Privacy notice

Gradient AI · getgradient.it · updated on 7 October 2026

Who is responsible for the data

Data controller: Francesco Zaccaria, who leads the Gradient AI project. Contact for any question about your data: info (at) getgradient.it.

Visiting the website

Visit statistics with no cookies. We count visits with Matomo, on a server run by the data controller (matomo.masterismi.com, on a server in Italy; requests pass through the Cloudflare network). It uses no cookies, it makes the IP address anonymous (it removes the last 2 bytes), it deletes the raw visit data after 24 months, and it respects the "Do Not Track" setting of your browser. We only see totals for this website (pages seen, where visitors come from, kind of device), never the path of one person. We do not mix these data with other data and we do not give them to anyone else. No advertising cookies and no tracking of people.
Browser memory: the website remembers the light or dark look, your choices for the badges and your answer to the cookie banner. These data stay in your browser. They are not sent to the project.
Outside services: GitHub Pages (GitHub) hosts the website and gets the IP address of your browser to send you the pages, as its own privacy notice explains. Fonts and images come from the website itself. Only the pages in Chinese load the Noto Sans SC font from Google Fonts. If you use the codes to copy, the badges load from cdn.getgradient.it (Cloudflare and jsDelivr).

Taking part in the surveys

The surveys are only for people aged 18 or older. You confirm this with the consent tick box. If you send survey 3 to a class or a group, send it only to people aged 18 or older.

People who use Gradient AI can help the project to see if the levels work, by answering short surveys. Taking part is free and voluntary. If you do not answer, nothing changes in how you use the website, the badges or the code.

Surveys 1 and 2 (before and after use, for the person who chooses or states a level): your answers and the email address you give. We use the email only to link the "before" answer to the "after" answer and, if needed, to ask you about your answers.
Survey 3 (for the people who receive the work): anonymous. It does not ask for your name or email. Please do not write personal data in the open answer.

Where the data stay. The surveys use Google Forms. When you send an answer, it goes by email to the project mailbox and is then deleted from the form. No spreadsheet is linked to the forms. So the only saved data stay in the project mailbox. Google uses the technical data it needs to run its service, as its own privacy notice explains. Google services may move data outside the European Union, with the protections that the GDPR asks for.

What we use them for. To understand how people choose and read the levels, where the line between two levels is not clear, and to improve the project. We may present or publish results only as totals that do not show who you are, with no email addresses.

Legal basis and how long we keep them. Your consent, which you give with the tick box in the survey (GDPR, Article 6(1)(a)). We keep the answers for 36 months after you send them, and then delete them. We do not give them to anyone else, and we do not use them to send you advertising.

Other information. Answering is voluntary. There are no automated decisions and no profiling. Only the data controller can see the answers.

Your rights. At any time you can ask to see, correct or delete your answers, to get a copy of them, to limit their use or to object, and you can take back your consent (GDPR, Articles 15–22). Write to info (at) getgradient.it from the email address you used in the survey. Taking back your consent does not change what we did before. You can also complain to your data protection authority (in Italy, the Garante per la protezione dei dati personali).

Who receives the data

GitHub (GitHub Inc., USA): hosts the website.
Netsons (Italy): hosts the Matomo server.
Cloudflare (Cloudflare Inc., USA): network in front of Matomo and cdn.getgradient.it, and DNS of the domain.
Google (Google Ireland Ltd and Google LLC): Google Forms and the email box of the data controller for the surveys; Google Fonts for the pages in Chinese.

Providers based in the United States may handle data outside the European Union. These transfers use the EU-US Data Privacy Framework or the standard contractual clauses of the GDPR.