IT EN DE FR ES EL

Privacy Policy

Last updated: 10 October 2026

This policy explains which personal data are processed when you visit www.osintinfo.net and when you use the AI Chat, for what purposes and for how long, and what your rights are, pursuant to Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.

1. Data controller

Andrea Cumini – VAT no. 05118880235
Email: tingon@me.com

2. In brief

3. What data we process and why

3.1 Browsing the website

The website does not log visits and does not use any analytics or tracking tools. As with any web server, the hosting provider (Aruba S.p.A.) keeps technical logs containing the IP address, date and time and the requested page, to ensure the security and operation of the service, in accordance with its own retention policies.

Legal basis: the controller's legitimate interest in the security of the website (Art. 6(1)(f) GDPR).

3.2 AI Chat: login with a code sent by email

When you enter your email address, it is used only to send you a 6-digit code valid for 15 minutes and is not stored. In the database we save only a fingerprint of the address (HMAC-SHA256 with a secret key): a string from which the email address cannot be derived, but which allows us to recognise you when you log in again and to count your 10 daily questions. Together with the fingerprint, we keep the date of registration, of consent and of your last login, the number of logins, the language you chose and the fingerprint of the IP address used for your first login.

The code, too, is saved only as a fingerprint, together with the fingerprint of the IP address that requested it, in order to limit attempts and prevent abuse.

Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the box before requesting the code; for anti-abuse measures, the controller's legitimate interest (Art. 6(1)(f) GDPR).

3.3 AI Chat: questions and answers

The questions you write and the assistant's answers are saved and linked to your pseudonymous profile (a number, not your email address), together with the date, language, resources cited, response time and IP address fingerprint. We use them to count daily questions, check the quality of the answers and improve the assistant (instructions, content and search). They are not used for profiling or advertising and are not passed on to third parties.

Legal basis: your consent (Art. 6(1)(a) GDPR).

Do not include personal data about yourself or other people in your questions (names, phone numbers, addresses, licence plates…): they are not needed to use the assistant.

The answers are generated automatically by an artificial intelligence model and may contain errors: always check them against the resources indicated. The assistant does not make decisions that produce legal effects concerning you.

3.4 Where questions are processed

Questions are processed by an open-source artificial intelligence model running on a server owned by the controller, located in Italy and reached via an encrypted connection. They are not sent to third-party artificial intelligence services.

3.5 Reports on resources

On each resource page you can report whether the tool still works. We store the report (works / doesn't work), the resource, the date, the language, whether it was sent from the Resources page or from the chat, and the fingerprint of the IP address, which is used only to prevent repeated reports and abuse. Reports are used to keep the list of resources up to date.

Legal basis: the controller's legitimate interest in the quality and accuracy of the website (Art. 6(1)(f) GDPR).

4. Cookies

The website uses only these technical cookies, which do not require consent; that is why no cookie banner is shown. You can still delete them at any time in your browser settings.

5. How long we keep data

6. Who processes the data

Data are not sold or disclosed to anyone else, except where required by law.

7. Security

Encrypted connections (HTTPS) between your browser and the website and between the website and the assistant's server; email addresses and IP addresses stored only as fingerprints; single-use codes with an expiry time and a limited number of attempts; access to the database and the administration area restricted to the controller.

8. Your rights

You can request access to your data, rectification, erasure, restriction of processing and data portability at any time, and you can object to processing (Arts. 15-22 GDPR). You can withdraw your consent whenever you wish, without affecting the lawfulness of processing carried out before its withdrawal.

9. Minors

The AI Chat is not intended for children under the age of 14.

10. Changes

This policy may be updated. The date of the latest change is shown at the top.