Cookie Policy

1. What Are Cookies

Cookies are small text files that are placed on your device when you visit our website. They help us provide you with a better experience by remembering your preferences, understanding how you use our services, and improving our website functionality.

Similar technologies include web beacons, pixels, localStorage, and sessionStorage.

2. How We Use Cookies

We use cookies for essential website functionality (authentication, security, language and theme preferences) and, with your explicit consent, for analytics — both first-party (to understand which pages are useful and improve the product) and Google Analytics 4 (to measure the performance of our marketing campaigns and improve our advertising).

3. Types of Cookies We Use

3.1 Essential Cookies

These cookies are strictly necessary for the website to function. They cannot be disabled and do not require consent under ePrivacy.

• dg_atAuthentication session (JWT). HttpOnly, Secure, SameSite=Lax. Duration: session or 30 days with 'remember me'.
• dg_csrfCSRF protection token. Duration: session.
• dg_consentRecords your cookie choices so we don't ask again. Duration: 1 year.
• dg_geoTwo-letter country code derived from your IP at the network edge (Cloudflare). We use it only to decide whether to show the cookie consent banner (GDPR/EEA/UK/CH only). It is not used for tracking, profiling, or shared with third parties. Duration: 24 hours.
• localStorage: dg_lang, themelanguage and theme preferences.

3.2 First-Party Analytics Cookies (Opt-In)

These cookies are set ONLY if you accept analytics in the cookie banner. They are first-party and help us understand traffic patterns, session duration, and which pages need improvement.

• dg_tracking_idRolling visitor identifier. HttpOnly. Duration: 1 year. Purpose: associate pageviews of the same visitor across sessions.
• dg_sidSession identifier. HttpOnly, no maxAge (deleted when you close the browser). Purpose: group pageviews of the same visit and measure session duration.

3.3 Google Analytics 4 & Google Ads Cookies (Opt-In)

These cookies are set by Google LLC (data controller in the EEA: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) ONLY if you accept analytics in the cookie banner. They allow us to measure the performance of our marketing campaigns on Google Ads and improve our advertising. We have configured Google Consent Mode v2: before your consent, Google does NOT set these cookies and only receives anonymous cookieless signals for aggregated conversion modeling.

Data collected via these cookies may be transferred to Google servers in the United States under the EU-U.S. Data Privacy Framework (DPF), to which Google has self-certified.

• _gaDistinguishes unique visitors. Provider: Google. Duration: 2 years. Purpose: analytics.
• _ga_G-94400Z07WMPersists session state for the specific GA4 property. Provider: Google. Duration: 2 years. Purpose: analytics.
• _gcl_auGoogle Ads conversion attribution across websites. Provider: Google. Duration: 90 days. Purpose: measure ad performance.

3.4 Anonymous Audience Measurement (No Consent Required)

Even if you reject analytics, we record each page view without any identifier, to know how many people visit each page and which pages are read. Per CNIL/Garante guidance on audience measurement, this is exempt from consent because:

• No cookie and no persistent identifier (no tracking_id, no session_id).
• No full user-agent (only browser/OS family, e.g. 'Chrome/macOS').
• No full referrer URL (only hostname, e.g. 'google.com').
• IP truncated before storage: the last part of IPv4 addresses is removed (e.g. 203.0.113.0), IPv6 addresses are cut to /64.
• Country only (two-letter code, e.g. 'IT'), derived from the IP at the network edge (Cloudflare): never region or city.
• Bots are excluded.
• First-party only, no data shared with third parties, no profiling.
• Full IP addresses are processed only for security (limiting abusive traffic and blocking attacks), a separate purpose described in our Privacy Policy, and never for this measurement.

3.5 Better Stack Session Replay

We use Better Stack to record how some visits to the site unfold (session replay): the pages opened, clicks, scrolling and what the page shows at that moment. It helps us find what is broken or unclear on the site. What you type into form fields is never recorded.

It is loaded only in three cases: you are signed in, you are on the sign-in or sign-up page, or you have been on the site for more than 3 minutes. For signed-in users we send Better Stack only the internal number of your Doublegram account, never your name or email.

In the European Union, the EEA, the United Kingdom and Switzerland, and whenever we cannot tell your country, it is loaded ONLY if you accept analytics in the cookie banner. In other countries, where consent is not required, it is loaded without asking: you can turn it off at any time by rejecting analytics in the cookie preferences in the footer.

Provider: Better Stack, Inc. (United States). Data is sent to servers in the European Union (Frankfurt). Any transfer to the United States is covered by the EU-U.S. Data Privacy Framework and the Standard Contractual Clauses.

• _bsAnonymous visitor and session identifier, also kept in localStorage under the same name. Provider: Better Stack. Duration: 2 years. Purpose: link the pages of the same visit in one recording.

4. Third-Party Services

We do NOT load any social media widget or external font on page load. Third-party services are loaded in two ways:

(a) Loaded on every page, but no cookies set without your consent (Google Consent Mode v2):

• Google Analytics 4 / Google Ads (googletagmanager.com)Loaded on every page for analytics and advertising measurement. Before your consent, it sends only anonymous cookieless signals and does NOT set any cookie or identifier. After you accept analytics in the banner, it sets the cookies listed in section 3.3.

4.1 Third-Party Services Loaded on Demand

The following third-party services are loaded only after an explicit user action:

• Telegram login widget (telegram.org)Loaded only when you click 'Continue with Telegram'. Telegram may set its own cookies in that popup.
• Stripe (js.stripe.com)Loaded only when you reach the checkout page to enter payment details. Stripe may use cookies for fraud prevention and secure payment processing.

5. Managing Your Cookie Preferences

You have full control over which non-essential cookies we can use. You can manage your preferences at any time:

• Cookie BannerWhen you first visit our website, you can accept or reject different categories of cookies.
• Cookie PreferencesYou can change your choices at any time by clicking the cookie settings link in the footer or visiting your account settings.
• Browser SettingsYou can configure your browser to block or delete cookies. Note that blocking essential cookies may prevent the website from functioning properly.

6. Cookie Consent and GDPR Compliance

In compliance with GDPR and ePrivacy regulations, we:

• Request your explicit consent before setting non-essential cookies
• Do not track your activity without consent for analytics cookies
• Allow you to withdraw consent at any time
• Provide clear information about what cookies we use and why
• Store your consent preferences for future visits
• Respect your choices across all our services

7. Data Storage

In addition to cookies, we use browser storage technologies:

• localStorageStores your language preference (dg_lang), theme settings, and interface preferences. This data never leaves your device.
• sessionStorageNot currently used, but may be used for temporary session data in the future.

8. Cookie Duration

Different cookies have different lifespans:

• Session cookiesDeleted when you close your browser
• Persistent cookiesRemain on your device for a specified period (e.g., dg_tracking_id: 1 year, dg_consent: 1 year)
• You can delete all cookies manually through your browser settings at any time

9. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the 'Last Updated' date at the top of this policy and may request your consent again if required by law.

10. Contact Us

If you have questions about our use of cookies or this Cookie Policy, please contact us at:

• Email: [email protected]
• Data Protection Officer: [email protected]