1. What Are Cookies
Cookies are small text files that are placed on your device when you visit our website. They help us provide you with a better experience by remembering your preferences, understanding how you use our services, and improving our website functionality.
Similar technologies include web beacons, pixels, localStorage, and sessionStorage.
2. How We Use Cookies
We use cookies only for essential website functionality (authentication, security, language and theme preferences) and, with your explicit consent, for first-party analytics to understand which pages are useful and improve the product. We do not use cookies for advertising or third-party tracking.
3. Types of Cookies We Use
3.1 Essential Cookies
These cookies are strictly necessary for the website to function. They cannot be disabled and do not require consent under ePrivacy.
- dg_at - Authentication session (JWT). HttpOnly, Secure, SameSite=Lax. Duration: session or 30 days with 'remember me'.
- dg_csrf - CSRF protection token. Duration: session.
- dg_consent - Records your cookie choices so we don't ask again. Duration: 1 year.
- dg_geo - Two-letter country code derived from your IP at the network edge (Cloudflare). We use it only to decide whether to show the cookie consent banner (GDPR/EEA/UK/CH only). It is not used for tracking, profiling, or shared with third parties. Duration: 24 hours.
- localStorage: dg_lang, theme - language and theme preferences.
3.2 Analytics Cookies (Opt-In)
These cookies are set ONLY if you accept analytics in the cookie banner. They are first-party (no Google Analytics, no third-party trackers) and help us understand traffic patterns, session duration, and which pages need improvement.
- dg_tracking_id - Rolling visitor identifier. HttpOnly. Duration: 1 year. Purpose: associate pageviews of the same visitor across sessions.
- dg_sid - Session identifier. HttpOnly, no maxAge (deleted when you close the browser). Purpose: group pageviews of the same visit and measure session duration.
3.3 Anonymous Audience Measurement (No Consent Required)
Even if you reject analytics, we keep a strictly aggregated audience counter to know how many people visit each page. Per CNIL/Garante guidance, this is exempt from consent because:
- No persistent identifier (no tracking_id, no session_id).
- No full user-agent (only browser/OS family, e.g. 'Chrome/macOS').
- No full referrer URL (only hostname, e.g. 'google.com').
- IP truncated (/64 for IPv6, full /32 only for IPv4 as required by the legacy schema).
- Bots are excluded.
- First-party only, no data shared with third parties, no profiling.
4. Third-Party Services
We do NOT load any third-party tracker, advertising network, social media widget, or external font on page load. The following third-party services are loaded only after an explicit user action:
- Telegram login widget (telegram.org) - Loaded only when you click 'Continue with Telegram'. Telegram may set its own cookies in that popup.
- Stripe (js.stripe.com) - Loaded only when you reach the checkout page to enter payment details. Stripe may use cookies for fraud prevention and secure payment processing.
5. Managing Your Cookie Preferences
You have full control over which non-essential cookies we can use. You can manage your preferences at any time:
- Cookie Banner - When you first visit our website, you can accept or reject different categories of cookies.
- Cookie Preferences - You can change your choices at any time by clicking the cookie settings link in the footer or visiting your account settings.
- Browser Settings - You can configure your browser to block or delete cookies. Note that blocking essential cookies may prevent the website from functioning properly.
6. Cookie Consent and GDPR Compliance
In compliance with GDPR and ePrivacy regulations, we:
- Request your explicit consent before setting non-essential cookies
- Do not track your activity without consent for analytics cookies
- Allow you to withdraw consent at any time
- Provide clear information about what cookies we use and why
- Store your consent preferences for future visits
- Respect your choices across all our services
7. Data Storage
In addition to cookies, we use browser storage technologies:
- localStorage - Stores your language preference (dg_lang), theme settings, and interface preferences. This data never leaves your device.
- sessionStorage - Not currently used, but may be used for temporary session data in the future.
8. Cookie Duration
Different cookies have different lifespans:
- Session cookies - Deleted when you close your browser
- Persistent cookies - Remain on your device for a specified period (e.g., dg_tracking_id: 1 year, dg_consent: 1 year)
- You can delete all cookies manually through your browser settings at any time
9. Updates to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the 'Last Updated' date at the top of this policy and may request your consent again if required by law.
