Via Sardegna 50 — 00187 Roma
ITEN
TofaniLEGAL
Cookie Policy · art. 122 D.Lgs 196/2003

Cookie policy.

Which cookies tofani.legal uses and how to exercise your rights. No profiling, no third-party trackers — only technical cookies. Last updated 19 April 2026.

1. What cookies are

Cookies are small text files sent by visited websites to the user's browser and stored for later retrieval. This Cookie Policy describes only the technical cookies used by tofani.legal.

2. Cookies used on this site

The website does not use profiling cookies, third-party marketing cookies, or social media tracking.

Only technical cookies strictly necessary for operation or aggregated statistics with anonymized IP are present — for which the Italian Data Protection Authority Guidelines of 10 June 2021 do not require prior consent.

2.1 Session technical cookies (consent-exempt)

NamePurposeDurationDomainCategory
tfn_sidPseudonymized session ID (30-minute sliding) used for aggregate unique-visitor counting · HttpOnly, SameSite=Lax · no personal data30 mintofani.legalTechnical-analytic
sb-*Supabase technical cookies for backoffice authentication (only /admin/*)Sessiontofani.legalTechnical

2.2 Third-party cookies

None. No advertising or profiling cookies from third parties. Site fonts may be served from Google Fonts CDN if configured in the Theme editor; in that case the browser issues a GET request to fonts.googleapis.com without the Controller setting profiling cookies.

3. First-party analytics

The analytics system collects aggregated and non-personal data:

  • Page views count
  • Country code (derived server-side via Vercel, 2-letter ISO)
  • Browser/device type (anonymized user-agent)
  • Referrer

IP addresses are not stored. Session ID is pseudonymized and rotates every 30 minutes. The beacon is automatically disabled for crawlers/bots and for /admin routes.

Retention: 90 days; automatic deletion thereafter.

4. How to manage cookies

If you wish to reject even technical cookies, configure your browser:

Note: rejecting session technical cookies may disable some backoffice features. No impact on public site browsing.

5. Data transfers and processors

For technical-analytic cookie aggregate data:

  • Supabase (EU-West region): storage of non-personal aggregated data
  • Vercel (USA, EU-US DPF): serverless infrastructure for the beacon

Cookie-collected data is neither sold nor used for purposes other than those listed.

6. User rights

All rights under GDPR arts. 15-22 apply, detailed in the full Privacy Notice.

7. Changes to this Cookie Policy

The Controller reserves the right to update this Cookie Policy. The current version is always at tofani.legal/en/cookie-policy.

Last updated: 19 April 2026 · version: v1-2026-04