— Legal

Privacy policy

Last updated: 15 May 2026 · Compliant with GDPR (EU 2016/679)

This website is a static informational site for Phantom Maze AI & Language Lab. We process the minimum amount of personal data needed for the site to work and to respond to messages you send us.

The short version: we use no cookies, no analytics, and no tracking. The only personal data we ever touch is what you choose to type into our contact form, and we use it solely to reply to you. We do not train language models on it. You can ask us to delete it at any time.

1. Data controller

The data controller for this website is INVERSO Cultura e Ricerca APS (Italy). For any privacy-related request, contact us at inversoaps@pec.it or via the contact form.

2. What data we process

Only what you submit through the contact form:

Your name
Your email address
The text of your message

We do not collect IP-address logs at the application layer. The form submission is transmitted via TLS to our delegated form-handler (FormSubmit.co) which forwards it to our internal mailbox. Hosting infrastructure (Cloudflare) may retain short-lived access logs for security and abuse prevention.

3. Legal basis & purpose

The legal basis for processing your contact-form submission is your explicit request to be contacted — Article 6(1)(b) GDPR (steps prior to entering into a contract or service relationship) combined with Article 6(1)(f) (legitimate interest in answering correspondence). The data is used only to reply to your message.

We do not:

Sell, rent, or share your data with third parties for marketing.
Use submissions to train language models or other machine-learning systems.
Profile, score or otherwise automate decisions about you.

4. Retention

We keep contact-form submissions only as long as our conversation with you reasonably requires it, plus a short period for our own records. If you ask for deletion, we delete it.

5. Third-party processors

Cloudflare — hosting and content delivery. May process IP addresses for security purposes. Cloudflare privacy policy ↗
FormSubmit.co — contact-form delivery. Processes name, email and message in transit. FormSubmit terms ↗
Google Fonts — typography. Loaded from Google CDN; according to current EU case law, font requests may transmit the IP address to Google. If you prefer, you can block fonts.googleapis.com in your browser; the site will fall back to system fonts and remain fully readable.

6. Your rights under GDPR

If you are in the EU, you have the right to:

Access the data we hold about you (Article 15)
Correct inaccurate data (Article 16)
Request deletion of your data (Article 17)
Restrict processing (Article 18)
Receive your data in portable form (Article 20)
Object to processing (Article 21)
Lodge a complaint with your national supervisory authority

To exercise any of these rights, write to inversoaps@pec.it from the address you used in the original submission, or use the contact form.

7. International transfers

Some of our processors (Cloudflare, Google) are based outside the EU. They are bound by Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. We do not transfer data outside the EU for our own purposes.

8. Cookies

This site does not set any cookies of its own. We do not use analytics, tracking pixels or advertising scripts. Your browser may receive cookies only from third-party resources such as Google Fonts; these are not under our control. If we ever introduce first-party analytics, we will use a cookieless solution (Plausible or similar) and update this policy.

9. Changes to this policy

We will update this page when our practices change. The "Last updated" date at the top indicates when the policy was last revised. Material changes will be flagged on the home page for a reasonable period.