Privacy and your data

SGTDI operates Chiosa and is the controller of personal data used to provide the service. Contact [email protected] with privacy questions or requests. This notice describes the website’s account, reading and optional traffic measurement features.

Reading and your account

You can browse public content without signing in. If you choose Google sign-in, Firebase Authentication provides an account identifier, email address, display name and profile picture. Chiosa stores this profile with the items you save, topic preferences and reading interactions, such as content opened, reading time, shares and completed lessons. We use these signals to maintain your library and tailor your feed. Recommendations use your chosen topics and interactions with research; you can change your topics from your profile.

Providing the account and saved-content features you request is based on performance of the service. Security, abuse prevention and operation of the website rely on our legitimate interest in maintaining a reliable service. Technical requests can include an IP address, browser details and operational logs. For signed-out readers, a pseudonymous identifier derived from the network address and quota records support daily reading limits; these are separate from Google Analytics.

Browser storage

Chiosa and Firebase use browser storage to keep you signed in and remember choices such as language, reading position and traffic preferences. Clearing storage may reset these choices or sign you out. It does not remove your account or data stored on the server.

Optional traffic measurement

When traffic measurement is enabled on the site, Google Analytics loads only after you choose Allow. It measures page visits and actions such as opening, saving, sharing and completing content. Our application sends the page path, content identifier, language and event details, plus controlled campaign source, medium and campaign labels when present; it does not send your email, account identifier, search text or URL fragment as analytics parameters. Google Analytics can use cookies and collect device and browser information under its own service terms.

Optional analytics is based on consent. Declining does not prevent you from reading or using an account. Google signals and advertising personalization are disabled in Chiosa’s analytics configuration. Your choice is remembered in this browser for up to 180 days. You can withdraw consent or change your choice through Traffic preferences in the footer; this stops further measurement in this browser and clears its accessible Google Analytics cookies. Withdrawal does not erase data already sent. Functional account and reading records are handled separately.

Change traffic preferences

Service providers and processing locations

Chiosa uses Google Firebase and Google Cloud for authentication, hosting and data storage, and Google Analytics for measurement when you consent. These providers process data to deliver their services. Some processing takes place outside your country, including in the United States. Google describes its processing locations and international transfer safeguards in its Firebase privacy information and Google privacy policy. Support requests are also processed through our email provider.

How long data is kept

Your account, saved items, preferences and associated reading records are kept to provide your account until you request deletion. Signing out does not start an automatic deletion. Browser preferences remain until they expire or you clear them. Technical logs and Analytics records follow the retention settings of the relevant provider; contact us for details or a request concerning data already collected. A deletion request may require limited records to be retained where necessary to meet a legal obligation or resolve the request.

Your choices and requests

Contact us to request access, correction, erasure, restriction or portability of your personal data, or to object to processing based on legitimate interests. You can request deletion of your Chiosa account and its associated data through our data and account request contact. We may verify account ownership before acting. You can also lodge a complaint with your local data protection authority; in Italy this is the Garante per la protezione dei dati personali.

Last updated: October 10, 2026.