01Who We Are
codice-fiscale.online is an independent guidance service that helps foreigners obtain their Italian Codice Fiscale (tax identification number). We provide step-by-step instructions, the official AA4/8 form, and appointment booking guidance. We are not affiliated with, endorsed by, or connected to the Italian government or the Agenzia delle Entrate.
02What Data We Collect
We do not collect, process, or store your personal information.
Any details you enter in the wizard (name, date of birth, document number, address) are used only within your own browser to help you reference your data when filling in the official AA4/8 form. This information is never transmitted to our servers.
For payment processing, Stripe collects your email address and payment details. We receive only a payment confirmation — we never see or store your card number or financial credentials.
If you use the optional geolocation feature, your coordinates are sent directly to Google Maps Geocoding API to find your nearest office. We do not log, store, or retain your location.
03What We Do NOT Collect
We never collect, transmit, or store:
• Passport numbers or national ID card numbers
• Names, dates of birth, or places of birth
• Residence permit or visa details
• Biometric data of any kind
• Browsing history or behavioural tracking data
04Session Tokens
After a successful payment, we issue a short-lived access token (JWT) that grants you access to the guidance wizard. This token is passed in the URL and expires after 24 hours. No personal data is stored on our servers. If you lose your session, you can recover it via the email address used at checkout.
05Cookies
We do not use analytics cookies, advertising cookies, or tracking pixels. The service may store your language preference locally in your browser. No third-party advertising networks have access to your data.
06Third-Party Services
We use the following third-party services:
• Stripe — payment processing (GDPR-compliant). Stripe’s privacy policy: stripe.com/privacy
• Google Maps Geocoding API — optional, user-initiated location lookup only
• Vercel — hosting infrastructure
Each provider has their own privacy policy and GDPR obligations.
07Legal Basis for Processing
The only personal data we process is your email address (via Stripe) for payment confirmation and session recovery. The legal basis is contract performance (GDPR Art. 6(1)(b)).
We do not process sensitive personal data (special categories under Art. 9).
08Your Rights Under GDPR
If you are based in the EEA, you have the right to:
• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing
• Data portability
• Lodge a complaint with your national supervisory authority
Contact: privacy@codice-fiscale.online
09Data Retention
We hold only your email address via Stripe, retained solely for payment record-keeping subject to Stripe’s standard retention policies. We maintain no separate database of users or their personal details.
10Changes to This Policy
We may update this policy from time to time. Material changes will be noted with an updated date. Continued use of the service constitutes acceptance.
11Contact
For privacy-related enquiries: privacy@codice-fiscale.online