Privacy notice

Who is responsible

Fabrizio Ferrante, operating under the Phabdev name, Italy. Contact: phabdev@gmail.com. Professional address: Via Broni 1, 10126 Torino (TO), Italia. VAT ID: IT14076150961.

This notice concerns starter.phabdev.com and its free file delivery, not applications that you build or run from the downloaded source. Last updated: 11 September 2026. You can contact the controller in Italian or English.

What we process and why

• Site and download delivery: IP address, request time, requested URL (including any campaign parameters), HTTP status and browser/request information can be processed by the hosting and security infrastructure. Purpose: deliver the requested pages/files, diagnose faults and prevent abuse. Legal basis: legitimate interests in a functioning, secure website (GDPR Article 6(1)(f)); this is not permission for behavioural advertising.
• Contact you initiate: your email address, name if supplied and message contents, processed to answer your request. Basis: steps at your request before a contract, where applicable (Article 6(1)(b)), or legitimate interest in answering other correspondence (Article 6(1)(f)). Providing these details is voluntary; without a reply address we cannot respond. Do not send passwords or sensitive personal data.
• Download confirmation: a sessionStorage receipt records an action identifier, timestamp and download state to show the requested confirmation page. It is not a user account or proof of payment. See the storage notice.
• Campaign links: incoming campaign parameters may accompany internal navigation and the download request. They are not sent to an advertising service in the current configuration. URLs may appear in infrastructure logs; do not place personal details in campaign URLs.

Optional audience measurement: only after you choose Allow analytics, Vercel Web Analytics measures permitted page visits and clicks on download/Pro links, including successful Lite downloads. Basis: your consent (Article 6(1)(a)). Page URLs are stripped of query parameters and fragments. Custom events include only a coarse source category (ChatGPT, LinkedIn, Google or other), without your email, advertising click identifiers or order details. Vercel processes technical request information to produce statistics. Measurements are suppressed when an external referrer contains a path or parameters that could reveal extra information. Refusing analytics leaves the site and download usable. Use Analytics preferences in the footer to withdraw consent and stop subsequent measurements.

There is no registration, newsletter signup, active checkout, advertising pixel, Google Analytics or PostHog on this landing. We do not receive the projects, users, passwords or database contents of a starter application you run yourself. We do not sell visitor data or use it for automated decisions producing legal or similarly significant effects.

Recipients and international processing

Vercel supplies website hosting and delivery. Cloudflare supplies DNS and file storage/delivery. They process technical request data for these services; their roles also include their own security and service administration where described in their notices. Email you send to phabdev@gmail.com is handled by Google's Gmail service and the controller. The source repository is private; downloading Lite does not require a GitHub account.

These providers operate internationally, including outside the European Economic Area. An R2 storage location in Western Europe does not mean all request handling, support or subprocessors remain in the EEA. Applicable safeguards may include adequacy decisions and standard contractual clauses. Provider details and transfer terms: Vercel DPA, Vercel privacy notice, Cloudflare DPA, Cloudflare privacy policy, Google privacy policy. Contact the controller for information about applicable safeguards. A link to a provider's terms is not a claim of EU-only processing.

Retention

The browser receipt is valid for ten minutes and kept in sessionStorage until the tab's session ends or you clear site data; browser session restoration can prolong storage. Optional attribution storage, if enabled with consent in a future configured measurement flow, has a thirty-minute validity check. No separate visitor database or exported access-log archive is maintained by this application.

Infrastructure logs follow the applicable provider service settings and security retention rules; retention can vary by log type, subscription and incident/legal requirements. Technical records are retained for service delivery, fault diagnosis and security investigation, and for longer only where required for legal obligations or a specific dispute. Contact correspondence is kept while needed to resolve the request and follow-up; material needed for a legal obligation or dispute may be retained for that specific purpose. Contact us for details about a particular record and the applicable provider retention.

Your rights

Subject to the applicable conditions, you may request access and a copy, correction, erasure, restriction, and portability; object to processing based on legitimate interests; and withdraw any consent without affecting earlier lawful processing. Write to phabdev@gmail.com, identifying the request and relevant interaction. We may request only the information reasonably needed to verify identity. We normally respond within one month; if a lawful extension is needed we explain it within that month. Requests are normally free.

You may complain to the Italian Garante per la protezione dei dati personali or the competent supervisory authority where you live, work or believe an infringement occurred. Contacting us first is not a condition for complaining.

Changes

This notice will be updated before new collection purposes or providers are introduced. Consent will be requested where required. Downloading Lite or reading this notice is not consent to marketing.