Who we are
Our website address is: https://lucuppa.online.
Comments
When you leave a comment, we collect:
✓ Form data (name, email, content)
✓ IP address & browser details (for spam protection and legal compliance)
✓ Email hash (for Gravatar service)
• Gravatar Privacy Policy: https://automattic.com/privacy/
• Your profile picture becomes publicly visible upon comment approval
Media
⚠️ Critical Notice:
• Avoid uploading images with embedded GPS metadata (EXIF)
• Visitors can download images and extract location data
• Use metadata removal tools for sensitive images
Cookies
| Scenario | Type | Duration | Purpose |
|---|---|---|---|
| Commenting | Convenience | 1 year | Save name/email/website |
| Login page access | Temporary | Session | Check browser cookie support |
| Account login | Authentication | 2 days/2 weeks* | Store credentials & preferences |
| Content editing | Technical ID | 24 hours | Track edited post ID |
*Extends to 2 weeks if “Remember Me” is selected
Embedded Third-Party Content
Embedded content (videos/tweets/articles) is treated as a direct visit to the source website
• Third parties may:
✓ Collect your data
✓ Use cookies
✓ Employ tracking (e.g., Facebook Pixel)
✓ Monitor interactions (especially if you’re logged into their platform)
• Common providers: YouTube, Twitter, Instagram
Who we share your data with
We never sell data except for:
✓ Password reset emails (includes IP address)
✓ Legal obligations to authorities
✓ Anti-spam services (e.g., Akismet) for comment screening
How long we retain your data
• Comments & metadata → Indefinitely (for automated follow-up approval)
• Registered user data → Duration of account activity (editable/deletable by user)
• Post-account deletion → Retain legally required financial/security records
What rights you have over your data
You may request:
✓ Data copy (in JSON/CSV format)
✓ Correction of inaccuracies
✓ Deletion of non-essential data (processed within 72 hours)
✓ Opt-out of automated profiling (e.g., personalization)
*Legal/security data exempt from deletion rights
Cross-Border Data Transfers
• Comment data may be encrypted and transferred to anti-spam service locations (e.g., USA)
• EU data protected via Standard Contractual Clauses (SCCs)
Automated Processing
Comments screened by Akismet or similar anti-spam services
Profiling solely for content personalization