SEAMFORM / PRIVACY
Privacy notice.
Website, newsletter and your choices.
Version: 2026-10-27 · Last updated: 27 October 20261. Who is responsible
The controller is Tommaso Frosini, the person behind Seamform. Contact: privacy@seamform.app. This notice covers seamform.app, its newsletter and messages sent to our contact addresses.
2. What we collect and why
| Purpose | Data | Legal basis (GDPR Article 6) |
|---|---|---|
| Send updates about Seamform and future beta access | Email address, subscription status and dates, consent records | Consent (1(a)) |
| Measure visits, traffic sources and website use with Google Analytics 4 | Pseudonymous identifiers, browser/device information and interactions, including the subscription journey | Separate consent (1(a)) |
| Operate and protect the website | IP addresses, technical request data and pseudonymous abuse-prevention identifiers | Legitimate interests in service operation and security (1(f)) |
| Respond to messages and privacy requests | Email address, message contents and information needed to handle the request | Legitimate interests in responding (1(f)); legal obligations for privacy requests (1(c)) |
Newsletter subscriptions and analytics are optional. You can browse and subscribe without accepting analytics. An email address is required to receive updates; subscriptions require confirmation and do not reserve a beta place. Contacting us does not subscribe you. We do not make automated decisions with legal or similarly significant effects.
3. Cookies and analytics consent
When enabled on the website, Google Analytics loads only after you consent. You can reject it or withdraw consent through Cookie preferences on the homepage. Withdrawal stops subsequent collection and removes this integration’s cookies; it does not automatically erase data already sent.
We do not send email addresses, form contents or confirmation tokens to Analytics. Google Signals, enhanced measurement and user-provided data collection are disabled. Our integration does not enable advertising features.
| Browser storage | Purpose | Duration |
|---|---|---|
| Theme preference | Remember light/dark mode | Until changed or deleted |
| Analytics choice | Remember acceptance or rejection | Valid for 180 days; the stored record may remain until replaced or deleted |
_ga and _ga_XE3J6F72H8, after consent | Distinguish visitors and sessions | 180 days, renewable during use and subject to browser limits |
You can clear local data in your browser settings. Cookie duration is separate from the retention of data in Analytics reports.
4. Providers and international transfers
Data is accessible to the controller and necessary providers: Vercel (hosting/APIs), Supabase (database in Europe), Resend (confirmation emails), Cloudflare (DNS and email forwarding), and Google (Gmail for correspondence and Analytics after consent), with their subprocessors. Data may be disclosed to authorities where legally required. We do not sell our mailing list.
Services may involve processing outside the European Economic Area, including in the United States and Singapore. A European database region does not exclude these transfers. Applicable safeguards include European Commission Standard Contractual Clauses and, where applicable to the recipient and processing, adequacy decisions. You can request details and copies at privacy@seamform.app.
Provider information: Vercel, Supabase, Resend, Cloudflare, Google Analytics, Google transfers.
5. How long we keep data
- Unconfirmed requests: daily cleanup after 7 days from the latest request; confirmation links expire after 24 hours.
- Abuse-prevention counters: daily cleanup after 24 hours from the counting window, so records may remain for approximately 48 hours.
- Subscribers: until consent is withdrawn or the newsletter ends, with an annual review; deletion after 24 consecutive months without updates.
- Withdrawals: updates stop immediately; records are removed in daily cleanup after 30 days, retained temporarily to handle withdrawal and technical issues.
- Correspondence: deleted within 12 months after the request is closed.
- Google Analytics: user and event data retention is set to 2 months, without resetting on new activity; deletion follows Google’s monthly cycle. This limit does not apply to most standard aggregated reports.
- Resend emails and logs: normally 30 days. Other logs and backups follow providers’ security and deletion cycles; residual copies are not reused to send updates.
Legal obligations or specific disputes may require retaining only the necessary data for longer, for as long as that need persists.
6. Withdrawal and your rights
You can withdraw newsletter consent using the link in our emails or by contacting privacy@seamform.app; for analytics, use Cookie preferences. Withdrawal does not affect the lawfulness of earlier processing.
Where provided by the GDPR, you may request access, correction, erasure, restriction and portability. You may object to processing based on legitimate interests for reasons relating to your situation, and always to direct marketing. Contact privacy@seamform.app: we normally respond within one month and notify you of any lawful extension.
You can complain to the Italian Data Protection Authority (Garante) or the supervisory authority for your habitual residence, workplace or the alleged infringement.