Porvion processes data to provide, protect, monitor and improve the service.
The current version can be used without registration. The simulator creates a temporary technical session and returns results, plots and statistics. A separate technical cookie may remember the versions of the Terms of Use accepted and the Privacy Policy acknowledged. Porvion may also retain selected de-identified payloads, datasets and simulation statistics in a separate quality archive.
What this Privacy Policy covers
This Privacy Policy describes the processing of personal data carried out through the Porvion website, its home page, the simulation workspace and the contact channels associated with porvion.eu.
This Policy is provided under Regulation (EU) 2016/679 (“GDPR”) and the applicable Italian rules on personal-data protection and electronic communications.
Third-party websites or services reached through external links apply their own privacy policies, over which Porvion has no control.
Who determines how your data is processed
The data controller is the person who operates Porvion and determines the purposes and means of personal-data processing.
- Data controller
- Gilbert Junior Castagnola
- Privacy contact
- contact@porvion.eu
- Service
- Porvion — Computational mechanics
What data we process
Technical browsing data
When your browser communicates with Porvion, the systems receive the technical data required for connectivity and security, such as IP address, date and time, requested resource, request outcome and technical information sent by the browser or network protocol.
Guest-session identifier
The simulator generates a random identifier called
guest_id. It is used to distinguish one temporary
session from another, restore the session while it remains
available, apply technical limits and securely associate HTTP
and WebSocket requests with the correct workspace.
The identifier does not directly contain your name, email address or other identity details.
Legal acceptance record
When you select the button used to accept the Terms of Use, Porvion records the version of the Terms accepted, the version of the Privacy Policy presented and acknowledged, and the date and time of the action. This information is used to document the contractual choice and to determine whether the current legal notice must be shown again.
Porvion may place a first-party technical cookie called
porvion_legal in your browser. The cookie is
intended to recognise the same legal choice if the temporary
guest_id changes, expires or is replaced. It is
not intended to identify you by name, restore simulation
results, track browsing across unrelated websites, perform
analytics, advertise to you or create a behavioural profile.
Model and simulation data
To perform calculations, Porvion processes the information entered in the workspace, including geometries, mechanical properties, constraints, initial conditions, forces, numerical parameters, solver settings and post-processing requests.
The server may generate temporary files, numerical datasets, degree-of-freedom mappings, results, reactions, statistics, plot images and diagnostic information required for processing.
Quality and monitoring records
Porvion may create a separate technical record containing selected simulation-input payloads, generated datasets, numerical results and statistics. These records may include element properties, geometry, constraints, solver settings, time-step information, convergence data, performance metrics, reactions and other outputs needed to evaluate the quality and reliability of the service.
Before a record is placed in the quality archive, Porvion is
designed to separate it from the active guest session and to
exclude identifiers such as the guest_id, IP
address, contact details, session or request identifiers,
original file paths and other metadata not needed for the
purposes described in this Policy. Free-text fields, titles,
descriptions and original filenames should not be retained
where they may identify a person or disclose unrelated
information.
A new archive identifier may be assigned for technical organisation. It is not intended to be derived from, or linked back to, the guest-session identifier. Where a record cannot be adequately separated from identifying information, it should not be added to the quality archive.
Communications you send
If you contact Porvion by email, the sender's address, the content of the message and any additional information you choose to provide are processed.
Data that Porvion does not request
Porvion does not ask you to submit health, biometric, political, religious or other special-category personal data. Do not include third-party personal data or confidential information in your models unless you have a valid legal basis and all necessary authorisations.
Why we process data
Provide the simulator
Create the guest session, receive the model, perform the requested calculations, transmit the results and make the workspace features available.
Article 6(1)(b) GDPR · service requested by the userSecurity and abuse prevention
Limit excessive requests and connections, prevent unauthorised access, identify errors, protect the infrastructure and keep the service available.
Article 6(1)(f) GDPR · legitimate interestsRecord acceptance of legal documents
Record the current Terms of Use accepted, the Privacy Policy version acknowledged and the time of the action; recognise that choice across temporary guest-session replacements; and establish, exercise or defend rights connected with use of the service.
Articles 6(1)(b) and 6(1)(f) GDPRQuality assurance, monitoring and improvement
Retain and analyse selected de-identified simulation payloads, datasets and statistics to reproduce errors, monitor numerical behaviour, verify output consistency, assess performance, develop benchmarks, detect regressions and improve the reliability and functionality of Porvion.
Article 6(1)(f) GDPR · legitimate interestsSupport and communications
Respond to technical questions, feedback, collaboration enquiries or requests for access to higher computing limits.
