Legal

Cookie Policy

Last updated: April 19, 2026 · Effective immediately

1. What are cookies

Cookies are small text files stored by your browser. Similar technologies (localStorage, sessionStorage) are treated here as “cookies” for simplicity. This policy is issued pursuant to art. 13 GDPR, art. 122 D.Lgs. 196/2003 (Italian Privacy Code), and the Italian Garante provvedimento of 10 June 2021.

2. Categories of cookies used

DepScope uses only first-party cookies, grouped as follows:

2.1 Strictly necessary (always on — no consent required)
  • ds_session — authenticated session token, HTTP-only, Secure, SameSite=Lax. Duration: 30 days.
  • ds_csrf — CSRF protection token. Session lifetime.
  • ds_consent — stores your cookie preferences and timestamp. Duration: 6 months (then consent banner re-shown per Garante guidance).

Legal basis: art. 122(1) D.Lgs. 196/2003 — technical cookies, no consent needed.

2.2 Analytics (aggregated, privacy-preserving)
  • Not currently used. If introduced, they will be anonymized server-side (IP truncation, no fingerprinting) and used only with your consent via the banner. This policy will be updated and consent re-requested before activation.
2.3 Marketing / profiling
  • None. DepScope does not use advertising, retargeting, or behavioural profiling cookies.
2.4 Third-party cookies
  • Stripe — checkout pages may set Stripe cookies for fraud prevention and transaction integrity, only during an active payment session. See Stripe cookies.
  • Cloudflare — may set __cf_bm (bot management) as a strictly necessary security measure. Duration: 30 minutes. See Cloudflare cookies.

4. Managing cookies in your browser

You can also manage cookies directly via your browser settings:

Disabling strictly-necessary cookies will break login and security features.

5. Your rights

You may exercise your GDPR rights on cookie-collected data at any time — see Privacy Policy § 8. You may also lodge a complaint with the Garante Privacy.

6. Changes

When we add or change cookies, we update this page and prompt you for a fresh choice before any new non-essential cookie is set.