data Privacy Framework as transfer safeguards. You can review Google's transfer mechanisms in their data transfer documentation.

6. Data retention

• Google Analytics data: retained for 14 months (GA4 default), then automatically deleted.
• localStorage (theme): persists until you clear your browser data.
• Cloudflare logs: retained per Cloudflare's standard retention (typically 72 hours for edge logs).

7. Your rights

Under GDPR (and Italian D.Lgs. 196/2003 as amended by D.Lgs. 101/2018), you have the right to:

• Access the personal data we hold about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure ("right to be forgotten") (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time for analytics cookies, without affecting the lawfulness of prior processing (Art. 7(3))

To exercise any of these rights, email privacy@superdots.sh. We will respond within 30 days.

8. Complaints

If you believe your data protection rights have been violated, you may lodge a complaint with:

• Garante per la protezione dei dati personali (Italian Data Protection Authority) — www.garanteprivacy.it
• Or your local EU supervisory authority under Art. 77 GDPR.

9. Changes to this policy

We may update this policy from time to time. Changes are effective when posted on this page. The "Last updated" date at the top reflects the most recent revision.