Cookie policy

Cookies are small text files that a website stores in your browser. Similar technologies, such as the browser's local storage, work in a comparable way. European and Italian rules require your consent for those that are not strictly necessary to provide the service you ask for.

A cookie is “first-party” when it is set by the website you are visiting, “third-party” when it is set by another domain.

On your first visit a banner asks whether you accept three optional tools: Google Analytics statistics, experience analysis and marketing with the Meta Pixel. “Accept all” turns all three on; “Reject all”, shown with the same prominence, turns none on. With “Customize” you choose item by item and confirm with “Save choices”. Nothing is pre-selected.

Until you choose, and if you refuse, the website loads no Google or Meta software, sends no data to Google or Meta and does not load the Umami recorder. You can use the website exactly as someone who accepts.

We save your choice in the technical cookie cd_consent for 6 months: during that time the banner is not shown again, unless the tools described on this page change materially. After 6 months the banner asks you to choose again. With the arrival of the “Marketing” category the banner is shown once more to everyone, including those who had already chosen.

You can change your mind at any time from “Cookie preferences”, at the bottom of every page. If you withdraw your consent to Google Analytics, the website stops sending data to Google at once and deletes the Google Analytics cookies from your browser. If you withdraw Marketing, the Meta Pixel stops sending data to Meta and the website deletes the _fbp and _fbc cookies. If you withdraw experience analysis while a recording is running, the recording stops and the page reloads. Withdrawal does not affect what was done before.

They make the website work and remember the choices you make. They require no consent (Article 122(1) of the Italian Personal Data Protection Code).

• cd_consent: first-party cookie, set by codedesign.it. It remembers the choice you made in the banner: the version of this policy it refers to, whether you accepted statistics, whether you accepted experience analysis, whether you accepted marketing, and the date of the choice. Duration: 6 months.
• cd-theme: browser local storage. It remembers the light or dark theme, only if you choose one with the switch; it stays on your device and is never sent to us. Duration: until you delete it.
• cd-intro: browser session storage. It keeps the opening animation from replaying on every page of the same visit; it is never sent to us. Duration: until you close the tab.

We measure visits with Umami, a statistics tool that we install and manage ourselves, on our own server in Germany. Umami sets no cookies and stores nothing in your browser. It records the pages visited, the loading and response times of the pages (Core Web Vitals), to find slow ones, and successful submissions of the contact form, without the data they contain. It uses your IP address, without saving it, only to derive your approximate location and to calculate a visit code that changes every month; it keeps aggregate data and visit codes that cannot be linked to you, for 24 months. It does not follow you across other websites, does not create profiles and does not share data with third parties. The details are in the privacy policy.

This is why we do not ask for your consent: the Italian Data Protection Authority's guidelines of 10 June 2021 treat as technical tools the analytics tools used only by the website owner that produce aggregate statistics, do not combine the data with other information and do not share it with third parties. If your browser sends the “Do Not Track” signal, Umami collects no statistics.

If you accept experience analysis, the website loads the Umami recorder, on the same server of ours in Germany as the statistics: no third party receives the data. The recorder produces:

• heatmaps: click positions, scroll depth, window and page size, page address; we look at them in aggregate. We keep them for 12 months.
• session recordings: clicks, scrolling, mouse movements, moves between pages and the content of the page as it appears on the screen; each recording stops automatically after 5 minutes at most. The content of the fields you fill in is never recorded. We keep them for 30 days.

The recorder sets no cookies and stores nothing in your browser: your choice is kept only in the technical cookie cd_consent. Only we use this data, to understand what to improve on the website: no profiling, no combining with other information, no sharing with third parties. If your browser sends the “Do Not Track” signal, nothing is recorded. The details are in the privacy policy.

The legal basis is your consent (Article 6(1)(a) GDPR and Article 122 of the Italian Personal Data Protection Code), which is optional and which you can withdraw at any time from “Cookie preferences”.

If you accept, the website loads Google Analytics 4 to measure in more detail how it is used: how many people come back, where they come from, which pages they visit. Google Analytics processes the identifiers stored in cookies, the pages visited and events, device and browser data and approximate location, and sets these cookies on our domain:

• _ga: first-party cookie, set by Google Analytics on codedesign.it. It tells visitors apart with a random identifier. Duration: 2 years.
• _ga_DTW4VS74GD: first-party cookie, set by Google Analytics on codedesign.it. It keeps the state of the visit session. Duration: 2 years.

Some browsers delete these cookies earlier if you do not come back: Safari, for example, after 7 days.

We have turned off Google Signals and ad personalisation: the data is not used for advertising. For this purpose Google Ireland Limited processes the data on our behalf, as a data processor. For visitors in the European Union, Google states that it uses the IP address only to derive an approximate location and discards it without logging it. User-level and event-level data is deleted after 14 months. Google may also process data in the United States, at Google LLC, under the EU-US Data Privacy Framework, under which Google LLC is certified.

The legal basis is your consent (Article 6(1)(a) GDPR and Article 122 of the Italian Personal Data Protection Code), which you can withdraw at any time from “Cookie preferences”. How Google uses data from websites that use its services is explained at policies.google.com/technologies/partner-sites (external link).

If you accept the “Marketing” category, the website loads the Meta Pixel of Meta Platforms Ireland Limited (Ireland) to measure our campaigns on Facebook and Instagram and to show ads to people who have visited the website. The pixel records the pages you visit and the successful submission of the contact form, without the content of the message and without your contact details; with these events Meta receives technical information about your browser and device and your IP address. It sets these cookies on our domain:

• _fbp: first-party cookie, set by the Meta Pixel on codedesign.it. It tells visitors apart with a random identifier. Duration: 90 days.
• _fbc: first-party cookie, set by the Meta Pixel on codedesign.it only if you arrive from a Facebook or Instagram ad with the fbclid parameter in the address. It remembers the click on the ad. Duration: 90 days.

If you are logged in to Facebook or Instagram, Meta may also use its own cookies on its own domains. We do not send Meta your email address, your phone number or any other data you enter on the website, and the pixel's automatic events are turned off.

For collecting the data through the pixel and transmitting it, we are joint controllers with Meta Platforms Ireland Limited (Article 26 GDPR), under Meta's “Controller Addendum”; for any later processing Meta is an independent controller, under its own policy (facebook.com/privacy/policy (external link)), and you can exercise your rights with Meta as well. Meta Platforms Ireland may transfer the data to Meta Platforms, Inc. (United States), which is certified under the EU-US Data Privacy Framework. Meta keeps the data for the periods set out in its own policy. More details are in the privacy policy.

The legal basis is your consent (Article 6(1)(a) GDPR and Article 122 of the Italian Personal Data Protection Code), which is optional and which you can withdraw at any time from “Cookie preferences”: the pixel stops sending data and the website deletes the _fbp and _fbc cookies.

• Consent to Google Analytics: from “Cookie preferences”, at the bottom of every page. If you withdraw it, the website also deletes the Google Analytics cookies.
• Consent to experience analysis: from “Cookie preferences”, at the bottom of every page. If you withdraw it while a recording is running, the recording stops and the page reloads.
• Consent to Marketing (Meta Pixel): from “Cookie preferences”, at the bottom of every page. If you withdraw it, the pixel stops sending data to Meta and the website deletes the _fbp and _fbc cookies.
• Everything the website has stored: from your browser settings, usually under privacy or site settings, in the section on cookies and site data. On your next visit the banner will ask you to choose again, and the website will return to its default dark theme.

For any question about this policy, write to info@codedesign.it. How we handle personal data, and your rights, are explained in the privacy policy.