This notice explains how the personal data of visitors of Disbigle (https://disbigle.com) is processed, under Article 13 of Regulation (EU) 2016/679 (GDPR).
Data controller
Serafino Christian Varazze
Email: [email protected]
What data we process and why
Browsing data
The systems running the site record some technical data, such as the IP address, the browser, the pages visited and the time. It is used to run the site and protect it from abuse, on the basis of the controller’s legitimate interest (Art. 6(1)(f) GDPR), and kept only as long as needed.
Cookies
We use technical cookies, needed for the site to work, and other cookies only with your consent. The list, and the way to change your choices, are in the cookie policy.
Who receives the data
The data is processed by people authorized by the controller and by providers helping us run the site, appointed as processors (Art. 28 GDPR). We do not sell or publish the data. If a provider is outside the European Union, the transfer only happens with the safeguards of Articles 44–49 GDPR, such as an adequacy decision or standard contractual clauses.
Your rights
At any time you can ask the controller for:
- access to your data and a copy of it (Art. 15)
- correction of inaccurate data (Art. 16)
- erasure of your data (Art. 17)
- restriction of processing (Art. 18)
- your data in a portable, readable format (Art. 20)
- to object to processing based on legitimate interest (Art. 21)
- to withdraw your consent, without affecting earlier processing (Art. 7(3))
Write to [email protected]: we answer within one month. You also have the right to lodge a complaint with a supervisory authority, such as the one of the country where you live.
Other information
Giving your data is optional, but without some of it we cannot answer your requests. We take no decisions based solely on automated processing. This notice may change: the date of the last change is below.
Last updated: 11 October 2026
The Disbigle service (app.disbigle.com)
If you create an account on app.disbigle.com, the same controller processes these data to provide the social network you asked for (Art. 6(1)(b) GDPR):
- Account: username, email address, password (stored only as an Argon2id hash), language and settings.
- Profile and content: name, bio, avatar, posts, replies, likes, media and messages you choose to publish or send.
- Security data: IP address and time of sign-ins and requests, kept for a limited time to protect the service from abuse (legitimate interest, Art. 6(1)(f) GDPR).
Federation
Disbigle is federated: what you share is delivered to the servers of the people who should see it (for example Mastodon, diaspora* or Hubzilla servers), according to the visibility you choose. Public posts can be seen by anyone. Those servers are run by third parties under their own policies.
When you delete a post or your account, Disbigle sends the deletion to the other servers, but cannot guarantee that every remote copy is removed.
Retention and your rights
Your data is kept while your account exists. From the settings you can export all your data and delete your account at any time. Backups are overwritten within 14 days. For any request, write to [email protected]. You can also complain to the Italian data protection authority (Garante per la protezione dei dati personali).
The service uses no advertising, no profiling and no third-party trackers. It only sets the cookies needed to keep you signed in.