Articles 6(1)(b) and 6(1)(f) GDPRLegal obligations and protection of rights
Comply with legal duties, respond to competent authorities and establish, exercise or defend legal claims.
Articles 6(1)(c) and 6(1)(f) GDPRIn the current version, Porvion does not intentionally use personal data for behavioural advertising, commercial profiling or promotional newsletters. The quality archive is intended for technical quality, monitoring, validation, security and service-improvement purposes only.
How the guest session works
You do not need an account to access the simulator. On first use, the server creates a guest session identified by a random code. Your browser automatically presents that identifier in subsequent requests needed to operate the workspace.
The model is built in the browser, and the data required for simulation is transmitted to Porvion's server infrastructure through HTTP and WebSocket connections. Calculations are performed server-side and the results are sent back to your browser.
Working files are organised in a temporary directory associated with the individual guest session. The application is designed to schedule deletion of the session and its directory approximately eight hours after the last WebSocket connection is closed, provided that the user does not reconnect in the meantime.
If the session expires or is replaced, previous results may no longer be recoverable. Porvion should therefore not be used as the only storage location for important models or results.
The legal-acceptance record is separate from the temporary
simulation workspace. If the porvion_legal cookie
remains valid, Porvion may recognise that the current Terms
have already been accepted even when a new
guest_id is generated. This does not restore the
previous guest session or its simulation files.
Deletion of the live guest-session directory does not necessarily delete a separate de-identified technical record that has already been placed in the quality archive. That archive is governed by the next section and by the separate retention period stated below.
Retention of simulation records for quality and monitoring
Porvion may retain selected copies of simulation payloads, generated datasets and statistics in a storage archive that is separate from the live guest-session directories. The archive may be held on storage media controlled by the Controller and is used only for the technical purposes described in this Policy.
Archived records may be reviewed or processed to:
- monitor numerical quality, stability and consistency;
- reproduce and investigate software or solver errors;
- identify regressions after updates;
- evaluate execution time, memory use and system capacity;
- develop internal test cases and numerical benchmarks;
- validate statistics, plots and post-processing functions;
- improve the reliability, security and functionality of Porvion.
The quality archive is not intended to maintain a user history, build user profiles, identify the person who submitted a scenario, advertise to users or make decisions about them. Porvion does not intend to combine archived technical records with contact data or active guest-session identifiers and does not attempt to re-identify users from those records.
Removing a direct identifier does not always make information anonymous. For that reason, archived records are treated conservatively as de-identified technical data unless and until they have been rendered genuinely anonymous so that no person is reasonably identifiable.
Users should not include personal data, confidential information, classified material or third-party trade secrets in a simulation scenario unless they are authorised to do so. Technical de-identification cannot guarantee the removal of information deliberately embedded in geometry, labels, filenames, descriptions or other user-provided content.
Cookies and local storage tools
Porvion uses first-party technical cookies and browser storage that are necessary to maintain the guest session, coordinate workspace features and remember the user's legal choice. These tools are not used for advertising, behavioural profiling or cross-site tracking. The current version does not request a separate cookie consent for them because they are used only for the technical and contractual purposes described in this Policy.
| Name | Type | Purpose | Duration | Properties |
|---|---|---|---|---|
guest_id |
Strictly necessary technical cookie | Creation and restoration of the guest session, association of requests with the correct workspace, security and abuse prevention. | 8 hours | HttpOnly; SameSite=Lax; Secure in production; domain-wide path. |
porvion_legal |
First-party technical cookie | Records or references the versions of the Terms of Use accepted and the Privacy Policy acknowledged, together with the acceptance time, so that the same legal choice can be recognised if the temporary guest session is replaced. | Up to 12 months, unless deleted, invalidated or replaced earlier | HttpOnly; SameSite=Lax; Secure in production; server-signed; domain-wide path. Not used for analytics, advertising or cross-site tracking. |
plotToolSessionId |
Session storage | Browser-side technical identifier used to coordinate the session of the plotting tools. | Until the relevant browser tab or session is closed |
Stored in sessionStorage.
|
You may remove cookies and site storage through your browser
settings. Deleting guest_id will normally create
a new session and may make results linked to the previous
session unavailable. Deleting porvion_legal does
not delete a simulation session, but Porvion may be unable to
recognise the previous legal choice and may show the Terms
notice again before another server-side simulation.
If Porvion introduces non-essential analytics, advertising tools or profiling technologies in the future, those tools will be blocked until consent is obtained where required, and this Policy will be updated.
