Privacy Policy

Why this information?

When you visit this site, some personal data about you may be processed. This page describes how I handle the data collected during your visit. It is provided under the legislation on the protection of personal data (EU Regulation 2016/679, the General Data Protection Regulation or “GDPR”, and Italian Legislative Decree 196/2003 as amended) to everyone who uses the website of Biliardo 2, run by Marco Chiesi and reachable at biliardo2.com and at biliardo2.it (the Italian edition). The two addresses are two sites of the same installation, run by the same person, and this policy applies to both. It covers only this website, not other sites you may reach through its links.

The Data Controller

The Data Controller is:

Marco Chiesi, Via Ferruccio Parri 8, 64021 Giulianova (TE), Italy

Email: privacy@chiesi.net

There is no contact page and no contact form on this site: the email address above is the way to reach me, for anything concerning this policy or your data.

Personal data collected through this website

Biliardo 2 is a freeware billiard game for Windows that I wrote in 2001–2002. This site presents the game (its features, screenshots, a video, the download and its history), collects ten press reviews published between 2002 and 2007 (originally in Italian, with English translations), and contains this policy. It sells nothing, has no registration, no comments, no newsletter, no advertising and no third-party analytics: visits are counted by a cookieless statistics tool that I run on my own server, described below.

I only process personal data when there is a good reason to, and on this site that happens in three ways: automatically, because every web server records the requests it receives; through the visit statistics, which this site sends to a statistics server that I run; and when you decide to write to me. A third party, YouTube, receives data from your browser only if you choose to play the embedded video, as explained below.

No page of this site asks you for personal data. Downloading the game does not require you to provide anything either.

If you send me personal data of other people by email, please make sure you are entitled to do so; you are responsible for that disclosure.

Method and place of processing

Methods of processing

I adopt appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of personal data. Data are processed with IT and electronic tools, in ways strictly related to the purposes stated here. This is a personal site run by one person, so the list of people with access is short: me, and the hosting provider that runs the servers, which acts as data processor. There is no organisation behind it: no marketing team, no agencies, no mailing house. If that ever changes, this page will say so.

Place

The site and its backup copies, as well as the visit statistics, are stored on servers in data centres within the European Union (the statistics in Germany). It cannot be ruled out that the hosting provider processes some data outside the European Union; in that case the transfer takes place only to countries covered by an adequacy decision of the European Commission, or subject to appropriate safeguards such as the standard data protection clauses (Article 46(2)(c) and (d) GDPR). You can ask me for information about this at the address given above.

Storage period

I keep data only for as long as the purposes for which they were collected require. Therefore:

  • Server access logs are kept by the hosting provider for a limited period, as part of running the service.
  • Email you send me is kept for as long as the conversation is useful, and no longer.
  • Visit statistics: kept for as long as they are useful to compare the site’s traffic over time. They contain no IP addresses, and the visitor identifier described below changes every month.

Purposes of the processing

Personal data are processed for three purposes only:

  • Serving the site. Delivering these pages and the game download to your browser and keeping the server running and secure, which produces ordinary access logs.
  • Counting visits. Knowing, in aggregate, how many visits the site and each page receive, how many times the game is downloaded and where visitors come from, with a cookieless tool that I run myself.
  • Replying to you. If, and only if, you choose to send me an email.

The following sections give the details of each.

Details on the processing of personal data

Server logs and hosting

No third-party analytics run on this site: there is no Google Analytics, no tag manager and no third-party measurement of any kind, and no script on these pages reports your visit to anybody else. Visits are counted by a statistics tool that I run on my own server, described under “Visit statistics” below.

What does exist is the ordinary server log. Every web server records the requests it serves, and those records include the IP address the request came from, the date and time, the page or file requested, the response code and the browser’s user agent. That is the technical minimum needed to run a website, keep it available and investigate abuse. The lawful basis is my legitimate interest in operating the site and protecting it (Article 6(1)(f) GDPR). I do not build profiles from these logs, and I do not use them to identify individual visitors.

