Privacy

Sintetico is a label by Pionio. The data controller is Ivan Pantò, operating under the name Pionio. For anything on this page, write to pionio.dev@gmail.com and you get a person, not a ticket.

When you sign in to the Lab. You type your email and we send you a link. The link works once and stops working after fifteen minutes. Opening it creates your account, which holds four things: your email address, the day it was made, how many of your reads you have used, and, if you press “Tell me when it opens”, the day you pressed it. There is no password.

We need the account to give you the reads you asked for and to count them, so the legal basis is the performance of that service, article 6(1)(b) GDPR.

When you press “Tell me when it opens”. Your address arrives as an email in our inbox, so we can write to you on the day the Lab opens. That rests on your consent, article 6(1)(a), and you can withdraw it at any time by writing to us.

When you join the waitlist. The form sends your email address and whichever packs you ticked. They arrive as an email in the same inbox and are not stored anywhere else. We use them for one purpose: to write to you once, on the day Sintetico opens, and to know which pack to tell you about first. That also rests on your consent, and you can withdraw it at any time by writing to us or replying to that email.

When you buy Genesis. You pay on a page run by Stripe, not by us: your card details go to Stripe and never reach this site. Stripe tells us the payment went through and gives us the email address you typed there, and we use it for one thing, to send you the link to your page. We need it to deliver what you bought, so the legal basis is the performance of that contract, article 6(1)(b).

Both forms carry a field that people never see and bots always fill in. If it comes back filled in, the request is dropped. It records nothing about you.

Your browser shrinks the image to 1024 pixels on its long side and sends it to our server. The server passes it to Claude, a model made by Anthropic, with instructions to read the scene, the light and the lens, and to leave the person out: never to describe their face, identity, age, ethnicity or body, and never to guess who they are. The readings and the three prompts come back to your screen.

We do not save the image or the prompts. They stay in the page until you close the tab. Under Anthropic’s commercial terms, what goes through its API is not used to train its models and is deleted within 30 days. The one exception is content its safety systems flag as breaking its usage policy, which it can keep for up to two years.

Give the Lab only images you have the right to use. If there is a person in the picture, their image travels to Anthropic too, even though the Lab leaves them out of everything it writes.

The examples under the viewer are our own images. They need no account, and running them sends nothing anywhere.

The page remembers what you tried on it (building a face, measuring the three sessions, running the Lab) in your browser’s local storage, under the key sintetico:intent. It is used for one thing: ticking the right boxes in the waitlist form for you.

It never leaves your device on its own. It reaches us only if you then send the form, as part of what you ticked. Clear your site data and it’s gone.

One cookie, called sintetico_session. It is set only when you open a sign-in link, and it holds a random code that tells our server the browser is yours. Scripts on the page cannot read it, it only travels over an encrypted connection, and it lasts 30 days or until you sign out, whichever comes first.

It is a technical cookie: without it you would have to sign in again on every page. Cookies of this kind need no consent, which is why there is no cookie banner here. There are no analytics, no advertising pixels, no social buttons and no embedded third-party content. Fonts and images are served from this domain, so nobody else learns you were here.

Nothing is sold. Your data goes only to the services that make the site work:

• Vercel hosts the site and runs the server. Like any web host it keeps short technical logs of requests, including IP addresses, and when something goes wrong a log line can include your email address. To stop abuse, the server also counts requests per IP address for a few minutes, in memory, and then forgets them.
• Upstash is the database that holds accounts and sessions.
• Resend sends you the sign-in email and the link to what you bought, and delivers waitlist signups and “Tell me when it opens” requests to our inbox.
• Anthropic reads the images you give the Lab.
• Stripe takes the payment when you buy. For some of what it does with payment data, such as preventing fraud and meeting its own legal duties, Stripe decides for itself, under its own privacy policy at stripe.com/privacy.

They act as processors, on our instructions. The inbox is a Gmail account, so the emails that land in it are also held by Google.

They are US companies, or European arms of US companies. Transfers outside the European Union rest on the European Commission’s standard contractual clauses or on the EU-U.S. Data Privacy Framework, as each one’s data processing terms set out.

• Your account stays until twelve months after you last signed in or used a read. Then the database deletes it on its own.
• A sign-in link lasts fifteen minutes, or until it is used. A session lasts 30 days, or until you sign out.
• Waitlist signups and “Tell me” requests stay in the inbox until the day we write to you, plus the time it takes to send. Then they go.
• An order leaves one mark with us: the Stripe reference of the payment and the time it was delivered, kept 90 days so the same order is never sent twice. The payment record itself is Stripe’s, and Stripe keeps it as long as the law requires.
• Your images are not kept by us at all. Anthropic’s timing is in the Lab section above.

Ask us sooner, by writing to pionio.dev@gmail.com or replying to our email, and it is deleted when you ask. Signing out ends your session on our side as well, but it does not delete the account: for that, write to us.

You can ask to see what we hold, correct it, delete it, restrict how it's used, object to it, or get a copy to take elsewhere. Write to pionio.dev@gmail.com. If you think we've handled something badly, you can also complain to the Italian supervisory authority, the Garante per la protezione dei dati personali.

Every face here was generated. None of them is a real person, and none was made from a photograph of one. That includes the twelve faces of Genesis: each was written as a prompt first, then generated once and kept.

Nothing on this site tries to work out who someone is. The Lab is told to leave the person out, and nothing here compares faces or stores biometric data.

Sintetico is made for people who work with images professionally. It isn't aimed at anyone under 16, and we don't knowingly collect anything from them.