Last updated: October 8, 2026. This notice explains how Cornice handles personal information when you browse incornice.com or contact us.

Who is responsible

Niccolò Diamanti, based in Italy, is the data controller for Cornice. For questions or privacy requests, email [email protected].

Information we use and why

When you browse, our hosting and security services process technical information such as your IP address, requested URLs, referring page, browser and device information, and request times. We use this information to deliver and cache pages, monitor service reliability, diagnose faults, and prevent abuse. The legal basis is our legitimate interest in operating a reliable, secure website (Article 6(1)(f) GDPR).

If you email us, we receive your email address, name if provided, message, and any attachments you choose to send. We use them to handle your request, based on our legitimate interest in responding to enquiries. Handling statutory privacy requests and legal obligations is based on Article 6(1)(c) GDPR. Contacting us is optional; without a reply address and enough information, we may be unable to respond.

Browser storage and cookies

The light/dark theme control saves your choice locally in your browser under cornice-theme, until you clear site data or your browser removes it. Cloudflare may use security cookies when its protection features require them; see its cookie information. WordPress uses authentication cookies for administrator sign-in.

With your consent, we use Google Analytics 4 to understand visits, traffic sources and clicks on retailer links. Analytics receives page URLs and titles, referring pages, campaign codes, browser and basic device information, approximate location, timestamps and a browser identifier. For retailer clicks, we send the retailer hostname, not the full product link. Google uses IP addresses to derive approximate location and, outside the EU, Switzerland and the UK, to help operate the service and detect spam. Google states that raw IP addresses are discarded after use and are not associated with user identifiers; see its European processing information and information for other regions. The legal basis is your consent (Article 6(1)(a) GDPR). Analytics is optional and stays blocked before you accept or if you refuse. Google Signals, advertising personalisation and collection of user-provided data are not enabled; Cornice does not use Pinterest advertising tags.

Analytics uses first-party _ga and _ga_* cookies, configured to expire within 180 days without renewing that period on each visit. Complianz stores your consent choices in necessary cmplz_* cookies for up to 180 days and uses local browser storage to cache banner settings. Your browser may remove these earlier. Use Cookie choices in the footer at any time to accept, refuse or withdraw consent. Refusal does not prevent reading articles or opening retailer links. Withdrawal stops future collection and removes manageable Analytics cookies from this site; it does not automatically erase data already received by Google.

Providers and international processing

Netsons s.r.l., Italy, provides hosting and email; Cloudflare, Inc. provides content delivery and security. Google provides Analytics through its applicable contracting entity and authorised subprocessors under its Data Processing Terms. See how Google uses information from sites that use its services. They and their authorised service providers process information needed for these services. Cloudflare also processes some network information for its own purposes, described in its privacy policy. Information may also be disclosed when legally required or necessary to establish or defend legal claims, based on legal obligations or our legitimate interest in protecting our rights.

Cloudflare operates globally, including in the United States, so information may be processed outside the European Economic Area. Its Data Processing Addendum sets out transfer safeguards, including the EU–US Data Privacy Framework for covered transfers and EU Standard Contractual Clauses where applicable. Netsons’ processor terms are available in its Data Processing Agreement. Google may also process Analytics data outside the European Economic Area, including in the United States. Its Data Processing Terms describe applicable transfer safeguards, including the EU–US Data Privacy Framework for covered transfers and Standard Contractual Clauses where applicable. You can contact us for information about applicable safeguards.

How long information is kept

Contact messages are kept while we handle the enquiry and any necessary follow-up. After that, retention is limited to information needed for an outstanding obligation or legal claim; it ends when that need expires.

Technical records are kept for the operational period needed to diagnose faults and investigate abuse. Records relevant to an incident may be retained until it is resolved or for applicable legal obligations or claims. Provider retention is governed by the service terms and these purposes. Recovery copies remain through the applicable backup rotation, or while needed to restore or roll back a site change; they are removed when that recovery need ends, subject to legal requirements.

Analytics user and event data are configured for two months of retention, without resetting the retention period on new activity. These settings do not control most standard reports based on aggregated data; we keep aggregate statistics while they remain useful for evaluating the site.

Your rights

Where applicable, you can request access, correction, deletion, restriction, or portability of your personal data, and object to processing based on legitimate interests. Email [email protected]. We may request proportionate information to verify your identity. GDPR requests are normally answered within one month; if a lawful extension is needed, we will explain it within that month.

You can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, or another competent supervisory authority. Cornice does not make solely automated decisions about you with legal or similarly significant effects.

The Amazon product links in our articles are affiliate links. If you click one, Amazon receives your visit and may use cookies or other identifiers to attribute qualifying purchases to Cornice and calculate a commission. Amazon handles this information under its own Privacy Notice and Cookies Notice, which explain its privacy and cookie choices. Simply viewing a Cornice article does not load Amazon tracking scripts or set Amazon attribution cookies.

Other websites and updates

Retailer links lead to websites with their own privacy notices. If a page loads images or emoji assets from a retailer or WordPress.org, that host receives the technical request needed to display them. We update this notice when the site’s services or data practices change; the date above identifies this version.