This site, and the server that collects the visit statistics, are hosted by Hostinger International Ltd., which acts as data processor for those logs and for the statistics, processing them on my instructions. Its handling of visitor data collected on behalf of hosting customers is described in the Hostinger privacy policy and governed by its data processing addendum.

A disclosure, for completeness: I work at Hostinger. It is where I chose to host my own sites, and that does not change the processor relationship described above.

Visit statistics

To know how many people visit the site, which pages they read and how they find it, I use Umami, an open-source statistics tool that I run on my own server (yum.chiesi.tech, a virtual server rented from Hostinger and located in Germany). The data are not shared with any analytics or advertising company, and nothing is stored on your device: it uses no cookies, no local storage and no other identifier in your browser.

When a page is displayed, a small script, served by this site, sends to this site the address and title of the page, the address of the page you came from (if it belongs to another site), any campaign tags in the link you followed, your browser language and your screen size. This site forwards them to the statistics server together with your IP address and your browser’s user agent: your browser never connects to the statistics server itself. From these the statistics server derives the browser, operating system and device type, and from the IP address the approximate location (country, region and city).

Downloads are recorded too. When you download the game through the download link, this site’s server sends the statistics server a download event with the name of the file, the address of the page you came from (if it belongs to another site) and your browser language, together with your IP address and user agent, in the same way as for the pages.

To tell visitors apart, the statistics server combines your IP address and user agent with the site and a secret value that changes every month, and turns them into a one-way identifier (a hash). Within the same month, visits from the same browser and network count as the same anonymous visitor; the next month the identifier changes and cannot be linked to the previous one. Your IP address is not stored, and the identifier is not linked to your name, your email or anything else, nor used to build profiles or to follow you on other sites.

The statistics are kept for as long as they are useful to compare the site’s traffic over time, are only looked at in aggregate and are not shared with anybody. Visits by the site administrators are not counted, and neither are known bots.

The lawful basis is my legitimate interest in knowing, in aggregate, how the site is used (Article 6(1)(f) GDPR), pursued with as little data as possible. You can object at any time by writing to me. To stop your visits from being counted, you can block JavaScript for this site, or type localStorage.setItem('umami.disabled', 1) in your browser’s console while on the site: that is the flag Umami uses to exclude a browser, and it stays on your device until you clear the site’s data. Downloads are the exception: they are recorded by this site’s server while it handles the download link, so they are counted even with JavaScript blocked or the flag set; if you object to that, write to me.

Downloading the game

The game (a zip archive containing the original 2002 setup program) is served directly from this site. Downloading it is a request like any other: it produces the ordinary server log entry described above and is also recorded in the visit statistics, as a download event with the name of the file (see “Visit statistics”). Nobody is asked for data in order to download it, and no third-party service is involved. Each download also adds one to an anonymous counter, which records nothing about you.

This policy covers the website, not the use of the program once you have downloaded it. The game is distributed as is, and this site receives nothing from it.

Contacting me

This site has no contact form, no newsletter and no registration, and comments are disabled. The only way to reach me is the email address published in this policy.

If you write to me, I process the address you write from and whatever you choose to put in the message, for the sole purpose of replying to you. The lawful basis is my legitimate interest in answering correspondence that you have chosen to send (Article 6(1)(f) GDPR), and Article 6(1)(b) GDPR where your message asks me to take steps towards an agreement with you. I keep that correspondence for as long as the exchange is useful, and no longer.

Personal data collected: your email address, and any personal data you include in the message itself. Nothing is collected automatically at the point of contact, because there is no form to collect it.

Third-party content: the embedded video

Almost nothing here comes from anybody else. The fonts are served from this site, not from Google Fonts or any other font service. There is no Font Awesome, no embedded map, no social widget, no sharing button, no advertising and no external comment system.

