Privacy.

What personal data this website processes, why and for how long. Each product has its own privacy policy: they are listed in section 08.

last updated ·

01Data controller

The data controller is Massimo Fava (Italy), who publishes the website and the products under the name MAS Softworks. For any privacy question, or to exercise your rights, write to the address below.

02Browsing and hosting

You do not need to provide personal data or create an account to read this website.

The website is hosted by Cloudflare on its Workers service. Like any web server, to deliver the pages and protect them from abuse and attacks Cloudflare processes the visitor’s IP address and some technical data about the request, which may end up in its server logs under its own privacy policy. We do not use them to identify or profile you.

Fonts, images and scripts are hosted on the website itself: opening a page sends no requests to Google Fonts or other websites. There are two exceptions: Cloudflare Turnstile’s anti-spam check, only on pages with a form (section 03), and Google Analytics, only if you accept analytics (section 07).

hosting
Cloudflare Workers, Cloudflare, Inc. (United States)
technical data
IP address, requested page, date and time, browser type
legal basis
legitimate interest in a secure, working website (Article 6(1)(f) GDPR)

03Forms and email

The website has two forms, Contact and Report a problem, on the Support page. They collect only the data you type in:

contact
topic, name, email, message and, if you choose one, the product
report a problem
product, version, device and system, description of the problem, email

When you send a form, the website’s server (a Cloudflare Worker) writes an email with this data and forwards it, through Cloudflare’s Email Routing service, to the MAS Softworks mailbox, hosted by Google (Gmail). The website does not store the data in a database of its own: it stays only in the mailbox.

Against automated submissions, pages with a form use Cloudflare Turnstile: a check, usually invisible or a single box to tick, that tells a person from a program. To do so Cloudflare analyses some technical signals from the browser and the request (including the IP address), without profiling cookies and without using them for advertising, under its own privacy policy. The website only receives the result of the check. Without JavaScript the check cannot run: in that case you can write to the email address shown on the page.

The form also has a hidden anti-spam field, and the server limits the number of submissions using the IP address as the key of a counter that resets after one minute. The IP address is not stored or included in the email.

The same path applies if you write directly to info@massoftworks.com or support@massoftworks.com: we receive your address, your message and any attachments.

04Why we use it

Data from forms and emails is used only to answer your message, handle your report and fix the problem. It is not used for advertising, profiling or newsletters, it is not sold and it is not linked to visit statistics.

forms and email
your request and, for support on a product, the performance of the license terms (Article 6(1)(b) GDPR)
technical browsing data
legitimate interest in the security of the website (Article 6(1)(f) GDPR)
anti-spam check on forms
legitimate interest in protecting the forms from automated submissions (Article 6(1)(f) GDPR)
analytics
your consent (Article 6(1)(a) GDPR), which you can withdraw at any time

Filling in the forms is optional, but without an email address we cannot answer you.

05How long we keep it

messages and reports
at most 24 months after the last exchange, to find the history of a problem that comes back. You can ask us to delete them sooner at any time.
attachments (logs, zip files)
deleted when the request is closed, at the latest within 30 days
Cloudflare technical logs
for the limited time set by Cloudflare for security and aggregate traffic statistics; the website does not turn on Worker logging
Google Analytics data
2 months, then Google deletes the data tied to each visitor; only aggregate totals remain
preferences in your browser
until you clear the website’s data in your browser (section 07)

06Who processes it

Data is never sold or handed over. It is processed only by the technical providers needed to run the website, the email and, if you accept them, the analytics:

hosting and forms
Cloudflare, Inc. (United States): Workers, Email Routing and Turnstile
mailbox
Google Ireland Ltd (Ireland), Gmail service: stores the messages that reach our mailbox
analytics, only with consent
Google Analytics 4, Google Ireland Ltd (Ireland), with Google LLC (United States)

These providers may also process data outside the European Union. Cloudflare and Google are certified under the EU-U.S. Data Privacy Framework; where needed, transfers also rely on the standard contractual clauses provided by the GDPR.

07Cookies and analytics

Without your consent the website uses no cookies and loads no analytics tool.

The website saves two technical preferences in your browser, using localStorage rather than cookies, and never sends them to any server. They stay on your device until you clear the website’s data in your browser.

mas-theme
the light, dark or system theme, only if you change it
mas-consent-v1
your analytics choice (yes or no) and its date

If you accept analytics, the website loads Google Analytics 4 to measure visits in aggregate form: pages viewed, where visitors come from, device type and browser, approximate country and city. It uses Google’s Consent Mode v2: before you choose, Google’s script is not even downloaded, and advertising features always stay off. According to Google, Google Analytics 4 does not log or store IP addresses.

Google may process this data outside the European Union, under the EU-U.S. Data Privacy Framework. How it uses the data is explained in its privacy policy and on the page How Google uses information from sites that use its services.

tool
Google Analytics 4, Google Ireland Ltd
legal basis
consent (Article 6(1)(a) GDPR)
cookies
_ga and _ga_*: tell visitors and sessions apart, last up to 2 years after the last visit
retention
2 months for the data tied to each visitor

You can change your choice at any time from “Cookie settings”, at the bottom of every page. If you withdraw consent, Google Analytics stops collecting data and the website deletes the _ga cookies. Without JavaScript the banner does not appear and analytics never starts.

08Products

This policy is about the website. Each product has its own privacy policy, which explains what data it uses, why and where it stays:

For products that do not have their own policy yet, the data they use is stated on their page.

09Children

The website is not specifically aimed at children.

10Your rights

You can ask at any time to access the data about you, to correct or delete it, to restrict its processing, to object, and to receive it in a readable format (Articles 15 to 22 GDPR). You can also withdraw your consent to analytics, without affecting processing that has already taken place. Write to info@massoftworks.com.

If you believe the processing breaks the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the supervisory authority of the country where you live.

11Changes

If this policy changes, the date at the top is updated. The product privacy policies have their own date.

Questions about this document?Write to us →