Which cookies colvo.app and the COLVO console use, why, for how long — and how to change your choice. Analytics cookies are set only if you accept them.
Cookies are small text files a website stores in your browser. Strictly necessary cookies make the site work (signing in, remembering your language, remembering your cookie choice) and do not need consent. Analytics cookies help us understand how the site is used; we set them only if you accept.
| Cookie | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
__Secure-authjs.session-token | COLVO | Keeps you signed in to the console. | 30 days | Strictly necessary |
__Secure-authjs.csrf-token, __Secure-authjs.callback-url | COLVO | Protect the sign-in form and return you to the page you asked for. | Session | Strictly necessary |
colvo_locale | COLVO | Remembers the language you chose (English or Italian). | 12 months | Strictly necessary |
colvo_consent | COLVO | Remembers whether you accepted or rejected analytics cookies. | 6 months | Strictly necessary |
__cf_bm, cf_clearance | Cloudflare | Bot and abuse protection at our network edge and on public forms (Turnstile). | 30 minutes – 1 year | Strictly necessary |
_ga, _ga_<id> | Google Analytics | Counts visits and how pages are used, with IP anonymisation. No advertising. | 2 years | Analytics — only with consent |
On a local or non-https installation the sign-in cookies are named without the __Secure- prefix. The interactive demo keeps its session id in your browser’s session storage, which is cleared when you close the tab. We use no advertising, social-media or cross-site tracking cookies.
If you click Accept analytics, we load Google Analytics 4 (Google Ireland Limited) on the public site, with IP anonymisation and without advertising features or Google signals. It is never loaded in the signed-in console. If you reject, or have not chosen yet, Google’s script is not loaded at all and no request goes to Google. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code). Data may be transferred to the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses. See Google’s privacy policy.
We count page views with our own cookieless counter. It stores the page, the referring site, campaign (UTM) tags, country and city from our network edge, device type and browser — not your IP address and no cookie. Requests with Do-Not-Track or Global Privacy Control are not counted. Details in the privacy policy.
You can change or withdraw your consent at any time: (also in the footer of every page). Withdrawing stops Google Analytics immediately and deletes its cookies from this site. You can also delete cookies in your browser settings.
Questions about cookies or your data: [email protected]. The privacy policy explains your rights.