This notice describes the website as it works today. The site has no accounts, purchases, newsletter, advertising, or contact forms, and it does not ask visitors for phone numbers, postal addresses, identity documents, or payment details.
Who is responsible
The data controller for this personal website is Xueyufei Zhang, based in Turin, Italy. Privacy questions and requests can be sent to contact@zxyf.it.
What is processed and why
- Hosting and security logs. The hosting provider may process technical request data such as IP address, requested URL, timestamp, browser information, and error or security signals in order to deliver and protect the site.
- Theme preference. The light or dark theme choice is saved in your browser's local storage under the key
theme. It stays on your device and is not sent to the site owner. - Email. If you contact the site by email, the sender address, message, and related correspondence are processed so the inquiry can be answered.
- Comments. Article pages load giscus, which connects your browser to giscus and GitHub. giscus uses GitHub Discussions; comments and reactions submitted with a GitHub account are stored by GitHub and are normally public.
Legal bases
Technical hosting and the article discussion feature are used for the legitimate interests of operating, securing, and maintaining this personal site. Email is processed to respond to your request. Posting a comment is optional and requires a GitHub account.
Cookies and similar storage
The site itself does not use advertising or analytics cookies. The theme preference uses local storage solely to remember the setting you choose. On article pages, GitHub or giscus may use their own storage and cookies according to their policies and your GitHub sign-in state; giscus states that it does not use tracking or advertising.
Service providers and transfers
- Vercel provides website hosting.
- giscus provides the optional comments embed and stores comment content in GitHub Discussions.
- GitHub hosts the public discussion and account-based interactions.
These providers may process data outside the European Economic Area. Their current privacy notices describe their roles, locations, and transfer safeguards. No visitor data is sold by the site owner.
Retention
Email correspondence is kept only while needed to answer the inquiry and handle reasonable follow-up, then deleted unless it must be retained for security or legal reasons. Technical hosting logs are retained according to the hosting provider's settings and policies. Public comments remain in GitHub Discussions until the author or a repository moderator edits or removes them, subject to GitHub's policies.
Your rights
Where the GDPR applies, you may request access, correction, deletion, restriction, or portability of your personal data, and may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting earlier processing. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority.
Requests can be sent to contact@zxyf.it. There is no automated decision-making or profiling by the site owner.
Changes
This notice will be updated when the site's features or data practices materially change. The date at the top identifies the current version.