Privacy policy
Last updated: 5 November 2026
This page explains which data we collect through the website cocoun.eu and its related pages (such as the mini test), why we collect them and what your rights are. We have tried to keep it simple. If anything is unclear, write to us.
1. Who we are
The data controller is Cocoun S.r.l.s., registered office at Via Ugo Foscolo 31/A, 51011 Buggiano (PT), Italy, VAT number IT02069000475. For any question about privacy you can write to contact@cocoun.eu or to our certified email (PEC) cocoun@pec.it.
2. Which data we collect
We only collect what you choose to leave us:
- Waiting list sign-up: your email address, when you signed up and when you confirmed, and where the sign-up comes from (the website, the mini test, the survey, an event).
- Mini test: the test itself leaves no data. If at the end you join the waiting list, together with your email we store your answers to the test (as one number, the “shape”) and the profile they give (two words, for example “open, heart”), the purpose you chose and, if you asked to try the app before launch, the postcode or town you typed and the kind of phone you use (iPhone or Android). We do not use your phone’s location.
- “Talk to the team” form: name, email address and the text of your message.
- Technical browsing data: only what is strictly needed to run and protect the site, such as the IP address in the server logs. Visit statistics are made with Plausible, which uses no cookies and does not store the IP address: we count how many people visit a page, not who they are. The site uses no profiling, advertising or analytics cookies: only a technical one, to remember the language you chose. Details are in the cookie policy.
We do not ask for sensitive data. Please do not write any in the contact form.
Leaving us these data is your choice, and you can browse the site without leaving anything. Without an email we cannot add you to the waiting list; without a name and an email we cannot reply to you.
The survey about the project has its own privacy notice, shown at the start: an email left there joins the same waiting list, under the same rules as this page.
3. Why we use them and on which basis
| What we do | Legal basis |
|---|---|
| Write to you at Cocoun’s important moments: when the app opens, when we can invite you to try it, when a possible crowdfunding campaign starts, and a few other pieces of news of the same weight (a single waiting list, which gathers sign-ups from the website, the mini test, the survey and other channels) | Your consent (art. 6.1.a GDPR), given when you sign up and confirmed with the link in our email |
| Invite you to try the app before launch and, with your postcode or town and the kind of phone, open the tests one city at a time, if you asked for it; with your mini test answers, put together varied test groups | Your consent (art. 6.1.a GDPR) |
| Reply to the messages you send us | Your request (art. 6.1.b GDPR) |
| Run the site, protect it from abuse and understand how many people visit it, with cookie-free statistics | Our legitimate interest (art. 6.1.f GDPR) |
How signing up works: you leave your email and press the button; right after, we send you an email with a link. Your sign-up only counts once you click it. If you don’t, your address does not join the list and we won’t write to you again.
You can withdraw your consent at any time: with the link in every email, or by writing to us. Withdrawal does not affect what was done before.
The mini test result is worked out automatically from your answers, and it is there to tell you something about yourself. We do not use it to take decisions that produce legal effects on you or affect you in a similarly significant way (art. 22 GDPR).
We do not sell your data, we do not pass them to third parties and we do not use them for other people’s advertising.
4. How long we keep them
- Waiting list (email, sign-up and confirmation dates, source and, if you come from the mini test, answers, profile, purpose, postcode or town and kind of phone): until Cocoun’s public launch and your invitation to sign up, and in any case no longer than 24 months from your sign-up. Until you confirm, your sign-up stays on the website’s server; after you confirm, we keep it only on Brevo. If you withdraw your consent, we delete right away everything linked to your address.
- Unconfirmed sign-ups: deleted within 30 days.
- Contact form messages: they reach us by email; we keep them as long as needed to reply to you, and in any case no longer than 12 months.
- Technical logs: those of the site’s security system for 30 days; those of the hosting service as long as needed for security, at most 12 months.
5. Who processes them on our behalf
We use a few providers that process data only on our instructions:
- Hostinger (servers in Germany), for website hosting and email inboxes;
- Brevo (France), for the waiting list and for sending emails;
- Plausible (Estonia, servers in the European Union), for cookie-free visit statistics.
The professional who runs the website on our behalf can see the data only for technical management, under a duty of confidentiality.
Should a provider process data outside the European Union, it does so with the safeguards required by the GDPR (adequacy decision or the European Commission’s standard contractual clauses).
YouTube (Google), for the video on the site, follows its own rules, not our instructions, and has its own privacy notice: it loads only when you open it, in YouTube’s no-cookie mode.
6. Your rights
At any time you can ask us to:
- tell you which data we hold about you and give you a copy;
- correct them;
- delete them;
- restrict their use;
- give them to you in a machine-readable format.
Right to object. Where we use data for our legitimate interest (security and statistics of the site), you can object at any time, on grounds relating to your particular situation (art. 21 GDPR).
Just write to contact@cocoun.eu. We reply within one month. If you believe we handle your data unfairly, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
7. Age
Cocoun is for adults only. If you are under 18, please do not join the waiting list.
8. Changes
If we change this policy, we update the date at the top. If the changes concern how we use your email, we tell you first.