Legal documents
Cookie notice
Last updated: 14 October 2026
Data controller / service provider: Azzalin Gabriele · 29015 Castel San Giovanni (PC), Italia · P.IVA IT01875400333 · info@fixnoty.com
The full legal text is currently provided in Italian (official version).
This page supplements the Privacy policy and describes cookies and storage used by FixNoty.
1. What we use
- Cookie / storage di autenticazione Supabase sulla dashboard FixNoty (sessione di login) — tecnici, necessari.
- fx_lang — lingua scelta con il pulsante IT/EN, 1 anno — tecnico. Senza questo cookie la lingua segue il dispositivo e il browser (italiano se presente, altrimenti inglese).
- Cookie di sessione del portale revisioni (dopo PIN corretto), tipicamente fino a 7 giorni — tecnici / sicurezza. Si invalida se il PIN viene cambiato.
- Sul sito del Cliente finale dove è installato il widget: localStorage per ricordare nome/email del revisore e, se richiesto, il token dopo il PIN widget; sessionStorage per lo stato della sessione «Registra problema» — tecnici legati alla funzionalità. Il blocco dopo PIN errati non usa cookie: è lato server.
2. Measurement and ads
If measurement is on (Google Analytics 4), a banner asks before any analytics or ad cookie. Until you choose, both stay denied. We do not pass click identifiers on to Google through the page address while consent is missing.
“Necessary only” keeps technical session cookies. It does not send visits or funnel events to Google, from the browser or from the server. Any click identifiers kept for this tab are deleted.
“Analytics” measures visits and product steps (page view, sign-up, trial, project, widget seen, first feedback, checkout started, purchase). It also stores campaign parameters and Google click ids (gclid, gbraid, wbraid) in a first-party cookie. It does not turn on Google’s advertising cookies.
“Analytics and ads” does the same and also allows Google’s ad cookies and ad measurement data. There is no separate Google Ads tag on the site.
We do not send email, name, phone, feedback text, project names or query strings to Google. Click ids stay in our cookie and, if you are logged in, on the account. They are not sent as event fields. Changing the choice with the Cookie button applies at once: a later “Necessary only” stops future sends, including server sends for that account. Events already received by Google are not recalled.
- fx_consent — your choice (necessary, analytics, or all) — 180 days.
- fx_cid — technical Analytics id (digits only) — 90 days — only after Analytics or Analytics and ads.
- fx_attr — first and last visit origin: source, medium, campaign, content, term, path, and if present gclid, gbraid, wbraid. No email. — 90 days — only after Analytics or Analytics and ads.
- fx_attr_pending — same fields, in this tab only, before you choose. Deleted on Necessary only, or when copied into fx_attr.
- _ga and _ga_* — Google Analytics 4 cookies, typically up to 2 years — only after Analytics or Analytics and ads.
- _gcl_au — Google Ads cookie, typically about 90 days — only after Analytics and ads.
3. Management
You can change the choice with the Cookie button. “Necessary only” stops future sends to Google at once, including later server events if you are logged in. Deleting cookies in the browser stops page sends; use the button to stop the server as well. Blocking technical cookies can prevent login or PIN portal access.
4. Widget CDN
Il widget può scaricare librerie da CDN (es. jsDelivr). Tali richieste avvengono dal browser del revisore sul sito del Cliente finale e sono necessarie al funzionamento di screenshot/replay.