Privacy and cookie notice for the DreamSiteLab website.

Controller

DreamSiteLab, VAT IT05168650231, email studio@dreamsitelab.it. Privacy requests can be sent to the same address.

Form data

When you request an audit or contact, we collect only the data needed to understand the context and reply.

• Name, activity or brand, current website if provided.
• Email and/or WhatsApp, contact preference.
• Current digital presence, goal, optional budget, and message.
• Form page, referrer, referrer host, and UTM parameters when present.

First-party analytics

The site sends technical events to our /api/event endpoint to understand which pages and CTAs generate inquiries.

• Events: page_view, primary CTA clicks, and successful form submissions.
• Aggregated dimensions: source, medium, campaign, page, page type, language, viewport, Cloudflare country, CTA location/type.
• We do not store name, email, phone, message, IP address, or visitor IDs in the analytics namespace.
• Counters are aggregated by day in Cloudflare KV and are not used for advertising profiling.

Cloudflare may still process technical request data, such as IP address and user agent, to deliver and protect the website.

Cookies and storage

We currently do not use advertising or profiling cookies. We use only technical preferences and session attribution.

• dsl_lang cookie: language preference, 12-month duration, SameSite=Lax.
• localStorage dreamsite-theme: light/dark theme preference, kept until deleted from the browser.
• sessionStorage dreamsite-attribution: referrer and UTM data for the current session, used to understand where an inquiry started.
• Cloudflare may set technical security or bot-protection cookies when required by active services.
• If we later activate non-technical tools, advertising pixels, or profiling, we will request consent before loading them.

Cloudflare Web Analytics and GA4

Cloudflare Web Analytics is active on the domain and uses Cloudflare's beacon for privacy-first metrics. Google Analytics 4 is not loaded unless the related public token is configured.

• Cloudflare states that Web Analytics does not collect or use visitors' personal data.
• The beacon may send performance and page-view metrics to Cloudflare according to the service documentation.
• If Google Analytics 4 is activated, it will be disclosed and handled with the required privacy configuration.
• At the moment, the main operational measurement is the aggregated first-party analytics described above.

Legal basis

We process form data to take pre-contractual steps requested by the user and under legitimate interest to manage real commercial inquiries.

• Security, rate limiting, and abuse prevention: legitimate interest.
• Language/theme preferences: requested service and technical functionality.
• Aggregated analytics without unique identifiers: legitimate interest in improving the site, paths, and lead quality.

Providers and external channels

We use technical providers and links to external services. When you leave the site, the relevant external service notices also apply.

• Cloudflare: hosting, Worker, KV, security, CDN, and possible Web Analytics.
• Resend: email delivery for requests received through the form.
• WhatsApp/Meta: applies when you open or use the WhatsApp link.
• Instagram, TikTok, and Telegram: apply when you click social links.

Retention

We keep data only for as long as it is useful for the purpose for which it was collected.

• Contact requests: up to 24 months for commercial follow-up and operational history, unless a different legal need applies.
• Contact rate limit: about 10 minutes.
• Aggregated analytics in Cloudflare KV: up to 180 days.
• Language cookie: 12 months; attribution sessionStorage: browser session duration.

Rights

You may request access, rectification, erasure, restriction, portability where applicable, and objection by writing to studio@dreamsitelab.it.

• You may also lodge a complaint with the Italian Data Protection Authority.
• We do not run automated decisions with legal effects or advertising profiling on the website.