Suggest a tool

Legal

Privacy Policy

Last updated: 14 October 2026 · Italiano

This policy explains how personal data is processed when you visit liminals.tech, use Tempo, Forge or Cue, or write to us, as required by Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Momentum has its own notice (see The Liminals tools below).

Who is responsible for your data

The controller of personal data processed through liminals.tech and the Liminals tools is:

  • Name: FILOCAMO CONSULTING SRL
  • Legal form: Società a responsabilità limitata (SRL), an Italian limited liability company
  • Registered office: Piazzale della Stazione 4, 27100 Pavia (PV), Italy
  • VAT number: 02937090187
  • Privacy contact: marco@liminals.it

What this website does

liminals.tech is a static information website. It has no user accounts, no sign-up, no contact forms, no comments and no newsletter. It contains no analytics, advertising, social media plug-ins or tracking technologies, and it does not load fonts, scripts or other resources from third-party domains. Nobody is profiled and no automated decisions are made about you.

Data processed when you visit

The website is hosted by Cloudflare, Inc. (Cloudflare Pages). As with any website, your browser sends technical information with every request, and Cloudflare receives it in order to deliver the pages and protect the service against abuse and attacks. This information is:

  • your IP address;
  • the browser and operating system (user agent);
  • the page requested, the referring page and the date and time of the request;
  • technical connection data (for example the TLS version).

Cloudflare's standard security checks are active: requests that look malicious may be asked to pass a short challenge. Cloudflare's Email Address Obfuscation feature is also enabled. It hides email addresses from automated harvesters and adds a small script, served from liminals.tech itself, that turns them back into readable links in your browser. That script does not set cookies, store anything on your device or send data anywhere.

The website does not use analytics: Cloudflare Web Analytics is disabled.

  • Purpose: delivering the website and keeping it secure.
  • Legal basis: our legitimate interest in operating the website and protecting it (Art. 6(1)(f) GDPR).
  • Retention: we do not receive or keep request logs ourselves (no log export is configured). Cloudflare keeps this data as our processor only for as long as it needs to deliver and secure the service, as described in Cloudflare's privacy policy.

If you email us

The website shows the email address marco@liminals.it. If you write to it, we receive your email address, your name if you include it, and whatever you choose to write. We use this only to reply to you and, if your message is about working together, to handle that request. Email for this address is hosted by Microsoft 365 (Exchange Online).

  • Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) for enquiries about working together, and our legitimate interest in answering messages (Art. 6(1)(f) GDPR) for everything else.
  • Retention: we keep your messages for as long as we need them to handle your request. If it leads to a contract, we keep them for as long as the contract lasts and then for as long as the law requires us to keep business records. Otherwise we delete them within 24 months of our last exchange.

Who receives your data

Your data is not sold and is not shared for advertising. It is processed on our behalf by these providers, each bound by a data processing agreement that forms part of its service terms:

  • Cloudflare, Inc. (Cloudflare Pages): hosting, content delivery and security, under Cloudflare's Data Processing Addendum.
  • Microsoft 365 (Exchange Online): email, under the Microsoft Products and Services Data Protection Addendum.
  • GitHub, Inc.: hosting of Cue's installers and update information (see below).
  • Supabase, Inc.: database, file storage and backend for Tempo, with data hosted in the European Union (Ireland).
  • Clerk, Inc.: optional sign-in for Tempo.

Transfers outside the EU

These providers operate globally, so data may be processed outside the European Economic Area, in particular in the United States. Cloudflare relies on its certification under the EU-U.S. Data Privacy Framework and on the Standard Contractual Clauses included in its Data Processing Addendum. Clerk is certified under the EU-U.S. Data Privacy Framework. Supabase, which hosts Tempo's data in the EU, applies the Standard Contractual Clauses included in its data processing agreement. Microsoft relies on the Standard Contractual Clauses included in its Data Protection Addendum. GitHub, as a Microsoft company, applies Microsoft's data transfer safeguards.