There is one exception, and it matters: the home page shows a video of the game made by a fan (“Biliardo v2.2 (Windows game 2002)”, from the YouTube channel “The Rarest Gamer”). It is embedded with a click-to-load approach. When the page opens, you see only a preview image, served from this site itself; at that point nothing is sent to Google or YouTube.

Only if you press play is the YouTube player loaded, from youtube-nocookie.com, Google’s privacy-enhanced mode. From that moment your browser contacts YouTube, which necessarily receives your IP address, your browser’s user agent and the page you came from. Once the video plays, YouTube may set cookies or use your browser’s local storage, and from then on the Google privacy policy governs what happens, not this one. Google acts as an independent controller for that processing.

If you would rather not contact YouTube, simply do not press play. The rest of the site is unaffected.

Links to other websites

The site contains ordinary links to other websites: a Microsoft support page about compatibility mode and chiesi.net, the author’s website. Following one takes you to a service with its own privacy policy, which this document does not cover. Until you click, nothing is sent to them.

Your rights as a Data Subject

Under Articles 15–22, 7 and 77 of the GDPR, you can exercise certain rights regarding your data processed by Marco Chiesi. In particular, you have the right to:

  • withdraw your consent at any time, where processing is based on consent. No processing on this site currently is, but the right applies if that ever changes;
  • object to the processing of your data, on grounds relating to your particular situation, where it is based on legitimate interest;
  • access your data, that is, obtain confirmation of whether data about you are being processed, information on certain aspects of the processing, and a copy of the data;
  • verify and obtain rectification of your data, so that inaccurate data are corrected or updated;
  • obtain restriction of processing, where the conditions laid down by law are met;
  • obtain erasure of your data, where the conditions laid down by law are met;
  • receive your data or have them transmitted to another controller (data portability), in a structured, commonly used and machine-readable format and, where technically feasible, directly. This applies when your data are processed by automated means and the processing is based on your consent or on a contract to which you are a party;
  • lodge a complaint with a supervisory authority, such as the Italian data protection authority (Garante per la protezione dei dati personali), or the authority of the Member State where you live or work.

How to exercise your rights

To exercise your rights, write to me at the email address given in this policy. Requests are free of charge and I handle them as soon as possible, and in any case within one month.

Cookie Policy

Definition and purpose

Cookies are small pieces of data, stored in text files, that websites place on your computer or other device when they are loaded in a browser. By default almost all browsers accept cookies automatically. They are widely used to remember you and your preferences, either for a single visit (“session cookies”) or across repeated visits (“persistent cookies”), and they perform essential functions such as keeping a user logged in. Cookies can be set by the site you are visiting (“first-party cookies”) or by a different website, such as one that provides content, advertising or analytics to the site you are on (“third-party cookies”); this is possible because a page can include elements (images, maps, videos, sounds and so on) that reside on servers other than the one of the site you visited. Websites and HTML emails can also use other tracking technologies such as “web beacons” or “pixels”, usually tiny transparent images that serve purposes similar to cookies. Browsers also offer other ways to store data on your device, such as local storage, which raise the same questions.

Types of cookies

Technical cookies

These cookies are used only to carry out browsing or to provide a service the user has requested, and are normally set directly by the owner of the website. Without them some operations could not be carried out, or would be more complicated or less secure. They include:

  • navigation or session cookies, which ensure normal browsing and use of the website (for example to make a purchase or to log in to restricted areas);
  • analytics cookies, treated like technical cookies when they are used directly by the site operator to collect aggregate information on the number of users and how they use the site;
  • functionality cookies, which let users browse according to criteria they have chosen (for example the language) in order to improve the service.

Profiling cookies

These cookies are used to track a user’s browsing across the web and build a profile of their tastes, habits and choices, so that advertising in line with those preferences can be shown to them.

Third-party cookies

A web page may contain elements hosted by other sites, such as advertising banners, images or videos, which can set their own cookies. These are called third-party cookies, and they can be read by parties other than the one that runs the page you are visiting. For details, consult the privacy policies of the third parties concerned.