Recipients and third-party technical resources
Data may be processed by the controller and authorised persons, as well as by technical providers needed to operate the site, infrastructure, network and email services. Where they process data on behalf of the controller, those providers are appointed as processors where required.
The current frontend also retrieves certain libraries, stylesheets and fonts from external services. When your browser downloads those resources, the relevant provider receives the normal technical connection data, such as the IP address and request information.
The main providers' privacy information is available from: Google, Cloudflare, jsDelivr and the OpenJS Foundation.
To further reduce the communication of technical data to third parties, Porvion may host fonts and frontend libraries locally. This section will be updated if that change is made.
Transfers outside the European Economic Area
Some technical providers identified above may operate or use infrastructure located outside the European Economic Area. Where an international transfer is subject to the GDPR, it must rely on an adequacy decision of the European Commission or another safeguard under Articles 44 and following of the GDPR, such as Standard Contractual Clauses.
You may request updated information about providers and applicable safeguards by writing to contact@porvion.eu .
How long data is retained
- Guest cookie: for up to 8 hours from creation, unless deleted earlier by the user.
- Guest session and files: for as long as needed to keep the workspace active and, ordinarily, until approximately 8 hours after the last WebSocket connection is closed, unless the user reconnects or exceptional technical needs apply.
- Browser session storage: until the relevant browser session or tab is closed, depending on browser behaviour.
- Legal acceptance cookie and record: for up to 12 months from acceptance, unless deleted by the user, invalidated or replaced earlier because the applicable legal documents change. Information required for the establishment, exercise or defence of legal claims may be retained for a longer period where necessary and permitted by law.
- De-identified simulation payloads, datasets and statistics: for up to 36 months from archiving, subject to periodic review and earlier deletion when a record is no longer useful for quality assurance, monitoring, debugging, validation, benchmarking or service improvement.
- Genuinely anonymised and aggregate statistics: may be retained for longer where they no longer relate to an identified or reasonably identifiable person and remain useful for long-term quality and performance analysis.
- Technical and security logs: for the period strictly necessary to diagnose errors, protect the service and manage incidents. Information relating to a specific incident may be retained longer to establish or defend legal claims and comply with legal obligations.
- Email and support requests: for the time needed to handle the request and, afterwards, for the period required to protect rights or comply with the law.
Data is deleted or anonymised when it is no longer needed for the purposes for which it was collected, unless retention is required by law or in connection with an ongoing dispute.
How data is protected
Porvion applies technical and organisational measures proportionate to the nature of the service and the relevant risks. These measures include random session identifiers, HttpOnly cookies, the SameSite attribute, server signing of the legal-acceptance cookie, secure transmission in production, request and connection limits, input validation, separation of guest-session temporary directories, separation of the quality archive from live sessions and restriction of archive access to the technical purposes described above.
No system can guarantee absolute security. In the event of a malfunction, interruption or security incident, Porvion may temporarily suspend features and take the measures required to contain the risk.
Your data-protection rights
Where the conditions under the GDPR are met, you may ask the controller to:
- confirm whether personal data concerning you is being processed and provide access to that data;
- correct inaccurate data or complete incomplete data;
- delete personal data;
- restrict processing;
- provide data portability, where applicable;
- stop processing based on legitimate interests where you object on grounds relating to your particular situation.
Because the guest session and legal-acceptance mechanism use
technical identifiers and do not require an account, Porvion
may need the value of the guest_id or
porvion_legal cookie, or additional technical
information, to identify the data concerned with reasonable
certainty. Deleting the legal cookie may prevent Porvion from
recognising the previous browser-side acceptance record.
You may also object, on grounds relating to your particular situation, to processing based on legitimate interests, including the retention and analysis of de-identified simulation records. Where an archived record has already been irreversibly anonymised or can no longer be linked to a person with reasonable certainty, Porvion may be unable to identify the specific record concerned without collecting additional information solely for that purpose.
Requests may be sent to contact@porvion.eu .
You also have the right to lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority in the Member State where you live or work.
Automated decision-making
Porvion does not make decisions based solely on automated processing that produce legal effects or similarly significant effects for users. Automatic request limits are used only to protect the service and manage computing resources.
Changes to this Privacy Policy
This Policy may be updated when Porvion's features, providers, processing activities, quality-monitoring practices, retention periods or applicable legal requirements change.
The revised version will be published on this page with a clearly visible update date. Where changes are material, Porvion may provide an additional notice on the website or in the workspace.
The Privacy Policy is information about personal-data processing and does not, by itself, require contractual acceptance. Obligations and conditions governing use of the service are set out separately in the Terms of Use.