Privacy
This site is designed to process as little personal data as possible. This notice explains what remains, as required by the GDPR.
Last updated 14 October 2026
Who is responsible
Mauro Mazzocchini is the data controller for this website. Contact: mauro@mazzocchini.com.
What this site does not do
It sets no cookies and contains no advertising, tracking pixels or social-media embeds. Fonts, styles and icons are served with the site rather than loaded from third-party CDNs.
Hosting
The site is served by Vercel Inc. as hosting and infrastructure provider. Like any hosting provider, Vercel processes technical traffic data, such as IP addresses, to deliver the pages and keep the service secure. The legal basis is legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). Details are in Vercel's privacy notice.
Analytics
The site uses Vercel Web Analytics to understand aggregate usage: page views, referrers, countries, device types, and anonymous interaction events such as clicks on contact links or use of the Lab exercise. It is cookieless and does not associate page views with individual visitors or IP addresses; visitors are counted with an anonymized identifier that is not retained long-term. Vercel processes this data on my behalf. The legal basis is legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR).
The Growth Allocation Lab
The Lab runs entirely in your browser. Nothing you enter is transmitted or stored by the site. If you use “Copy link to this read” or “Send me your read,” your entries are encoded in the link or the email you create (the email text is also copied to your clipboard, on your device only); share them as you would any document containing your own notes.
If you email me
If you write to me, I process your email address, name and message content in order to reply and to conduct the correspondence you initiated. The legal basis is my legitimate interest in handling correspondence (Art. 6(1)(f) GDPR), or Art. 6(1)(b) GDPR where you ask me to take steps toward an agreement. I keep correspondence for as long as it remains relevant to its purpose.
Your rights
Under the GDPR you can request access, rectification, erasure, restriction of processing, portability, and you can object to processing based on legitimate interest. Write to the address above. You can also lodge a complaint with your data protection supervisory authority.
Changes
If the site ever adds functionality that processes more data, this notice will say so before it happens.