This Cookie Policy describes the tracking technologies used by the Insieme.AI website (the "Site"), in compliance with EU Regulation 2016/679 (GDPR), the ePrivacy Directive 2002/58/EC, and the Italian Data Protection Authority's Guidelines on cookies and other tracking tools (Decision no. 231 of 10 June 2021).

1. What are cookies

Cookies are small text files that websites store on the user's device (computer, tablet, smartphone) during browsing. They are used to store preferences, maintain active sessions, and collect information about site usage.

In addition to traditional cookies, there are other local storage technologies such as the browser's localStorage and sessionStorage, which perform similar functions.

2. Types of cookies

Cookies are classified according to various criteria:

Technical/necessary cookies: Essential for the site to function. They do not require consent.
Functionality cookies: Store user preferences (language, theme). Do not require consent if strictly functional.
Analytics cookies: Collect statistical data on site usage. Require consent if not anonymized.
Profiling cookies: Track users for advertising purposes. Always require prior consent.

3. Cookies and technologies used by Insieme.AI

The Site uses technical and functionality cookies strictly necessary for the proper functioning of the service, as well as Google Analytics and Microsoft Clarity analytical cookies (heatmap, anonymized session recording) and Sentry error tracking scripts, all activated only with the user's prior consent. We do not use profiling or advertising cookies.

Name/Key	Type	Purpose	Duration	Third party
insieme-language	localStorage	Stores language preference (IT/EN)	Persistent	No
appearance-settings	localStorage	Stores theme (light/dark/system), text size, reduced motion	Persistent	No
sb-*-auth-token	localStorage	Session token for authentication (managed by Supabase Auth)	Session/Refresh	Supabase
insieme-cookie-consent	localStorage	Stores the user's cookie consent choice (necessary/all)	Persistent	No
onboarding-completed	localStorage	Indicates whether the user has completed the introductory guide (onboarding)	Persistent	No
_ga / _ga_*	Cookie	Google Analytics: anonymous identifier for site usage statistics. Activated only with explicit consent.	2 years	Google
_clck / _clsk	Cookie	Microsoft Clarity: anonymous identifier for heatmap and session recording. Activated only with explicit consent.	1 year / Session	Microsoft

4. Third-party cookies

The Site integrates the following third-party services:

Supabase Auth: Manages user authentication via JWT tokens stored in localStorage. Supabase acts as a data processor under Art. 28 GDPR. Tokens contain exclusively session information and are not used for tracking or profiling.
Google Analytics: Web analytics service provided by Google Ireland Limited. Collects anonymous and aggregated data about site usage (pages visited, session duration, device). Google Analytics cookies are installed ONLY after the user's explicit consent via the cookie banner. Consent can be revoked at any time by clearing browser cookies. Google Privacy Policy: https://policies.google.com/privacy
Microsoft Clarity: Behavioral analytics service provided by Microsoft Corporation. Collects heatmaps, scroll maps, and anonymous session recordings (clicks, mouse movements, scrolling) to improve user experience. Recordings automatically mask sensitive inputs (email, password, payment data). Activated ONLY after the user's explicit consent. Extra-EU data transfers covered by Standard Contractual Clauses. Microsoft Privacy Statement: https://privacy.microsoft.com/en-us/privacystatement
Sentry: Error tracking service provided by Functional Software Inc (USA). Receives JavaScript error stack traces to allow us to identify and fix bugs. Does not collect persistent cookies, does not profile the user, does not transmit message content or personal data (PII). Activated ONLY after the user's explicit consent. Extra-EU data transfers covered by Standard Contractual Clauses. Sentry Privacy Policy: https://sentry.io/privacy/

5. Legal basis

Technical and functionality cookies are strictly necessary for providing the service and do not require prior consent pursuant to Art. 122 of the Italian Privacy Code (Legislative Decree 196/2003). Google Analytics, Microsoft Clarity analytical cookies and Sentry error tracking scripts are activated only with the user's explicit consent (Art. 6.1.a GDPR), collected via the cookie banner.

The legal bases for the use of cookies are:

Art. 6.1.b GDPR - Performance of contract (authentication, service operation)
Art. 6.1.f GDPR - Legitimate interest (storing interface preferences)
Art. 6.1.a GDPR - Consent (analytical and tracking cookies of third parties such as Google Analytics, Microsoft Clarity, Sentry, revocable at any time)

6. Managing cookies

Users can manage cookie preferences through their browser settings. Disabling technical cookies may impair the functionality of the Site.

Instructions for major browsers:

Chrome: chrome://settings/cookies
Firefox: about:preferences#privacy
Safari: Preferences > Privacy
Edge: edge://settings/privacy

To delete data stored in localStorage, you can use the browser's Developer Tools (F12 > Application > Local Storage) or log out of the Service.

7. Updates to the Cookie Policy

This Cookie Policy may be updated periodically to reflect technical or regulatory changes. The date of the last update is indicated at the top of this document. In case of substantial changes, the user will be informed through the Site.

8. Contact

For questions regarding this Cookie Policy or the processing of personal data:

Email: inloop@legalmail.it

For more information on the processing of personal data, please see our Privacy Policy. Privacy Policy