Convenience translation. The Italian version is the authoritative legal text. Italiano

Your privacy.

Updated 16 October 2026.

Controller and contact

Data and purposes

To create and manage your account we process your email, credentials protected by the authentication service and session data. We store the name, bio, photo and links you choose to add. This processing is necessary to provide the requested service under contract performance. Email is required for the account; photo and bio are optional.

To understand whether the service works and is used, we collect only essential statistical and diagnostic events: visited path, action performed, device class, approximate country and a random identifier valid only for the current page load. We do not send email, name, page content or the user’s IP address to product analytics and we do not enable session recording. Do Not Track and Global Privacy Control disable these browser events.

The page becomes publicly accessible when you publish it, including to search engines and external services. The draft is private to your account. For security and abuse prevention, providers may process IP addresses and technical logs based on legitimate interest in protecting the service. We do not use your data for advertising, commercial profiling or automated decisions.

Providers and transfers

Cloudflare distributes the site, keeps technical metrics and routes support mail; Supabase manages accounts, database and photos in a European region; Resend sends confirmations and password recovery messages; PostHog, when configured, receives minimized statistical events in the EU region; support requests reach a Gmail mailbox. We share with providers only the data needed for their functions. Some processing may occur outside the EEA under the safeguards provided in the respective agreements, including Standard Contractual Clauses where applicable.

Cloudflare | Supabase | Resend | PostHog | Google

Retention and device

Page and photo remain until deletion; the account remains until a deletion request. Deleting the page from the editor does not delete the account. Support communications are retained to manage the request and, when needed, protect rights or meet obligations; technical logs and events follow each provider’s retention windows. A public-page copy may remain in our cache for up to one minute after unpublishing; copies held by external services depend on those services.

We do not use marketing cookies. Login stores the necessary session on the device; the demo stores only a local test page that can be removed with its reset command. Omy.bio analytics does not store permanent analytics cookies or identifiers on the device. External links open other sites that apply their own policies.

Your rights

From the editor you can correct your profile and links, unpublish the page, download account data, delete only the page, or permanently delete the account. For access, restriction, objection or other applicable requests you can contact the controller. Editor.

We answer rights requests without undue delay and normally within one month; where the GDPR allows an extension, we will tell you why.

support@omy.bio · Garante per la protezione dei dati personali.