Use of cookies by this site

This site sets no cookies for visitors. Browsing these pages does not place a cookie on your device: not a technical one, not an analytics one, not a third-party one. Nothing is stored in your browser’s local storage either: the visit statistics described above use neither. You can verify all this in your browser’s developer tools.

WordPress itself sets cookies for people who log in to administer the site. That is me, not you.

The only case in which anything may be stored on your device is the one described above: if you press play on the embedded video, YouTube may set cookies or use local storage. That happens only after your click, is done by YouTube and not by this site, and is governed by Google’s privacy policy.

Why there is no cookie banner

You will not be asked to accept anything on this site, and that is deliberate rather than an oversight. Consent is required for storing or reading information on your device when that is not strictly necessary to provide what you asked for. This site stores nothing on your device: the visit statistics use only what your browser sends with every request, and their script reads nothing from your device except the opt-out flag described above, if you have set it yourself. So there is nothing to consent to and no banner. The embedded video contacts YouTube only when you press play, which is why it is shown as a preview image served from this site until then.

Managing and deleting cookies

You may wish to limit cookies or prevent them from being set altogether. Most browsers let you control cookies, including how long they are kept, through built-in settings or third-party extensions, and let you delete cookies stored in the past. You can find out how to manage cookies in your browser here:

To learn more about managing and deleting cookies, visit aboutcookies.org. There is no advertising and no interest-based profiling here, so the industry opt-out tools for those are not relevant to this site.

For services provided by third parties, you can also object to tracking by following the third party’s privacy policy, using its opt-out link where one is provided, or contacting it directly.

Responsibility for third-party cookies

Cookies and other tracking technologies set by third parties cannot be technically controlled by me, so any reference in this document to what a third party does is to be considered indicative. For complete information, consult the privacy policy of the third party concerned. If you would like further information about cookies and their use through this site, you are welcome to write to me.

Further information on the processing

Legal defence

I may use personal data in court, or in the steps preparatory to legal proceedings, to defend against abuse of this site. I may also be required to disclose data by order of the public authorities.

Specific information

On request, in addition to what is contained in this policy, I can provide further information on the processing of personal data related to specific aspects of this site.

System and maintenance logs

Running and maintaining this site produces system logs: files that record the requests made to the server and contain personal data in the sense that they include the IP address you connected from. Together with the visit statistics, this is the only automatic collection that happens here; both are described in full above.

Information not contained in this policy

You can ask for further information about the processing of your personal data at any time, at the email address given in this policy.

Response to “Do Not Track” requests

This site does not follow its visitors across sites and builds no profiles: the visit statistics are only looked at in aggregate, without cookies, so a “Do Not Track” signal does not change them. To find out whether YouTube honours such signals once you play the video, consult its privacy policy.

Changes to this privacy policy

I may change this privacy policy at any time, informing users on this page. Please check it from time to time, referring to the date of last modification shown at the bottom.

If a change concerns processing based on consent, I will ask for consent again where required.

Definitions and legal references

Personal Data (or Data)

Any information that can identify a natural person, directly or indirectly.

Usage Data

Information collected automatically through a website, which may include the IP addresses or domain names of the computers used by visitors, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file returned, the numeric status code of the server’s response (success, error and so on), and the characteristics of the browser and operating system used. On this site, usage data are limited to what the server log records and to the visit statistics, as described above.

User

The person using this website who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refer.

Data Processor

The natural or legal person, public authority, agency or other body that processes Personal Data on behalf of the Data Controller, as described in this privacy policy.

Data Controller

The natural or legal person, public authority, agency or other body that, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this website. Unless otherwise specified, the Data Controller is the owner of this website.

This Website

The sites biliardo2.com and biliardo2.it, through which the Personal Data of Users are collected and processed.

European Union (or EU)

Unless otherwise specified, any reference to the European Union in this document extends to all current Member States of the European Union and of the European Economic Area.

Cookie

A small piece of data stored on the User’s device.

Last modified: 14 October 2026.