Menu
Home Services Projects Case Study Technologies Contact

Language

Italiano English Espanol

Cookie Policy

v2 · 2026-05-02

Last updated: 06/05/2026

This document supplements the Privacy Policy and provides specific information on the use of cookies and other tracking tools by the WaveStaq site ("Site"), operated by Andrea Berni (VAT no. 04225350364, registered office Strada Cavo Argine 34/6, 41121 Modena (MO)).

What are cookies and tracking tools

Cookies are small text files that visited websites store on your device (computer, tablet, smartphone). They are used to make the Site work, remember your preferences and collect usage statistics.

In addition to traditional cookies, there are other tracking tools that perform similar functions and which — according to the Italian Data Protection Authority guidelines of 10/06/2021 — are subject to the same regulatory obligations as cookies:

  • localStorage and sessionStorage — persistent data containers managed by the browser
  • Pixels — invisible images used to track visits
  • Browser fingerprinting — identification through technical device characteristics
  • First-party / third-party cookies

Throughout this document, the term "cookie" refers for simplicity to all of these technologies. For example, on this Site the accessibility plugin stores your preferences (text size, contrast) in the browser's localStorage under the key a11y_preferences — this is also included in the cookie catalogue and managed via the consent banner.

I cookie possono essere:

  • First-party — installed directly by WaveStaq
  • Third-party — installed by external providers (e.g. Google) through the Site
  • Session — deleted when the browser is closed
  • Persistent — remain on the device for a predefined duration

This Site uses cookies grouped into 4 categories, in line with the European Data Protection Board (EDPB) guidelines:

🔒 Necessary

Essential for the Site to function (session, security, consent). They do not require consent under Art. 122 of the Italian Privacy Code: without them, the Site could not work.

⚙️ Preferences

Store user choices (e.g. selected language) to improve the experience. They require prior consent from the user.

📊 Statistics

Collect anonymous and aggregated information about Site usage (visit count, pages viewed). They require prior consent from the user.

🎯 Marketing

Used to profile users for advertising and remarketing purposes. They require explicit prior consent. This Site currently does not use marketing cookies.

List of cookies used

The up-to-date list of active cookies on the Site is shown in the table below (grouped by category). For each cookie the following is indicated: name, domain, duration, purpose and provider.

Services without their own cookies

Some tools we use do not install cookies on your device, but it is appropriate to mention them for transparency:

  • Google Tag Manager — a technical "container" that manages the loading of other scripts (in particular Google Analytics 4). It does not itself set cookies and does not collect tracking data. The scripts it loads each follow their own legal basis and category.
  • Google Search Console — Google Site indexing monitoring tool. Verification is done via an HTML meta tag or DNS record, without any cookie on the user side.

How to manage your preferences

You have two tools always available on every page:

Cookie banner on first visit — appears at the bottom when you visit the Site for the first time (or 60 days after your last choice). Three options:

  • Accept all → consent to all activatable categories (preferences, statistics, marketing)
  • Reject all → only necessary cookies remain active, all the others disabled
  • Customise → granular consent, choose which categories to allow individually

Floating shield icon — always present at the bottom-left of every page. Click it at any time to:

  • Reopen the banner and modify your previous preferences
  • Withdraw consent (equivalent to "Reject all")

⚡ Immediate effect: as soon as you confirm your choice, consent is recorded on the Site and unauthorised cookies are blocked or deleted on the next page load. No further action needed.

Consent is valid for 60 days, after which the banner is shown again for periodic renewal (Italian Data Protection Authority guidelines of 10/06/2021).

🌐 From your browser settings (alternative)

If you prefer "cross-site" protection that applies to all websites you visit, you can manage cookies directly from your browser:

⚠️ Blocking all cookies via the browser may cause some basic Site functions (navigation session, security, the consent record itself) to malfunction. For this specific Site, managing via the integrated banner is almost always the better choice.

Consequences of refusing cookies

Refusing cookies does not prevent Site usage, but:

  • Refusing statistics cookies does not affect your experience, but the Controller loses the ability to analyse Site usage in aggregate form
  • Refusing preferences cookies may result in the loss of some conveniences (e.g. language selection that resets on every visit)

Necessary cookies remain active even if you refuse everything else, because the Site cannot function without them.

When you express a choice on the cookie banner, the Site records in an internal audit log:

  • A random identifier of your consent (UUID token, not linkable to your identity)
  • The categories allowed and refused
  • Your anonymised IP address (last octet zeroed)
  • A cryptographic hash of your User-Agent (not reversible to identity)
  • The date and time of the choice

This log serves exclusively to demonstrate consent under Art. 7.1 GDPR and is not used to profile you. It is kept for 5 years from last modification.

We update this Cookie Policy each time we activate or deactivate a tracking service. The date of last modification is at the top of the document.

In case of significant changes, we will ask for your consent again via the banner.

Regulatory references

  • Regulation (EU) 2016/679 (GDPR)
  • Italian Legislative Decree 196/2003 (Italian Privacy Code), as amended by Legislative Decree 101/2018
  • Directive 2002/58/EC (ePrivacy)
  • Italian Data Protection Authority guidelines of 10 June 2021 on the use of cookies
  • EDPB Guidelines 03/2022 on dark patterns in consent interfaces
  • EU Cookie Pledge (March 2024)

For any questions about cookies or to exercise your rights, please write to info@wavestaq.com.

Nome Dominio Provider Durata Scopo
_GRECAPTCHA .google.com Google LLC 6 mesi Distingue gli utenti reali dai bot per proteggere il form di contatto da spam (Google reCAPTCHA v3).
andreaberni_legal_consent _self WaveStaq (plugin Legal) 60 giorni Memorizza le tue preferenze di consenso ai cookie (categorie accettate e rifiutate). Senza questo cookie il banner riapparirebbe a ogni visita.
october_session _self OctoberCMS / Laravel 2 ore Identificatore della sessione utente. Necessario per la gestione sicura della navigazione (autenticazione backend, mantenimento delle preferenze di sito).
XSRF-TOKEN _self Laravel 2 ore Token anti-CSRF per proteggere i form da attacchi cross-site request forgery.
Nome Dominio Provider Durata Scopo
a11y_preferences _self WaveStaq (plugin Accessibility) Persistente (localStorage, finché l'utente non lo cancella) Memorizza le preferenze di accessibilità impostate dall'utente (dimensione testo, contrasto, modalità lettura). Salvato nel localStorage del browser, non è un cookie HTTP tradizionale ma è equiparato dal punto di vista normativo (linee guida Garante Privacy 10/06/2021).
locale _self WaveStaq (RainLab.Translate) 1 anno Memorizza la lingua selezionata dall'utente (italiano, inglese o spagnolo) per evitare di mostrare ogni volta il selettore.
Nome Dominio Provider Durata Scopo
_ga .google-analytics.com Google LLC 2 anni Cookie principale di Google Analytics 4. Distingue gli utenti unici assegnando un identificatore casuale.
_ga_* .google-analytics.com Google LLC 2 anni Cookie di Google Analytics 4 specifico per la proprietà (es. _ga_XXXXXXXXXX). Mantiene lo stato della sessione.

Contact me

Fill in the form and I'll get back to you within 24 hours.