Privacy Policy

Overview

This portfolio website is operated by ONION AUDIO di Federico Manuppella, the data controller for the purposes of GDPR. I collect only what's necessary to respond to contact enquiries and to keep the site running smoothly. I don't sell or share your data with third parties for marketing purposes.

No cookies

This site sets no cookies. Two items are stored in your browser's local storage (which never leaves your device):

• Your light/dark theme preference, which remains stored until you clear your browser data.
• A form-submission timestamp used to prevent duplicate submissions within 45 seconds; it becomes irrelevant after that window and may remain in local storage until cleared by your browser or by you.

Contact form

When you submit the contact form, your name, email address, and message are forwarded to my inbox via Resend. Resend processes this data solely to deliver the email. Your data is not used for marketing. See Resend's Privacy Policy.

Legal basis: processing is necessary to respond to your enquiry and to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR). Where no contractual relationship is contemplated, processing is based on my legitimate interest in responding to communications (Article 6(1)(f) GDPR).

Resend is based in the United States. Transfers of personal data from the EU/EEA to Resend are governed by Standard Contractual Clauses (SCCs) adopted by the European Commission.

Before sending, I validate that your email domain can receive mail by querying Cloudflare's DNS service. Only the domain portion of your address (e.g. gmail.com) is sent, never your full email.

Spam protection

The contact form uses ALTCHA, a self-hosted proof-of-work widget that runs silently in your browser to block automated spam. It does not contact any third-party server; all processing happens locally and communicates only with this site.

Hosting

This site is hosted on Cloudflare Workers. As with any web host, Cloudflare processes all incoming requests, which includes IP addresses and standard HTTP metadata. See Cloudflare's Privacy Policy.

Legal basis: legitimate interest in securely operating and protecting the website (Article 6(1)(f) GDPR).

Video player

Videos are served by Bunny.net's video CDN. Loading the player exposes your IP address and browser information to Bunny.net. See Bunny.net's Privacy Policy.

Legal basis: legitimate interest in delivering video content you have requested (Article 6(1)(f) GDPR).

Meeting scheduling

The "Schedule a quick chat" button links to Cal.eu. Clicking it takes you to a third-party website operated by Cal.com, Inc., which collects the information you provide when booking a meeting (name, email, and selected time slot). That data is processed by Cal.eu under their own privacy policy, not mine. I receive only the booking confirmation. See Cal.com's Privacy Policy.

Analytics

This site uses Cloudflare Web Analytics. It does not use cookies and does not track users across websites. Analytics are derived from page request data already processed by Cloudflare to serve the site — no separate tracking or data collection occurs. See Cloudflare's Privacy Policy.

Legal basis: legitimate interest in understanding website usage and maintaining website performance (Article 6(1)(f) GDPR).

Data processors

Service providers acting as data processors on my behalf include Resend (email delivery), Cloudflare (hosting, DNS, and analytics), and Bunny.net (video delivery). These providers process personal data only as necessary to provide their services. Cal.eu (meeting scheduling) operates as an independent data controller under its own privacy policy when you book a meeting.

Data retention

Contact form submissions are retained only for as long as necessary to handle your enquiry and any related follow-up communications, and are normally deleted within 12 months unless a longer retention period is required for legal or contractual reasons. The items stored in your browser's local storage are never transmitted to any server.

Your rights

Under GDPR, you have the right to access, rectify, or erase your personal data, to restrict or object to its processing, and to data portability. To exercise any of these rights, get in touch at privacy@onionaudio.com. I may need to verify your identity before responding to requests concerning your personal data.

You also have the right to lodge a complaint with your national supervisory authority. In Italy, this is the Garante per la protezione dei dati personali.

Contact

For any privacy questions or data deletion requests, get in touch at privacy@onionaudio.com.