The Liminals tools

Forge (forge.liminals.tech)

Forge is hosted by Cloudflare in the same way as this website, and the same information applies. If you mark workflows as completed, your progress is saved only in your own browser (local storage, key liminals:progress) and is never sent to us. The "suggest a workflow" form does not send anything itself: it opens your email program with a message you can choose to send.

Cue (Windows application)

Cue runs on your computer and has no account, telemetry or analytics. Your settings and whiteboards are stored only on your computer, in your user profile (%APPDATA%\tech.liminals.annotex). Screen content used by the lenses and by Cue Mirror is processed in memory only and is never saved or sent. If you turn on the keystroke display, Cue shows the shortcuts and command keys you press; it ignores plain typing and stores nothing.

Cue checks for updates when it starts and then every six hours, by downloading a small file from GitHub. GitHub receives your IP address, the type of request and the time, as with any download; Cue sends nothing else. You can turn the check off in Settings → General. Downloading the installer from GitHub, and the Microsoft WebView2 component that the installer may download if it is missing, work the same way.

  • Legal basis: our legitimate interest in keeping Cue secure and up to date (Art. 6(1)(f) GDPR); you can object at any time by turning the update check off.

Tempo (tempo.liminals.tech)

Your flows are stored only in your own browser (IndexedDB) and are not sent to us while you work. When you import material from a web address, Tempo fetches that page through our server (a Supabase function), so the website sees our server rather than you; the page is processed only to build your flow and is not stored.

Public gallery. Exports are published only if you turn on "Share in gallery" (it is off until you turn it on). A shared export, together with its title, file name and editable source, is visible to everyone, who can view it, vote on it, report it and reuse it. If you are signed in, you can choose "Keep private" instead. You can delete an export you shared at any time: open it in the gallery and choose "Delete", in the browser you shared it from or while signed in to the account you shared it with. Exports shared without signing in before 14 October 2026 can be removed on request at marco@liminals.it. Older versions of the same flow may be removed automatically. Do not share exports that contain personal data about other people.

Anonymous identifier. When you share an export, vote or report, Tempo sets a signed, random cookie (scenario_flow_anon, one year) so that you can vote only once per export, delete the exports you shared, and so that we can limit abuse. It contains no personal details.

Signing in (optional). If you sign in, Clerk handles authentication and receives your email address (or the identity of the provider you sign in with) and session data.

  • Legal basis: providing the features you ask for (Art. 6(1)(b) GDPR); our legitimate interest in protecting the gallery from abuse (Art. 6(1)(f) GDPR).
  • Where: Supabase (database and file storage) in the European Union (Ireland); Clerk for sign-in.
  • Retention: shared exports until you delete them or ask us to remove them; account data for as long as your account exists.

Momentum

Momentum offers accounts, a public library and a paid plan, so it has its own notice: momentum.liminals.tech/privacy.

Links to other websites

The website links to other sites, such as LinkedIn. No data is sent to them until you click a link. When you click, your browser tells the destination that you came from liminals.tech, and the privacy policy of that site applies from then on.

Cookies

The website does not set cookies of its own. See the Cookie Policy.

Do you have to give us your data?

No. You can read the whole website without telling us anything. The technical data listed above is sent by your browser automatically and is needed to show you the pages. Writing to us is entirely optional.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

  • access your personal data and get a copy of it (Art. 15);
  • have inaccurate data corrected (Art. 16);
  • have your data erased (Art. 17);
  • restrict processing (Art. 18);
  • receive your data in a portable format, where applicable (Art. 20);
  • object to processing based on legitimate interest (Art. 21).

To exercise these rights, write to marco@liminals.it. You also have the right to lodge a complaint with a supervisory authority. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it); you can also contact the authority in the EU country where you live or work.

Changes to this policy

If this policy changes, the new version will be published on this page with an updated date.