Privacy
Privacy notice under Articles 13 and 14 of Regulation (EU) 2016/679. Last updated 11 November 2026. Cookies have a page of their own. This is an English translation of the Italian notice: if the two ever differ, the Italian version prevails.
Who processes your data
The data controller is JB Holding Srl (VAT no. 01870000336). For anything to do with your data, write to privacy@jumpwithme.it: a person will answer, not a form.
No Data Protection Officer (DPO) has been appointed: we don't fall into any of the cases in which one is mandatory (Art. 37).
What I collect, why, and on what legal basis
Every kind of processing needs a legal basis. Here there are three: the consent you give, the contract — that is, the service you asked for by signing up — and the legitimate interest in keeping the site up and running and secure.
| Data | What it's for | Legal basis | How long |
|---|---|---|---|
| Nickname, email or phone number | Keeping your account and your chapter bookmark | Contract (Art. 6(1)(b)) | As long as you have an account, then 30 days |
| Your declaration that you are over 14, with the date | Being able to show that the consent you gave is valid | Legal obligation (Arts. 6(1)(c), 7(1) and 8) | As long as you have an account, then 30 days |
| Email and mailing preferences | Letting you know about new chapters and initiatives | Consent (Art. 6(1)(a)) | Until you unsubscribe |
| Pages viewed, reading time, device, country | Understanding which stories are really read and where readers lose the thread | Consent (Art. 6(1)(a)) | 400 days |
| IP address, in encrypted form | Stopping abuse and automated login attempts | Legitimate interest (Art. 6(1)(f)) | 90 days |
| Comments and stories you send | Publishing them on the site after they've been read | Consent (Art. 6(1)(a)) | Until you ask for them to be removed |
The statistics are mine and nobody else's
No Google Analytics, no Meta pixel, no advertising profiling tools. The statistics run on my server and stay in my database. If you decline in the banner, nothing is collected: not one event, not one session.
Your IP address is turned into an irreversible code (salted SHA-256) before it touches the database: there is no way to trace it back to the original address, not even for me.
Who else handles your data
Nobody buys it, nobody resells it. It only passes through the providers that keep the service running, appointed as data processors under Article 28.
| Provider | What it does | Where the data is held |
|---|---|---|
| Supabase | Database, accounts and file storage | European Union (Frankfurt) |
| Vercel | Servers that deliver the site's pages | United States — standard contractual clauses |
| Resend | Sending emails (new chapters, announcements) | United States — standard contractual clauses |
| OpenRouter | The model that writes the drafts; it receives texts, not your data | United States — standard contractual clauses |
| YouTube (Google) | The long video on the home page. The cover image is served from our domain: YouTube is only contacted when you press play | United States — standard contractual clauses |
| Google Fonts | The page's typefaces | Served from our domain: your browser does not contact Google |
Where it says United States, the transfer takes place on the basis of the standard contractual clauses approved by the European Commission (Art. 46(2)(c)). You can ask me for a copy.
If you are under 18
In Italy you can consent on your own to the processing of your personal data online from the age of 14 (Article 8 GDPR and Article 2-quinquies of the Italian Privacy Code, Legislative Decree 196/2003). That's why, when you sign up or subscribe to the chapters, I ask you to declare that you are over 14: without that box the sign-up doesn't go through, and your declaration is saved with the date.
If you are under 14 you can read this site as much as you like, without signing up. To create an account or leave me your email, a parent — or whoever has parental responsibility for you — needs to do it. If I find out that an account belongs to someone under 14 without a parent's permission, I'll delete it with all its data, no questions asked.
If you are a parent and think your child under 14 has signed up, write to privacy@jumpwithme.it: I'll check and delete it.
To protect anyone who is under 18, these rules also apply here:
- A nickname, not your name. When you sign up I don't ask for your first and last name: I ask for a nickname, and it's the only thing other people see. Better if it isn't your real name.
- No personal details in comments. Every comment and every story is read before it's published: if it contains an address, a school, a phone number or anything that makes you recognisable, I don't publish it, or I take it down.
- Brands don't get your data. The companies that work with the project never see who reads, who comments or who has signed up.
- No targeted advertising. I don't do profiling and I don't use your data to show you ads.
- If you appear in a photo or video from the project — you or your child — and don't want to be there, write to me: I'll remove it or blur the face.
What I don't do
- I don't sell, rent or trade your data with anyone.
- I don't do advertising profiling or make automated decisions about you.
- I don't use your data for any purpose other than those set out on this page.
Your rights
Regarding this data, you can, at any time and free of charge:
- Find out what I hold and ask for a copy (Arts. 15 and 20).
- Correct it if it's wrong (Art. 16).
- Erase it — all of it (Art. 17).
- Restrict its use or object to processing (Arts. 18 and 21).
- Withdraw your consent whenever you like, without affecting the lawfulness of what was done before (Art. 7(3)).
If you are under 18 you can write to me yourself, or a parent can do it for you.
Write to privacy@jumpwithme.it: I'll reply within 30 days. For emails there's a shortcut — the unsubscribe page, and the link at the bottom of every message, which works with a single click.
If you think something is wrong and we can't sort it out between us, you can contact the Italian Data Protection Authority (Garante per la protezione dei dati personali) (Piazza Venezia 11, 00187 Roma) or the supervisory authority of the country where you live.
If something goes wrong
If there is ever a data breach that puts you at risk, I'll tell you — by email, plainly, as soon as I've understood it. And the Garante within 72 hours, as Article 33 requires.
If I change this page
You'll find small changes here, with the updated date at the top. If anything substantial changes — a new purpose, a new provider — I'll write to you first and, if needed, ask for your consent again.