01
What cookies are
Cookies are small files a website saves on your device when you visit it. They make pages work, remember your choices, and, for analytics and marketing cookies, help us understand how the site is used and show you relevant ads.
Alongside cookies we use similar technologies, such as pixels and identifiers set by the tools below: when we talk about cookies, we mean these too.
02
Necessary technical cookies
These are essential for the site to work: they remember your choice on the cookie banner, manage the session and security, and remember preferences like language or light/dark theme. They don’t require consent because the site can’t work without them. They stay active for the session or up to a few months.
03
Analytics, marketing and support tools
These eight tools save cookies on your device only after you give consent through the banner. From that moment they recognize you from one visit to the next and power the measurement, advertising and support features described below.
| Tool | Provider | Purpose | Duration |
|---|---|---|---|
| Google Analytics 4 | Google Ireland Ltd. | Usage statistics: pages viewed, traffic sources, aggregated behavior. | Up to 2 years |
| Google Ads | Google Ireland Ltd. | Measures Google Ads campaign conversions and enables remarketing on Google’s search and display network. | Up to 90 days |
| Meta Pixel | Meta Platforms Ireland Ltd. | Conversion measurement and targeted advertising across Meta’s platforms and advertising network, such as Facebook and Instagram. | Up to 3 months |
| Reddit Pixel | Reddit Netherlands B.V. | Measures conversions and enables remarketing on Reddit Ads campaigns. | Up to 90 days |
| Microsoft Clarity | Microsoft Ireland Operations Limited | User experience analytics: heatmaps and session recordings, used to understand what to improve. | Up to 1 year |
| Microsoft Advertising (UET) | Microsoft Ireland Operations Limited | Measures Microsoft/Bing Ads campaign conversions and enables remarketing. | Up to 1 year |
| LinkedIn Insight Tag | LinkedIn Ireland Unlimited Company | Conversion measurement and remarketing for LinkedIn campaigns. | Up to 1 year |
| tawk.to (live chat) | tawk.to Inc. | Recognizes who opens the live chat from one page to the next during the conversation. Not used for advertising. | Up to 6 months |
These are the maximum durations declared by the providers and may vary. For details on how each one processes data, you can check the privacy notices of Google, Meta, Microsoft, LinkedIn, Reddit and tawk.to.
04
Who is responsible for this data
For the Meta Pixel we are joint controllers with Meta, limited to the collection of data on our site and its transmission to Meta: this was established by the Court of Justice of the European Union in the Fashion ID case (case C-40/17). Respective responsibilities are set out in Meta’s controller addendum: we are responsible for asking for your consent and informing you, Meta is responsible for what it does with the data once received, including requests you make to us about that part of the processing. You can still write to us: we forward the request to whoever is responsible.
The same principle applies to the Reddit Pixel: we are joint controllers with Reddit for the collection of data on our site and its transmission, with the same division of responsibilities set out in the Reddit Advertising Data Processing Agreement: we are responsible for consent and disclosure, Reddit for what it does with the data once received.
For the other six tools, the providers act as independent controllers for the processing they carry out with the data collected, according to their own privacy notices, and we remain the controller for the choice to install them and to ask for your consent.
05
How to manage consent
Ours is an opt-in model, not opt-out: cookies that aren’t strictly necessary stay disabled until you give explicit consent, instead of being already active with only the option to disable them later. This is the setup required by the GDPR for analytics, marketing and profiling cookies.
On your first visit, the banner asks you to choose: you can accept all, reject all, or select only the categories you want. Rejecting takes one click, just like accepting, and continuing to browse without choosing doesn’t count as consent.
Until you choose, none of these tools save cookies or identifiers on your device. Some scripts load anyway in a reduced mode: they count the visit but can’t recognize you from one page to the next, so on every page you appear as a new visitor and visits don’t come together into a single path. The provider still receives the IP address and technical browser information, because without those the request wouldn’t reach its destination.
If your browser sends an automatic rejection signal, such as Global Privacy Control, we treat it as a rejection already expressed and we don’t show you the banner to ask again.
You can change your mind at any time: reopen the cookie preferences from the link in the site footer and revoke or change your choices. The revocation applies from that moment on and doesn’t affect data already collected before. If you reject, we won’t show the banner again before six months, unless the tools or purposes change in the meantime: in that case we ask you again, because your previous choice doesn’t cover what has changed.
06
Proof of your consent
When you choose from the banner, we record the choice: the categories you accepted or rejected, the date and time, and the version of this page in force at that moment. Article 7 of the GDPR requires us to be able to demonstrate consent, and this record serves that purpose — as well as showing you your current choices when you reopen your preferences.
The record doesn’t contain your name: it’s linked to a random identifier saved together with the preference on your device. We keep it for as long as the preference remains valid and for the period during which we might be required to demonstrate it.
07
If you’re outside the European Union
We sell worldwide and apply the same standard everywhere: no analytics, marketing or support cookie before your consent, whoever you are and wherever you connect from. Where the law of your country gives you something more, that applies instead.
United Kingdom
PECR and the UK GDPR require the same prior consent we apply here. For a complaint you can contact the Information Commissioner’s Office.
California and other US states
Local law doesn’t require prior consent, but gives you the right to ask that your data not be sold or shared for advertising purposes. The Meta Pixel, LinkedIn Insight Tag, Google Ads, Reddit Pixel and Microsoft Advertising fall within that definition: rejecting the marketing category from the banner exercises that right, and we also honor the Global Privacy Control signal sent by the browser. We don’t sell data for money, under any circumstances.
Switzerland, Brazil, Canada and Australia
The Swiss nFADP, the Brazilian LGPD, the Canadian PIPEDA and the Australian Privacy Act give you equivalent rights over access, correction and deletion of data collected by these tools. To exercise them, write to [email protected].
08
Managing cookies from your browser
You can also block or delete cookies from your browser settings: Chrome, Firefox, Safari, Edge and others have a dedicated privacy section. Keep in mind that disabling technical cookies may stop some parts of the site from working as expected, and that deleting them also erases the memory of the choice you made on the banner: on your next visit we’ll ask you again.
09
Changes to this cookie policy
We may update this page when the tools we use or the regulations change. The date at the top shows the last revision, and it only changes when the text changes.
If we add a tool that requires your consent, we’ll ask for it again: consent given before doesn’t cover new tools. For questions, write to us at [email protected].