Who is responsible
Was Never Built is an independent editorial archive operated by its founders, Marzio Camasso and Leonardo Marchesi, who act as joint controllers of the personal data processed through this website.
Marzio Camasso is responsible for platform development and technical administration. Leonardo Marchesi is responsible for architectural direction, editorial review and the assessment of project submissions. Decisions about the archive and responses to data-protection requests are handled jointly.
Contact: wasneverbuilt@gmail.com.
Data we process
When you browse the website, hosting and security systems may process technical data such as IP address, request time, requested resource, browser information and security signals. We do not currently provide user accounts, advertising or behavioural analytics.
The contact form collects your name, email address, optional organisation, subject and message. The submission form collects project and professional information, an email address, a thumbnail, a model download link and any optional information you provide. Please do not send unnecessary personal data or sensitive information.
Why we use the data
- To deliver and secure the website and diagnose technical problems.
- To receive, assess and reply to enquiries.
- To evaluate proposed projects and verify their technical suitability, provenance, credits and rights.
- To document permissions for material accepted into the archive.
- To comply with legal obligations and protect the rights of the archive, its contributors and third parties.
Depending on the context, these activities are based on steps requested before entering an agreement, performance of an agreement, compliance with legal obligations, or our legitimate interests in operating and protecting the archive. Checking the acknowledgement box confirms that you have read this policy; it is not presented as consent where another legal basis applies.
Providers and recipients
The website is delivered through Cloudflare infrastructure. When the forms are activated, Cloudflare Turnstile is used for anti-abuse verification and Cloudflare Email Service forwards messages to the two founders. Email copies are handled through the founders’ configured Gmail accounts. These providers may process technical and message data under their own contractual and privacy arrangements.
Submitted information is not sold. It is disclosed only to the founders, relevant infrastructure providers, professional advisers where necessary, competent authorities where legally required, or another recipient with your knowledge or at your request.
International processing
Cloudflare and Google operate internationally. Where personal data is processed outside the European Economic Area, the relevant provider is expected to use an applicable transfer mechanism and safeguards under data-protection law. The production configuration and provider terms will be reviewed when the definitive domain and forms are activated.
How long we keep data
- General enquiries: normally up to 24 months after the last meaningful communication.
- Declined or withdrawn submissions: normally up to 12 months after the decision.
- Submissions under review: for the duration of the assessment.
- Accepted and published material: for as long as the work remains in the archive and as needed to document rights, permissions, provenance and credits.
- Security logs and exceptional records: for the provider’s applicable technical period or as long as reasonably necessary to investigate an incident, protect rights or meet a legal obligation.
These periods also guide deletion from the founders’ email accounts. Residual copies may remain temporarily in backups or provider systems.
Your rights
Subject to applicable law, you may request access, correction, deletion or restriction of your personal data, object to processing based on legitimate interests, or request portability where applicable. You may also lodge a complaint with the competent data-protection authority, including the Italian Garante for the protection of personal data.
Send requests to wasneverbuilt@gmail.com. We may need to verify your identity before acting on a request.
Changes
We may update this policy when the archive, its forms or its providers change. The date at the top identifies the current version.