Privacy notice

The «xapiens Letture» extension

This is an English translation provided for convenience. The Italian version is the legally binding text and prevails in case of any discrepancy.

This page explains what the «xapiens Letture» browser extension does, which data it collects and which it doesn't, where the data goes, who can see it, how long it is kept and how it is deleted, in compliance with Regulation (EU) 2016/679 (GDPR). It applies to the Google Chrome and Microsoft Edge versions.

What it is for

The extension's interface is in Italian: below, its labels are quoted as they appear, with an English translation in brackets.

The extension does one thing only: when you open from xapiens an article your organization has recommended you read, it records how long you read it, so the reading becomes part of your learning path together with your other activities (podcasts, modules, quizzes).

It works only in tabs opened from xapiens, that is, the ones that go through the «Inizia la lettura tracciata» («Start tracked reading») page. In every other tab it does nothing.

When a reading is being tracked, you can always see it:

• the tab sits in a coloured group called «xapiens · lettura», with a badge on the extension icon;
• the xapiens side panel opens, showing the time and the «Ho finito» («I'm done») button;
• if you allow it, a coloured frame appears around the article page, with the time, «Ho finito» and «Riduci» («Minimize»).

When the reading ends, the signs disappear. The reading ends when you press «Ho finito», when you close the tab, or after four hours.

Who processes your data

The data controller is the organization that gave you access to xapiens and recommended the reading (for example the company you work for, or the one offering you the learning path). It is the organization that decides to suggest readings to you and to follow how they go.

The data processor is Cartesiani, which develops and runs xapiens and processes the data on behalf of your organization, under a written agreement.

• Cartesiani di Nicola Mastrorilli
• Office: via delle Azalee 37, 31021 Mogliano Veneto (TV), Italy
• VAT number: IT05142120269
• Email: info@cartesiani.it
• Certified email (PEC): mastrorillinicola@pec.it

What it collects

Only for the reading tab, and only while the reading is in progress:

• the time the tab is in the foreground, meaning when it is the active tab in the window you are using. Time spent looking at another tab or another application is not counted;
• how far you scroll down the page, as a number from 0 to 1 (for example «half the page»). Only if you have given permission for that news site;
• how many times the tab changes page after arriving on the article: it is a number, not the list of pages;
• the article's domain (for example «ilpost.it»), which xapiens already knows because your organization recommended the article.

On top of this, there is the data xapiens already processes to give you access: your account and the article that was recommended to you.

What it does not collect

• The text of pages: the extension does not read the article or any other page.
• Other tabs: it doesn't know which sites you visit in other tabs.
• Your browsing history.
• Cookies, neither xapiens cookies nor those of the sites you visit. It does not use your login details for publishers' websites: if an article is behind a paywall, you open it with your own subscription and the extension sees none of it.
• Where you go after the article: if you move to another site in the same tab, the extension only sees that you left the article's site (and stops counting time), not where you went.

Why it collects it

To record the reading in your learning path, show you your progress and let your organization follow the training it offers you. The legal basis for the processing is set by your organization, as the data controller: you can find the details in the notice it gave you, or ask it directly.

Reading data is not used for advertising, is not sold and is not used to train artificial intelligence models.

Where it goes

Only to the xapiens server, over an encrypted connection. The extension sends data to no one else.

Each reading has a «ticket»: a code that is valid only for you, only for that reading and only for a few hours, and that is used only to send this data. The ticket gives access to nothing else.

The xapiens servers are located in the European Union (the Netherlands) and are provided by Railway, a company based in the United States, with the safeguards required by the GDPR for providers outside the EU.

Who can see it

• You, on your progress page.
• The people your organization has appointed to follow the training.
• Cartesiani, only to run the platform and provide support, under a duty of confidentiality.

How long it is kept

• In the browser: the data of the reading in progress stays only while the reading is open, and in any case disappears when you close the browser.
• On the server: the reading becomes part of your learning path and is kept for as long as the service your organization activated with xapiens lasts. When the service ends, the data is handed over to the organization and then deleted, unless it instructs otherwise. The ticket's technical data is kept for at most 12 months.

How it is deleted, and your rights

• In the browser: remove the extension (Settings, Extensions) and its local data goes with it.
• Permissions for news sites: you can remove them whenever you want, one by one, in the extension details, under «Site access».
• On the server: ask your organization, as the data controller, to delete it. You can also write to info@cartesiani.it: we will forward the request to your organization and, on its instructions, delete the data.

In the same way you can ask to access your data, correct it, restrict its processing, object to it and receive it in a readable format (portability). You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

Permissions, one by one

When you install the extension, the browser asks only for these:

And a single optional permission, which is not requested at installation:

What it never does

• It does not track tabs you did not open from xapiens.
• It does not send data to anyone other than xapiens.
• It does not sell data, use it for advertising or use it to train artificial intelligence models.
• It does not change the content of pages: the frame is added on top of the page, it does not modify it.

The use of information collected by the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Changes

If the extension changes the way it handles data, we update this page before publishing the new version.

Last updated: October 2026.