// privacy policy · GDPR compliant
What we collect.
What we don't.

Zorthex is built on transparency. That applies to data too. This page tells you exactly what information this site collects, why, and what your rights are.

Last updated: May 2026 · Controller: Renato Santi · zorthex.official@gmail.com
// 01

Who We Are

Data Controller
Renato Santi — operating as Zorthex™
Sassari, Italy
Email: zorthex.official@gmail.com
Website: zorthex.com

Zorthex is an independent research project. No company, no team, no investors. One person — Renato Santi — is responsible for all data processing described in this policy.

// 02

What We Collect — And What We Don't

The short version: Zorthex does not use cookies, does not track users, does not collect personal data for marketing, and does not sell any data to third parties. Ever.

The free app (zorthex.com) — When you use the analysis tool, your query is sent to a Netlify serverless function which calls the Anthropic Claude API. We do not store your queries. We do not log your IP address for analytical purposes. The query is processed and discarded.

Email contact (zorthex.official@gmail.com) — When you contact us by email, your email address and message content are stored in Gmail (Google). This data is used only to respond to your inquiry. It is not shared with third parties, not used for marketing, and not transferred outside of Google's infrastructure.

GitHub (github.com/zorthex2026) — Our code and data repository is hosted on GitHub (Microsoft). If you access or fork the repository, GitHub's own privacy policy applies.

Netlify — The site is hosted on Netlify. Netlify may collect standard server logs (IP addresses, page requests, timestamps) for security and performance purposes. This is governed by Netlify's Privacy Policy. Zorthex does not access or process these logs.

// 03

The Claude API and Your Queries

When you submit a query in the free analysis app, that query is sent to the Anthropic Claude API via a Netlify serverless function. Zorthex does not store your query. The function sends it to Anthropic, receives the response, and returns it to your browser.

Anthropic processes your query according to their own privacy policy and API terms. Anthropic may use API inputs to improve their models unless you have opted out under their enterprise terms. For more information: anthropic.com/privacy.

What this means practically: Do not include personally identifiable information, confidential business data, or sensitive information in your query. Treat the free app as a public research tool, not a confidential channel.

// 04

Legal Basis for Processing (GDPR Art. 6)

Where personal data is processed, the legal basis is:

Legitimate interest (Art. 6.1.f) — for standard server logs collected by Netlify for security and performance purposes.

Contract performance (Art. 6.1.b) — for email correspondence related to Custom Report inquiries and delivery.

Consent (Art. 6.1.a) — where you voluntarily provide information by contacting us.

// 05

Your Rights Under GDPR

If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:

Access
You can request a copy of any personal data we hold about you.
Rectification
You can request correction of inaccurate personal data.
Erasure
You can request deletion of your personal data where there is no overriding legal basis to retain it.
Portability
You can request your data in a structured, machine-readable format.
Objection
You can object to processing based on legitimate interests.
Complaint
You have the right to lodge a complaint with the Italian Data Protection Authority (Garante): garanteprivacy.it

To exercise any of these rights, contact: zorthex.official@gmail.com. We will respond within 30 days.

// 06

Cookies

Zorthex does not use cookies. No tracking cookies, no analytics cookies, no marketing cookies. No cookie banner is needed because there are no cookies to consent to.

Netlify may set technical cookies necessary for CDN and security functionality. These are strictly necessary and do not require consent under GDPR.

// 07

Third-Party Services

Zorthex uses the following third-party services. Each has its own privacy policy:

Netlify — hosting and serverless functions · netlify.com/privacy
Anthropic (Claude API) — AI analysis engine · anthropic.com/privacy
Google (Gmail) — email correspondence · policies.google.com/privacy
GitHub (Microsoft) — code and data repository · github privacy statement
Google Fonts — typography · fonts are loaded from Google servers, which may log requests · policies.google.com/privacy

Zorthex does not sell, rent, or share personal data with any third party beyond the services listed above and only to the extent necessary for the service to function.

// 08

Changes to This Policy

If this policy changes materially, the "Last updated" date at the top of this page will be updated. For significant changes affecting your rights, we will note them explicitly. The current version is always available at zorthex.com/privacy.html.

// 09

Contact

For any privacy-related questions, requests, or complaints:

Renato Santi — Zorthex™
zorthex.official@gmail.com
Response time: within 30 days as required by GDPR Art. 12