Privacy Policy
Cittadelle is an independent project based in Italy. For anything in this policy — access, correction, deletion, or a complaint — contact [add contact email].
Necessary to create and run your account: username, email address, and password — stored as a one-way cryptographic hash, which means we cannot read it, and neither can anyone who gains access to the database. Anything optional you choose to add to your profile (bio, display name) is used only to show your profile as you set it.
Sources, posts, verification notes, contestations, Briefs, graph proposals, and anything else you choose to submit. This isn't "collected" in the surveillance sense — it's what you came here to write, visible according to the platform's ordinary rules (publicly, or within the Chambers you belong to).
The text of your Correspondence conversations is stored so you and the other person can see your own message history. It has no public code, cannot be cited, anchored, or surfaced anywhere else on the platform, and we do not read it or use it for anything beyond delivering it to the person you sent it to.
Images and documents you attach to a source are stored on our cloud storage provider, linked to your account.
Cittadelle does not use tracking cookies, advertising pixels, or analytics that profile you. Your browser's local storage is used only to keep you signed in (a session token) and to remember, on your own device only, which pages you've recently visited — we never see or store that second part ourselves. We do not log IP addresses in our own application code. Honest caveat: the infrastructure providers that host Cittadelle (Section 3) generate standard connection-level logs as a normal part of running any web service, for security and operational reasons — this is outside our direct control and is not used by us to profile you.
Running Cittadelle at all means a small number of outside services handle parts of your data on our behalf, strictly to do the one job we ask of them. None of them may use your data for their own purposes, and none of them are a channel through which we share your data with anyone else.
We do not sell your data. We do not share it with advertisers or data brokers. We do not use it for advertising, and there is no advertising on Cittadelle. This isn't a policy we might quietly change later — it's the reason the platform doesn't have trackers or ad infrastructure in the first place.
For as long as your account exists, plus a short period afterwards for security and legal purposes. If you delete your account (Settings → Danger zone), your login credentials and profile are removed. Your source submissions, verification notes and Brief contributions remain in the archive, reattributed to [Departed] — a deliberate design choice, not an oversight: the archive is a documentary record, and losing evidence because a contributor left would undermine the reason it exists. Private messages you sent remain visible to the other person in the conversation, the same as any message you've ever sent anyone.
Covered in Section 2: no tracking or advertising cookies, and no consent banner, because the only browser storage we use is functional — keeping you signed in and remembering your own recent activity on your own device — not tracking or advertising.
Under the GDPR, you have the right to:
- Access the personal data we hold about you;
- Correct it if inaccurate — most of this you can already do yourself in Settings;
- Delete it — Settings → Danger zone deletes your account; see Section 4 for what happens to your published contributions and why;
- Export your data in a portable format — Settings → Data & Export already lets you download your sources, notes and Briefs as JSON, CSV or Markdown, or your full archive as a ZIP, whenever you want, without asking us first;
- Object to or restrict certain processing.
To exercise any of these beyond what Settings already gives you directly, contact [add contact email].
Passwords are hashed, never stored in plain text. Access to the underlying database is restricted to the person operating Cittadelle. No system is perfectly secure and we can't guarantee against every possible breach — but we don't collect more than we need, which limits what there is to lose.
Cittadelle is not intended for anyone under 18, and we do not knowingly collect data from anyone under that age — consistent with the eligibility requirement in the Terms of Service.
If we materially change how we handle your data, we'll show you the updated policy and, where required, ask you to accept it again — recorded the same way as the Terms of Service.
Questions, requests, or concerns about your data: [add contact email].
You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection authority), or with the data protection authority of your own EU country of residence if different.