SWD Privacy Policy

The controller of personal data processed through sergiowebdeveloper.com is Sergio M. Todaro, established in Italy and reachable at contacta@sergiowebdeveloper.com.

This policy applies to browsing, the Contact form, Resources and operational statistics, SWD Image Compressor, Stripe contributions and the other public functions of sergiowebdeveloper.com.

When the root of the website is opened, sergiowebdeveloper.com may read the `Accept-Language` header sent by the browser in order to select one of the supported languages. If the supported preference is Spanish, the application transiently uses the connection IP address to determine approximately whether the connection originates from Argentina and to choose between the `es` and `es-AR` variants. This check is performed locally on the server by comparing the IP address with public address-allocation data published by LACNIC; the visitor's IP address is not sent to LACNIC and is not retained for this purpose. If the connection cannot be determined to originate from Argentina, the `es` variant is used.

When the user manually changes language through the selector, a first-party functional preference is stored in the `swd_locale` cookie, with one of the values `en`, `es`, `es-AR` or `it`, for up to 12 months. That manual choice takes priority on later visits over automatic browser-language and country detection.

When using Contact, the website may process name, email address, subject, message, language and form source, IP address, User-Agent, selected consents and technical metadata needed for security, anti-spam, email delivery and traceability of the request.

A FREE Audit request may process full name, company or business, email address, website or an indication that there is no website, main location or area, sector or activity, main goal, selected social networks and public profiles, links or usernames voluntarily provided, comments, language, IP address, User-Agent, acknowledgement of the Privacy Policy and technical metadata needed for security, anti-spam and traceability. These data are used to receive the request, verify the email address through a token-based confirmation link sent by email, assess eligibility, organise the audit and communicate with the requester. Passwords and access to private accounts are not requested.

Fields marked as required in Contact are necessary to process and answer the enquiry. If they are not provided, the request cannot be submitted or handled correctly. Consent to receive commercial communications is optional and does not affect the handling of the enquiry.

If the user optionally agrees to commercial communications, that choice is stored separately and a token-based confirmation process is used. An unconfirmed request expires after 48 hours. Information needed to manage unsubscribe requests is also retained.

Cloudflare Turnstile may be used to protect Contact against abuse. Verification involves sending the token generated by the service and technical information such as the IP address, where available, to Cloudflare.

Server technical logs may contain data needed for security, diagnostics and infrastructure operation.

Resources uses operational statistics to count views or downloads and limit abusive counting. For deduplication and anti-bot signals, the application generates an HMAC SHA-256 from IP and User-Agent. The application does not store those raw values in the statistics repository. Temporary identifiers are removed after their window expires; bot signals may remain for up to 24 hours and view-deduplication windows are shorter. Aggregate counters may be retained for historical statistics.

SWD Image Compressor processes images locally in the browser. Image content is not sent to the server to perform compression. To retain work temporarily on the device, the tool may use sessionStorage and IndexedDB; local work records are designed to expire after a maximum age of 12 hours.

When compression completes, the tool may send technical data such as a random event identifier, original and final byte size, and input/output formats. The image is not sent. The server uses derived identifiers to prevent duplicates and retains aggregate use and saving metrics.

If a user supports SWD Image Compressor through a one-time or recurring monthly contribution, payment is handled through Stripe Checkout. Stripe processes full card or payment-method data; sergiowebdeveloper.com does not store it.

The website may retain the transaction reference or identifier, support mode, quantity, currency, language, status and confirmation date, together with information required to handle incidents and comply with applicable legal, tax or accounting obligations.

Contact data is processed to respond to the request, prepare a possible professional relationship and maintain appropriate communication traceability. The legal basis may be pre-contractual steps requested by the user and, where relevant, the legitimate interest in properly managing enquiries and protecting the service.

Data submitted to request a FREE Audit are processed to manage the requested service, confirm the email address through a token-based link, validate the request, organise its performance and deliver or communicate the result. The legal basis is taking pre-contractual steps or providing the service requested by the user and, where appropriate, the legitimate interest in protecting the service against abuse and maintaining operational traceability. Acknowledging the Privacy Policy records that the user has received this information and is not used as marketing consent.

Optional commercial communications rely on consent and can be stopped at any time.

