Privacy Policy

The data controller is Daniele Cappello, curator of the Museum of Synthetic Voices. The controller is responsible for decisions regarding the purposes and methods of data processing.

The processing of your personal data is based on different legal grounds, depending on the specific purpose:

• Account registration and content access
  Art. 6.1.b GDPR Performance of a contract to which the data subject is party. Registration is necessary to provide you access to the museum's reserved content.
• Comment publishing
  Art. 6.1.b GDPR Performance of the requested service. Commenting is a feature you choose to use.
• Support and donations (Stripe Checkout)
  Art. 6.1.b GDPR Performance of a service requested by the data subject. Payment processing is handled by the payment provider.

We only collect data strictly necessary to provide you with the museum's services. We apply the data minimization principle required by GDPR.

• Email address — For authentication and service communications
• Password hash — Your password is never stored in plain text
• Registration date — For administrative purposes
• Expressed consents — Cookie preferences stored locally in the browser
• Comment content — Only if you choose to use this feature
• Support messages — Optional text attached to donations

• Account access — Authentication and session management
• Reserved content — Unlocking multimedia archives and premium features
• Comment system — Allowing you to participate in discussions
• Project support — Managing donations and receipts via Stripe
• Personalization — Remembering your preferences (language, theme, audio)
• Service communications — Important notifications about your account

We do not sell or share your data with third parties for commercial purposes. Data is processed exclusively for the purposes stated above.

Some technical services may process data on our behalf: Supabase (authentication and database) and Stripe (payments). We do not store card payment data.

Some data may be retained longer for legal obligations or for the protection of rights in court, in accordance with legal requirements.

GDPR guarantees you a series of rights that you can exercise at any time by contacting us at the email address provided.

For any request regarding the processing of your personal data, you can contact us directly. We will respond within 30 days of receiving your request.