Privacy Policy

Who we are

This website (navionlab.com) is operated from Como, Italy (“we”, “us”). For anything regarding your data, contact us at info@navion.me. We are the data controller for the personal data described below, under the EU General Data Protection Regulation (GDPR).

What we collect, and why

We keep this short because we collect very little.

The Constellation. If you light a star, you sign in with your Google account through our authentication provider (Supabase). Google shares your email address, name, and profile picture with our authentication system. On the public map, only the name you choose is shown — never your email or your photo. Your email and Google profile data are kept by our authentication provider to manage your sign-in; we do not display them, sell them, or use them for anything other than letting you log in and appear as your star.

Comments. To comment you must be signed in with the Constellation, so a comment is linked to your account. We store the text of the comment, which article it belongs to, and when it was written. What is shown publicly is only the name you chose for your star and its NAV-000 designation — never your email address, never your account identifier; if you rename your star, the name changes on your old comments too. Before a comment is published, its text is sent to Anthropic (Claude) for automated moderation, which decides only whether it is published or rejected. Once published, a notification containing the comment and your public name is sent to the same private Telegram chat. To have a comment deleted, write to info@navion.me.

Article likes. When you like an article, we only record that the article was liked — no personal data. To stop you from liking the same article twice, we store a small technical flag in your browser (localStorage). It does not identify you.

Contact. Our contact page is just an email link. If you write to us, we receive whatever you put in your email. There is no form and no tracking.

Analytics

We use Google Analytics 4 to count visits and see which pages get read. It loads on every page, but it starts with consent denied: until you press Accept in the cookie banner, it stores nothing on your device.

Even in that state it sends Google one cookieless signal per page view, and that signal includes your IP address. Google uses it to produce aggregate estimates. It is not tied to any identifier that lets us or Google connect it back to you, but it is a transfer to Google that happens before you agree to anything, and you should know it.

If you accept, Google Analytics sets its own cookies and measures your visits in the ordinary way. If you reject, nothing changes from the state above. Either way we remember your answer so the banner does not ask again; clearing this site’s data in your browser erases that answer and brings the banner back.

We never use it for advertising: ad storage, ad personalisation and ad user data are set to denied and stay denied whichever button you press.

What we do not do

We do not run advertising, use advertising pixels, or work with ad networks. We do not profile you, and we do not sell your data to anyone. There are no marketing cookies on this site.

Our fonts are served from this site, not from Google Fonts, so loading a page does not send your IP address to Google to fetch them.

Cookies and local storage

Analytics cookies — set by Google Analytics, and only after you press Accept. They are the reason the banner exists.

Technical storage, always present — keeping you signed in if you use the Constellation, the like flag described above, and your answer to the cookie banner so we stop asking.

We set no advertising or cross-site tracking cookies of any kind.

Third parties that process data for us

Supabase — our database and login system (stores Constellation names and Google sign-in data).

Google — two separate things. Sign-in for the Constellation (Google Sign-In), and Google Analytics as described above, which receives a signal for every page view including your IP address.

Anthropic — receives the text of a comment, and nothing else, to moderate it automatically before publication.

Telegram — receives a notification for each new comment published on the site, containing the comment text and the display name chosen by its author. No email addresses are sent.

Cloudflare — hosts the website and can see IP addresses at an infrastructure level, as any web host does.

Some of these providers are based in the United States, which means your data may be transferred outside the EU. They operate under standard data-protection safeguards.

How long we keep it

Constellation account and star: until you ask us to delete it.

Comments: until you ask us to delete them.

Like flags: stored only in your own browser; clear them any time by clearing your browser data.

Analytics data: these periods are Google’s and apply to what Google keeps on its own systems, not to anything we store. Event data, 2 months. User data, 14 months, with the counter reset on new activity. If you come back before the 14 months are up, the clock starts again. So 14 months is not a ceiling: it is 14 months from your last visit.

Your rights

Under the GDPR you have the right to access the data we hold about you, to correct it, to delete it, and to object to how we use it. To exercise any of these, write to info@navion.me and we will act on your request. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

Changes

If we change how we handle data, we will update this page and change the date at the top.