Technical data, sessions, anti-abuse measures and operational statistics are used to provide the service, keep it secure, prevent fraud or abusive automation, and obtain aggregate operational metrics. The legal basis will, as applicable, be provision of the requested service and the legitimate interest in maintaining a safe and operational platform.

Payment data is processed to carry out the requested transaction and meet associated legal obligations.

sergiowebdeveloper.com does not make decisions based solely on automated processing that produce legal effects concerning the user or similarly significantly affect the user.

Providers needed to deliver the service may process data: hosting and backup infrastructure, the email provider for transactional messages, Cloudflare for Turnstile, Stripe for payments, InMobi Choice for consent management and Google for measurement and advertising.

The website uses hosting infrastructure provided by IONOS. The specific location of the systems providing the service depends on the contracted product and the infrastructure assigned by the provider.

Links to LinkedIn, WhatsApp, Google or other external platforms only involve those third parties when the user chooses to use them.

InMobi Choice is used as the consent-management platform (CMP) to present and record user preferences concerning cookies, privacy and advertising and to communicate the relevant signals to applicable providers.

Google Analytics is used to measure audience, navigation, performance and use of content and features. Depending on the configuration and applicable consent, Google may process online identifiers, browser or device technical information, visited pages, interaction events and approximate location data derived from the connection.

Google AdSense is used to display and measure advertising. Depending on preferences communicated through the CMP and applicable law, Google and its advertising providers may process identifiers, browser or device technical information, ad interactions and approximate location data to serve personalized, non-personalized or limited ads, measure their performance and prevent fraud or abuse.

The website owner does not directly sell personal data to advertisers. The CMP allows users to review and change their preferences and, where applicable, access up-to-date details of providers and purposes.

Some providers, including Cloudflare, Stripe, InMobi or Google, may process data from countries other than the user's country. Where an international data transfer occurs, it must rely on the mechanisms and safeguards required by applicable law, including adequacy decisions or standard contractual clauses where relevant.

Contact enquiries are retained for as long as needed to handle them and afterwards for a reasonable or legally required period to maintain traceability and address potential liabilities.

FREE Audit requests and related communications are retained for the time needed to manage the request, provide the service and maintain reasonably necessary or legally required traceability. Email confirmation is handled through a single-purpose token link that expires after 48 hours; subsequent validation and management are handled manually, and customer accounts, an automated queue and a private result view are not used.

Unconfirmed marketing requests expire after 48 hours. Confirmed preferences remain until unsubscribe or until no longer needed for the consented purpose.

Temporary Resources statistics identifiers are deleted according to their deduplication and security windows; anti-bot signals may remain for up to 24 hours. SWD Image work records stored in the browser expire after 12 hours. Aggregate metrics that no longer directly identify a user may be retained for historical and operational purposes.

Stripe transaction information is retained for as long as necessary to manage the transaction and comply with applicable legal, tax, accounting, anti-fraud or legal-claims requirements.

Where applicable, users may exercise rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent by writing to contacta@sergiowebdeveloper.com.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Users may also lodge a complaint with the competent supervisory authority. In Italy this is the Garante per la Protezione dei Dati Personali, without prejudice to other authorities competent under the GDPR.

For users in Argentina, where Law 25.326 applies, rights of information, access, rectification, updating and erasure may also be exercised against the controller, and complaints may be submitted to the Agency for Access to Public Information (AAIP). Argentine law provides specific response periods for access and for rectification, updating or erasure requests.

Reasonable technical and organizational measures are used to protect information against unauthorized access, loss, alteration or misuse. No Internet-connected system can guarantee absolute security.

The website is not designed to request special categories of personal data. Passwords, access keys, full banking details or other unnecessary sensitive information should not be sent through Contact.

The website and SWD Image Compressor are not specifically directed at minors. Where consent-based processing is subject to age-specific requirements, the applicable Italian and European rules will be followed.

This policy may be updated when functions, providers, processing activities, analytics or advertising technologies, the consent-management platform or legal requirements change. Where a change materially affects data processing or tracking technologies, the consent choices and information presented to users will also be reviewed.

For privacy questions or rights requests: contacta@sergiowebdeveloper.com.

Last updated: 14 September 2026.