GDPR · ePrivacy

Cookie Policy

Pursuant to Art. 122 of Legislative Decree 196/2003 (Italian Privacy Code) and Regulation (EU) 2016/679 (GDPR)

This Cookie Policy explains which cookies and similar technologies Carteia uses, for what purposes, on what legal basis and how you can manage or withdraw your consent at any time.

Last updated: 14 June 2026Version: (under legal review)

Preamble

Non-necessary cookies remain disabled until you make a choice through the banner. Your choice is revocable at any time through the «Cookie» button and is recorded for evidentiary purposes. This policy supplements the Privacy Notice, to which you should refer for the full picture of the processing activities.

Data Controller

The Controller of the data collected through cookies is:

Carteia

Un progetto di Mind3D P.IVA 03732170794

VAT IT03732170794

carteia.app

privacy@carteia.app

For the full picture of processing activities and your rights, see the Privacy Notice.

Policy in detail

Section 1What cookies are

Cookies are small text files that the sites you visit save on your device to store information, such as preferences or login status. Similar technologies (such as localStorage and pixels) perform comparable functions and are treated like cookies.

By purpose, cookies are divided into technical/necessary ones (which do not require consent) and analytics, marketing and preference cookies, installed only with your consent.

Section 2Categories of cookies used

The site uses the following categories of cookies:

Category	Purpose	Legal basis	Consent
Necessary	Site operation, security, session, storing cookie choices	Art. 122(1) Privacy Code — not required	Always on
Analytics	Aggregated visit statistics to improve the service	6.1.a — consent	Optional
Marketing	Personalized content and ads, campaign measurement	6.1.a — consent	Optional
Preferences	Storing choices such as language or theme	6.1.a — consent	Optional

Section 3Cookies and tools used

Below are the tools actually used, with their duration. Analytics and marketing tools are activated only after consent and deactivated in real time upon withdrawal:

Tool	Category	Purpose	Duration
carta_cookie_consent	Necessary	Stores cookie consent choices	12 months
carta_cookie_consent_v1 (localStorage)	Necessary	Client-side consent status	Until withdrawal/deletion
carta_visitor_id (localStorage)	Necessary	Pseudonymous identifier for recording consent	Until deletion
Database postgres (session)	Necessary	User authentication and session	Session duration
Stripe (__stripe_mid, __stripe_sid)	Necessary	Payment security and fraud prevention	mid: 1 year · sid: 30 minutes
Google – Google Analytics 4 (_ga, _ga_*)	Analytics	Aggregated visit statistics	up to 2 years
Meta – Meta/Facebook Pixel (_fbp)	Marketing	Ad measurement and personalization	3 months

Google Analytics 4 is provided by Google and Meta Pixel by Meta, which act as independent controllers or joint controllers for the processing carried out through their own tools. For details, see their respective notices.

Section 4Legal basis and consent

Necessary cookies are installed on the basis of Art. 122(1) of the Privacy Code and do not require consent. Analytics, marketing and preference cookies are installed only with your consent (Art. 6.1.a GDPR), collected via the banner. Each choice (accept / reject / customize / withdraw) is recorded with date, time, policy version, IP address and user agent, for evidentiary purposes.

Section 5How to manage or withdraw consent

You can change or withdraw your choices at any time, as easily as you made them:

Reopen the preferences panel from the «Cookie» button available on the site and select/deselect the categories;
Use «Reject all» to immediately disable non-necessary cookies;
Alternatively, manage or delete cookies from your browser settings (the procedure varies by browser);
Withdrawal takes effect immediately: analytics and marketing tools are deactivated without reloading the page.

Section 6Consent duration

Consent is retained for 12 months; on expiry, or when this policy is materially updated (change of version), the banner reappears to request a new choice. The duration of individual cookies is shown in the table in Section 3.

Section 7Non-EU transfers

Third-party tools (e.g. Google, Meta) may involve the transfer of data outside the European Economic Area. Such transfers are covered by Standard Contractual Clauses (SCC) under Implementing Decision (EU) 2021/914 and/or by adequacy decisions of the European Commission, with supplementary measures where necessary.

Section 8Rights of the data subject

Within the limits of Art. 15–22 GDPR, you have the right to: access, rectification, erasure, restriction, objection, portability and, where processing is based on consent, withdrawal of consent at any time. To exercise them, use the contacts at the bottom of the page.

You also have the right to lodge a complaint with the supervisory authority — in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Section 9Changes to this Cookie Policy

Carteia may update this Cookie Policy. Material changes trigger a new consent request via the banner. The date at the top indicates the latest revision.

Section 10Contacts

For any request regarding cookies and data processed by Carteia: privacy@carteia.app.

info@carteia.app

Cookie Policy

Pursuant to Art. 122 of Legislative Decree 196/2003 (Italian Privacy Code) and Regulation (EU) 2016/679 (GDPR)

This Cookie Policy explains which cookies and similar technologies Carteia uses, for what purposes, on what legal basis and how you can manage or withdraw your consent at any time.

Last updated: 14 June 2026Version: (under legal review)

Preamble