Privacy.
Last updated: July 2026
This is a personal portfolio site. It's designed to collect as little as possible: no cookies, no trackers, no analytics and no form that stores your data. The only thing kept in your browser is your light/dark theme
preference (in localStorage), which stays on your device and is
never sent anywhere. Below, transparently, is what happens to data when you visit the site.
Data controller
The data controller is Matteo Carola. For any request about your data you can write to matteocarola.dev@gmail.com.
Browsing data and hosting
The site is hosted on Vercel. Like any web server, the hosting infrastructure records technical logs that may include your IP address, the date and time of the request, the requested page and browser information. This data is used to run and protect the site (for example to limit abuse of the chatbot) and is not used to profile you or cross-referenced with other sources. The legal basis is the legitimate interest in keeping the service secure and operational.
«Ask Matteo» chatbot
The site includes an assistant that answers questions about me. When you type a message, the text of your question and the most recent messages of the conversation are sent to Google (Google Gemini API) to generate the answer. The request is made from the site's server, so Google receives the content of the message but not your IP address. I don't use these messages for any other purpose and I don't link them to your identity.
The service runs on Google's free tier: under Google's terms, the content sent may be retained and used by Google to improve its services, and may be reviewed by human staff. For this reason, do not enter personal, confidential or sensitive data in the chatbot. Google's processing is governed by its policies: Gemini API terms and Google privacy policy.
Third-party services
Beyond Vercel (hosting) and Google (chatbot), the site loads no third-party resources: fonts are hosted directly on the site and there are no external CDNs, pixels or tracking widgets. Links to external profiles (GitHub, LinkedIn) lead to services that apply their own privacy policies.
Your rights
Under the GDPR you can request access to, rectification or erasure of your data at any time, or object to processing, by writing to matteocarola.dev@gmail.com. Since the site keeps no user database, in practice the only data attributable to you is any technical hosting logs.
This page may be updated if the tools used by the site change. Significant changes will be noted here with the update date.