Legal · Document

Cookie Policy

Last updated: April 2026 · Version 2.0

Document drafted pursuant to Art. 13 GDPR (EU) 2016/679, Art. 122 Italian Privacy Code, and the Italian Privacy Authority Cookie Guidelines (2022).

1. What Are Cookies

Cookies are small text files stored in your web browser during browsing sessions. They can be HTTP cookies (transmitted to servers on each request) or client-side storage via localStorage or sessionStorage (not transmitted to servers).

Cookies are classified by:

  • Duration: Session cookies (deleted on browser exit) vs. Persistent cookies (with fixed expiration)
  • Origin: First-party (set directly by this website) vs. Third-party (set by integrated external services)
  • Purpose: Strictly necessary/technical, analytical, or marketing/behavioral profiling

2. Technical Cookies from sviluppiamo.dev

These cookies are strictly required for platform operation. They do not require prior consent under Art. 122(1) Italian Privacy Code and GDPR.

Name
adorable_identity_id
Essential

Identifies the user session (authenticated or anonymous) to retain project and prompt workspaces. Required for service functionality.

sb-[ref]-auth-token
Essential

Supabase JWT session token. Retains authenticated state via Google OAuth or credentials.

sviluppiamo_cookie_consent
Essential

Stores user cookie consent preferences (policy version, category choices, timestamp) in local storage to prevent repeated banner prompts.

3. Third-Party Cookies and Sub-processors

sviluppiamo.dev relies on accredited GDPR Art. 28 sub-processors to deliver core infrastructure and services:

Purpose

Payment processing, fraud prevention, and SCA compliance. Stripe sets operational security cookies during checkout.

Cookies Set

__stripe_mid, __stripe_sid, _stripe_orig_props

Duration

Session up to 1 year

Data Transfer

USA (SCCs + EU-U.S. Data Privacy Framework)

Purpose

Database, identity authentication, and asset storage. Manages OAuth session persistence.

Cookies Set

sb-[ref]-auth-token, sb-[ref]-auth-token.0, sb-[ref]-auth-token.1

Duration

1 hour (auto-renewed)

Data Transfer

Hosted exclusively on EU servers (eu-central-1, Frankfurt)

Purpose

Edge hosting and CDN delivery. May set transient technical cookies to optimize routing and DDoS defense.

Cookies Set

_vercel_*

Duration

Session

Data Transfer

USA (SCCs) · European edge deployment preferred

4. Analytics Cookies (Consent Required)

Currently sviluppiamo.dev does not use third-party web analytics platforms (e.g. Google Analytics, Plausible, Mixpanel). If added in the future, this policy will be updated with 14 days advance notice and explicit consent banners will be re-prompted.

We internally track aggregated, anonymous system metrics (build counts, credit throughput) without tracking cookies or individual user identification.

5. Marketing & Behavioral Tracking

sviluppiamo.dev does not use profiling pixels or retargeting trackers (Facebook Pixel, Google Ads, LinkedIn Insight Tag). We do not share telemetry with ad networks.

6. How to Manage Cookies

You have the right to accept, reject, or customize your cookie preferences at any time:

Through the sviluppiamo.dev Preference Center

You can update your choices at any time from your Account Settings page or by clicking 'Manage cookie preferences'.

Go to Settings →

Through Browser Settings

You can block or purge cookies directly through your browser settings. Please note that disabling essential cookies will disable access to workspace features.

7. Consent Audit Trail & Retention

Each cookie preference choice is logged in our database with: timestamp, accepted/rejected categories, policy version, browser user agent, and masked IP address (e.g. 192.168.1.0). This audit record is strictly maintained for GDPR Art. 7 compliance.

Consent logs are retained for 5 years from the timestamp of the choice, after which they are automatically purged. You can request your consent log by writing to privacy@sviluppiamo.dev.

8. Policy Revisions

Material revisions to this policy will trigger a version increment (currently v2.0) and re-prompt the consent banner. Continuing use after updates does not imply automatic consent : affirmative opt-in is always required.

9. Inquiries & Supervisory Authority

For questions concerning this Cookie Policy or to exercise your GDPR rights:

Email: privacy@sviluppiamo.dev

Data Controller: Sviluppiamo S.r.l. — Italy

Supervisory Authority: Italian Data Protection Authority / Garante Privacy (www.garanteprivacy.it)

© 2026 Sviluppiamo S.r.l. · Tax/VAT ID in registration · Cookie Policy v2.0