House rules
Privacy & cookies
Timber Maniacs is an amateur, non-commercial project. It runs no visitor analytics, no third-party advertising and no profiling cookies: readers are not tracked. Below is what happens to the little data that does pass through the site, as required by the EU General Data Protection Regulation 2016/679 (GDPR).
Who is responsible
The data controller is the person who runs Timber Maniacs, in a personal capacity and on a non-commercial basis. For any question about this notice or about your data, write to:
What data passes through the site
Browsing data. Like any website, the server that hosts Timber Maniacs automatically records some technical details of every request: IP address, date and time, the page requested, the type of browser. They keep the site running, protect it from abuse and help work out what went wrong when something breaks. We do not use them to find out who you are and we do not combine them with other data.
Email. If you write to the newsroom we receive your address and whatever you choose to tell us. We use them only to read your message and, where needed, to reply. We do not add you to any mailing list.
Newsroom accounts. People who write for the paper sign in to the panel with an email address and a password. The email identifies who is signing in; the password is stored only in encrypted form by the service that handles sign-ins.
Images from other sites. Some photos may be loaded straight from the site that hosts them: in that case your browser requests them from that site, which sees your IP address just as it would if you visited one of its pages. The Instagram link is a plain link: Instagram receives data only if you click it.
Why we process it
Browsing data and newsroom account data are processed on the basis of our legitimate interest in keeping the site working and secure (Art. 6(1)(f) GDPR). Email is processed to answer your request (Art. 6(1)(b) and 6(1)(f)). We do no profiling and no automated decision-making, and we never sell or hand over data to anyone.
Cookies and browser storage
The site uses technical cookies only: they remember a choice you made, or keep the newsroom signed in. The law does not require consent for these cookies (Art. 122 of the Italian Privacy Code and the Italian Data Protection Authority's guidelines of 10 June 2021), which is why you see no banner. None of them is read by other sites.
tm-lang
- What it does
- Remembers which language you read the paper in, so next time we open the same edition. It is saved only if you change language with the selector.
- Duration
- 1 year
- Applies to
- Readers who pick a language
tm-theme
- What it does
- Remembers whether you prefer the light or the dark theme. It is not a cookie but the browser's local storage: it stays on your device and is never sent to the server.
- Duration
- Until you clear it
- Applies to
- Readers who pick a theme
sb-…-auth-token
- What it does
- Keeps the session open after signing in to the newsroom panel: without it you would have to sign in again on every page.
- Duration
- Until sign-out, at most 400 days
- Applies to
- Newsroom only
tm-admin-lang
- What it does
- Remembers the language of the newsroom panel.
- Duration
- 1 year
- Applies to
- Newsroom only
You can delete them at any time from your browser settings: the site keeps working, it just forgets your choices. If we ever add analytics, embedded videos or third-party advertising, we will ask for your consent before switching them on and update this page.
Who helps us
The site relies on a few outside services, which process data on our behalf and only as far as needed:
Render (Render Services, Inc.) hosts the site on servers in Frankfurt and keeps the browsing logs.
Supabase (Supabase, Inc.) stores the articles, the uploaded images and the newsroom accounts.
The newsroom's email provider receives and stores the messages you send us.
Google receives, through its Gemini model, the texts the newsroom asks it to write or translate from the panel. It receives no reader data.
Render, Supabase and Google are US companies: transfers of data outside the European Union are covered by the Standard Contractual Clauses approved by the European Commission and, where applicable, by the EU-US Data Privacy Framework.
How long we keep it
Browsing logs are kept for as long as the providers set, usually a few days or weeks, and then deleted automatically. Email is kept as long as it is needed to follow the conversation. Newsroom accounts last as long as the person writes for the paper, and are closed when they stop.
Your rights
You can ask us at any time to see the data about you, correct it, delete it, restrict its use, object to its processing or receive it in a readable format (Articles 15–22 GDPR). An email to the address above is enough: we reply within one month.
If you believe your data is being handled improperly you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it), or with the supervisory authority of the country where you live.
If this page changes
We update this notice when what the site does changes. The date at the top says when it was last edited.