IT EN

Privacy Policy

Last updated: 30 August 2026

This page describes how linkbio.jucari.it (the "Site") processes personal data when you visit it or click a link on it. The Site does not use cookies, local storage or any client-side tracking script, so no consent banner is required - but the server still processes some personal data for every visit and click, as described below (Article 13 GDPR).

1. Data controller

SG Brothers srl
Via Giorgio Arcoleo, 35 - 90127 Palermo (PA), Italy
VAT / Tax ID: IT06479060821
Contact: info@jucari.it

2. What data is processed

The raw IP address is never written to disk or database. For every page visit and every link click, the server processes, only for the time needed to compute the values below:

  • a visitor hash derived from IP address + browser user-agent + a secret salt that changes every 24 hours (SHA-256) - this is what actually gets stored, never the IP itself;
  • referrer (source website/app), including recognition of in-app browsers from Instagram, Facebook and TikTok;
  • device type, browser and operating system (from the user-agent string only);
  • raw browser language header (used to pick the IT/EN version automatically);
  • country, resolved locally on the server from the IP against an offline database - the IP itself is never sent anywhere or stored;
  • UTM campaign parameters (utm_source/medium/campaign), if present in the link;
  • which link was clicked and its destination, snapshotted at the time of the click.

Separately, when someone attempts to log in to the admin panel, the server stores a hash of their IP address (same salted method, never the raw IP) for a few minutes, purely to block repeated failed login attempts.

3. Purpose and legal basis

This processing serves two purposes: (a) aggregate usage statistics for the link-in-bio page (which cards/links get clicked, where traffic comes from, device/browser mix) to understand and improve the service; (b) protecting the admin login from automated brute-force attempts.

The legal basis is the legitimate interest of the data controller (Article 6(1)(f) GDPR): running basic, aggregate usage statistics for its own service, and keeping its systems secure, without building any lasting profile of an individual visitor - the daily-rotating salt means the same person cannot be tracked as "the same visitor" across different days.

4. Retention

Usage statistics (visits and clicks) are kept until an administrator manually deletes older records (minimum 30 days); there is no automatic scheduled deletion. Login-attempt data is cleared automatically as soon as a login from that address succeeds, and is only ever used for a short blocking window.

5. Recipients and transfers

No data is shared with third parties. There is no external analytics or advertising service of any kind - country lookup uses an offline database stored on the server itself, not an external API. All data stays on the hosting server in Italy; there is no transfer outside the EU.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, gpdp.it). Because the data described above is pseudonymised (a rotating hash, not a name, email or account), the controller generally cannot on its own link a specific visit back to a named individual to act on an access or deletion request tied to "my visits" - but you can still contact us at info@jucari.it for any question about this processing or to exercise your rights where applicable.

← Back to the site