Privacy policy

Last updated: 17 October 2026

This policy describes how the personal data of visitors to this site is processed, under Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended.

1. Data controller

The site is run on a personal, non-commercial basis by the developer of Obskura, who signs with the pseudonym overminder. For any privacy request write to overm.ai.nder@proton.me.

2. Data collected by the site

The site consists of static pages. The only form is the one on the Contact page (see below); there are no registrations, newsletters, analytics tools, advertising or embedded third-party content (videos, maps, social media). Fonts are served by the site itself, with no requests to external services.

Browsing and download data. The site and all downloadable files (application, manuals, language files) are hosted by Vercel Inc. Like any hosting service, for security and operational reasons Vercel logs visitors' IP addresses and some technical request data (date and time, page or file, browser). This data is processed by Vercel under its own privacy policy and is not used by the site operator for statistics or profiling. The legal basis is the legitimate interest in keeping the site available and secure (Art. 6(1)(f) GDPR). The site also counts how many times each application package is downloaded, only as an anonymous total: nothing about who downloads is stored.

Language and cookie preferences. The site language is chosen based on your browser's language; the choice made in the cookie banner is stored only in your browser (local storage) and is not transmitted to anyone. See the cookie policy.

Contact form. If you use the form on the Contact page, your email address, topic, subject, message and any attachment are forwarded by email to the developer through the Resend sending service (Resend Inc., United States) and are not stored on the site. They are used only to reply to you and remain in the developer's mailbox for as long as needed to handle the request. The legal basis is your request (Art. 6(1)(b) GDPR).

3. The Obskura application

The app does not collect or send personal data to the developers: it has no accounts, telemetry or servers of its own. It only connects to the servers you configure (for example your NAS) and, if you use the import feature, to the service you import from, with the credentials you enter and only for that operation. The device identifier and name stay in your own files, encrypted.

4. Transfers outside the EU

Vercel may process data in the United States. It participates in the EU-U.S. Data Privacy Framework and uses the standard contractual clauses approved by the European Commission.

5. Retention

Browsing data is retained by the hosting provider for the period stated in its policy. The cookie preference stays in your browser until you delete it.

6. Your rights

You can request access, rectification, erasure, restriction of or objection to processing by writing to overm.ai.nder@proton.me, and you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of your country.