Privacy Policy

Quantum Threads is an AI-assisted software engineering studio. We design, build, and ship websites, SaaS platforms, Progressive Web Apps, and internal tools for other businesses. This policy covers the marketing site at quantumthreads.it.

If you have questions about your data, email [email protected]. A real person reads and replies.

We collect the minimum we need to run the site and reply to your messages. Specifically:

• ▸When you submit the contact form, we receive your name, email address, subject, the type of project you describe, the budget range you choose, the message you write, and any files you choose to attach (JPG, PNG, WebP, GIF, or PDF, up to five files of five megabytes each). We give your message a reference number so we can find it if you write back.
• ▸When you load a page, our servers see your IP address in memory for a short time as part of standard abuse-prevention measures. It is not stored anywhere we can read later.

We do not run advertising on this site. We do not use Google Analytics, Facebook Pixel, Plausible, Umami, Fathom, Hotjar, Mixpanel, Sentry, LogRocket, PostHog, Bugsnag, Cloudflare Web Analytics, or any chat widget.

We do not set marketing cookies, retargeting pixels, or cross-site identifiers. We do not fingerprint your browser or device, and we do not build behavioural profiles of visitors. Our transactional emails do not contain open-tracking pixels or click-tracking links.

Most of what you see on this site lives in your own browser, not on our servers:

• ▸The few short-lived cookies the site uses (described in the Cookie Policy) live on your device.
• ▸The site is delivered in English. We do not store a language preference or any other personalisation on your device.
• ▸We do not place any third-party trackers or pixels on this site.

You can clear everything we keep on your device from your browser's site-data settings, or by following the steps in the Cookie Policy.

Contact form data is used for one purpose: to read your message and reply. We do not add you to a mailing list. We do not sell, rent, or share your data with anyone.

We never use automated decision-making or profiling on any of your data, and we only collect the smallest set of fields that lets us reply.

Different data has different lifetimes:

• ▸Contact messages and attachments are kept while we are working together, or until you ask us to delete them. In any case, contact records with no activity for 24 months are deleted on a rolling basis.
• ▸Short-lived abuse-prevention signals live only in memory and disappear when the request ends.
• ▸Server logs are kept by our hosting provider for a short period (about 30 days) for security and debugging, then deleted.
• ▸Things stored in your browser stay there until you change them or clear site data. You are in control of those.

A small number of trusted third parties process data on our behalf:

• ▸An email delivery provider sends the confirmation email when you submit the contact form. It receives the email address you typed and the email content we composed.
• ▸Google Fonts provides the web fonts the site uses. When fonts are fetched, your IP, browser type, and referring page are sent to Google as a normal part of how the web works. Google Fonts does not set cookies.
• ▸Our hosting provider runs the servers and database that store the site and contact submissions. They receive normal HTTPS requests and the server logs mentioned above.

We keep this list current and we will tell you before adding any new third party.

Some of your data may be processed outside the EU/EEA. Where that happens we rely on safeguards we have put in place with those providers, including framework adequacy decisions and contractual safeguards.

If you prefer not to send your IP to Google for font loading, you can block Google's font domains in your browser or DNS. The site will fall back to your device's system fonts.

We treat your data carefully and use industry-standard security measures to protect it, including HTTPS encryption on every page, hardened security headers, request signing on every state-changing action, file-upload validation, input sanitisation, bot detection, and rate limiting. No system on the internet is perfectly secure, but we keep these controls under review and update them as the field evolves.

You are always in control of the information you have given us. You can:

• ▸Ask us what we hold about you and get a copy.
• ▸Ask us to correct anything that is wrong.
• ▸Ask us to delete your data. We will do this within 30 days.
• ▸Ask us to give you a machine-readable export of your message.
• ▸Object to any processing we do, and ask us to pause it while we work it out.

To exercise any of these, email [email protected]. We may need to verify your identity before acting, so we do not share data with the wrong person.

If you are not satisfied with our response, you can always raise the matter with the data protection authority in your country.

This site is intended for business users and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted data through the contact form, email [email protected] and we will delete the record.

If we discover a security incident that puts your information at risk, we will tell you as soon as we can, with what happened, what was affected, and what we are doing about it.

If we make material changes, we will update the date at the top and post a notice on the site. If a change is significant, we will give you a reasonable opportunity to review it before it takes effect.