Vai al contenuto

Cookie policy

Versione 1.0-draft · Ultimo aggiornamento: 12/10/2026

Questo testo è una bozza professionale preparata per il lancio di Preventiv. Non costituisce consulenza legale e non è ancora vincolante: deve essere verificato, completato e approvato da un avvocato prima della pubblicazione. Le note [[REVIEW]] evidenziate indicano le decisioni ancora aperte; il testo tra [parentesi quadre] è compilato dal gestore.

La presente policy descrive i cookie e le tecnologie simili (archiviazione locale, archiviazione di sessione, cache del service worker) usati dal sito e dall'applicazione Preventiv. Preventiv usa solo strumenti tecnici strettamente necessari al Servizio, pertanto non è richiesto un banner di consenso. Se ciò cambiasse, chiederemo il tuo consenso prima di usare qualsiasi cookie non essenziale.

1. What cookies are

Cookies are small text files that a website stores in your browser. Local storage, session storage and IndexedDB are similar technologies that keep data on your device. Under the ePrivacy Directive (art. 5(3)), the Italian Privacy Code (art. 122) and the Garante's cookie guidelines of 10 June 2021, technologies that are strictly necessary to provide a service requested by the user do not require consent.

[[REVIEW: R-21 Albanian rules on cookies and terminal-equipment access (electronic communications law and Law 124/2024) and whether a notice is enough.]]

2. Cookies and storage we use

  • preventiv_session (cookie, first party, up to 30 days): keeps you signed in; HttpOnly and Secure. Strictly necessary.
  • preventiv_mfa (cookie, first party, a few minutes): completes the two-factor sign-in step. Strictly necessary.
  • sb-… cookies (first party, authentication service, session): sign-in session of the authentication service. Strictly necessary.
  • NEXT_LOCALE (cookie, first party, 12 months): remembers the language you chose. Functional, set at your request.
  • preventiv_rail (cookie, first party, 12 months): remembers whether the side menu is open. Functional, set at your request.
  • preventiv-plan-intent (cookie, first party, 7 days): remembers the plan chosen on the pricing page until you confirm it. Functional.
  • preventiv-theme (local storage, until cleared): remembers light or dark display. Functional.
  • Other local and session storage (until cleared or end of the session): recent searches, dismissed notices, unsaved edits kept for offline use and a random widget session number used to count steps without cookies.
  • Service worker cache: copies of application pages and files to work offline; cleared at sign-out.

3. Third-party services

  • Stripe: when you pay, the checkout page is provided by Stripe, which uses its own cookies for payment security and fraud prevention under its own policy.
  • Cloudflare Turnstile: on widget forms it checks that the sender is not an automated program; it does not use cookies for tracking or advertising.
  • OpenStreetMap: project maps load tiles from tile.openstreetmap.org; your browser sends its IP address to the OpenStreetMap Foundation, which does not set advertising cookies.

[[REVIEW: R-22 Confirm that Turnstile and OpenStreetMap tile requests qualify as strictly necessary or otherwise exempt, and whether a self-hosted tile server is preferable.]]

4. No analytics or advertising

Preventiv does not use analytics, profiling, social-media or advertising cookies, and does not share browsing data with advertisers. Widget statistics are counted on our servers without cookies.

5. Widget on business websites

When a business embeds the Preventiv widget on its website, the widget itself does not set cookies. The business remains responsible for the cookies of its own website and for its own cookie notice.

6. How to manage cookies

You can delete or block cookies and site data in your browser settings. Blocking strictly necessary cookies prevents signing in and the correct working of the Service.

7. Contacts and updates

For questions write to support@preventiv.app. This policy is updated when the technologies we use change; the date of the last update is shown at the top.