1. What Are Cookies
Cookies are small text files that are placed on your device when you visit our website. They help us provide you with a better experience by remembering your preferences, understanding how you use our services, and improving our website functionality.
Similar technologies include web beacons, pixels, localStorage, and sessionStorage.
2. How We Use Cookies
We use cookies for essential website functionality (authentication, security, language and theme preferences) and, with your explicit consent, for analytics — both first-party (to understand which pages are useful and improve the product) and Google Analytics 4 (to measure the performance of our marketing campaigns and improve our advertising).
3. Types of Cookies We Use
3.1 Essential Cookies
These cookies are strictly necessary for the website to function. They cannot be disabled and do not require consent under ePrivacy.
- dg_at - Authentication session (JWT). HttpOnly, Secure, SameSite=Lax. Duration: session or 30 days with 'remember me'.
- dg_csrf - CSRF protection token. Duration: session.
- dg_consent - Records your cookie choices so we don't ask again. Duration: 1 year.
- dg_geo - Two-letter country code derived from your IP at the network edge (Cloudflare). We use it only to decide whether to show the cookie consent banner (GDPR/EEA/UK/CH only). It is not used for tracking, profiling, or shared with third parties. Duration: 24 hours.
- localStorage: dg_lang, theme - language and theme preferences.
3.2 First-Party Analytics Cookies (Opt-In)
These cookies are set ONLY if you accept analytics in the cookie banner. They are first-party and help us understand traffic patterns, session duration, and which pages need improvement.
- dg_tracking_id - Rolling visitor identifier. HttpOnly. Duration: 1 year. Purpose: associate pageviews of the same visitor across sessions.
- dg_sid - Session identifier. HttpOnly, no maxAge (deleted when you close the browser). Purpose: group pageviews of the same visit and measure session duration.
3.3 Google Analytics 4 & Google Ads Cookies (Opt-In)
These cookies are set by Google LLC (data controller in the EEA: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) ONLY if you accept analytics in the cookie banner. They allow us to measure the performance of our marketing campaigns on Google Ads and improve our advertising. We have configured Google Consent Mode v2: before your consent, Google does NOT set these cookies and only receives anonymous cookieless signals for aggregated conversion modeling.
Data collected via these cookies may be transferred to Google servers in the United States under the EU-U.S. Data Privacy Framework (DPF), to which Google has self-certified.
- _ga - Distinguishes unique visitors. Provider: Google. Duration: 2 years. Purpose: analytics.
- _ga_G-94400Z07WM - Persists session state for the specific GA4 property. Provider: Google. Duration: 2 years. Purpose: analytics.
- _gcl_au - Google Ads conversion attribution across websites. Provider: Google. Duration: 90 days. Purpose: measure ad performance.
3.4 Anonymous Audience Measurement (No Consent Required)
Even if you reject analytics, we keep a strictly aggregated audience counter to know how many people visit each page. Per CNIL/Garante guidance, this is exempt from consent because:
- No persistent identifier (no tracking_id, no session_id).
- No full user-agent (only browser/OS family, e.g. 'Chrome/macOS').
- No full referrer URL (only hostname, e.g. 'google.com').
- IP truncated (/64 for IPv6, full /32 only for IPv4 as required by the legacy schema).
- Bots are excluded.
- First-party only, no data shared with third parties, no profiling.
4. Third-Party Services
We do NOT load any social media widget or external font on page load. Third-party services are loaded in two ways:
(a) Loaded on every page, but no cookies set without your consent (Google Consent Mode v2):
- Google Analytics 4 / Google Ads (googletagmanager.com) - Loaded on every page for analytics and advertising measurement. Before your consent, it sends only anonymous cookieless signals and does NOT set any cookie or identifier. After you accept analytics in the banner, it sets the cookies listed in section 3.3.
4.1 Third-Party Services Loaded on Demand
The following third-party services are loaded only after an explicit user action:
- Telegram login widget (telegram.org) - Loaded only when you click 'Continue with Telegram'. Telegram may set its own cookies in that popup.
- Stripe (js.stripe.com) - Loaded only when you reach the checkout page to enter payment details. Stripe may use cookies for fraud prevention and secure payment processing.
5. Managing Your Cookie Preferences
You have full control over which non-essential cookies we can use. You can manage your preferences at any time:
- Cookie Banner - When you first visit our website, you can accept or reject different categories of cookies.
- Cookie Preferences - You can change your choices at any time by clicking the cookie settings link in the footer or visiting your account settings.
- Browser Settings - You can configure your browser to block or delete cookies. Note that blocking essential cookies may prevent the website from functioning properly.
6. Cookie Consent and GDPR Compliance
In compliance with GDPR and ePrivacy regulations, we:
- Request your explicit consent before setting non-essential cookies
- Do not track your activity without consent for analytics cookies
- Allow you to withdraw consent at any time
- Provide clear information about what cookies we use and why
- Store your consent preferences for future visits
- Respect your choices across all our services
7. Data Storage
In addition to cookies, we use browser storage technologies:
- localStorage - Stores your language preference (dg_lang), theme settings, and interface preferences. This data never leaves your device.
- sessionStorage - Not currently used, but may be used for temporary session data in the future.
8. Cookie Duration
Different cookies have different lifespans:
- Session cookies - Deleted when you close your browser
- Persistent cookies - Remain on your device for a specified period (e.g., dg_tracking_id: 1 year, dg_consent: 1 year)
- You can delete all cookies manually through your browser settings at any time
9. Updates to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the 'Last Updated' date at the top of this policy and may request your consent again if required by law.
