Cookie Policy
Last updated: 16 October 2026
This Cookie Policy describes the tracking technologies used by the Insieme.AI website (the "Site"), in compliance with EU Regulation 2016/679 (GDPR), the ePrivacy Directive 2002/58/EC, and the Italian Data Protection Authority's Guidelines on cookies and other tracking tools (Decision no. 231 of 10 June 2021).
1. What are cookies
Cookies are small text files that websites store on the user's device (computer, tablet, smartphone) during browsing. They are used to store preferences, maintain active sessions, and collect information about site usage.
In addition to traditional cookies, there are other local storage technologies such as the browser's localStorage and sessionStorage, which perform similar functions.
2. Types of cookies
Cookies are classified according to various criteria:
- Technical/necessary cookies: Essential for the site to function. They do not require consent.
- Functionality cookies: Store user preferences (language, theme). Do not require consent if strictly functional.
- Analytics cookies: Collect statistical data on site usage. Require consent if not anonymized.
- Profiling cookies: Track users for advertising purposes. Always require prior consent.
3. Cookies and technologies used by Insieme.AI
The Site uses technical and functionality cookies strictly necessary for the proper functioning of the service, as well as Google Analytics and Microsoft Clarity analytical cookies (heatmap, anonymized session recording) and Sentry error tracking scripts, all activated only with the user's prior consent. With your consent ('Accept all') we also use advertising tools from Google Ads and ChatGPT Ads (OpenAI), which measure whether sign-ups and purchases come from our ads. The Google Ads tag also records the pages you visit, to show you our ads on other sites and apps (remarketing). Google may also use this data for its own advertising services, under its privacy policy. With 'Necessary only' none of these tools is activated.
| Name/Key | Type | Purpose | Duration | Third party |
|---|---|---|---|---|
| insieme-language | localStorage | Stores language preference (IT/EN) | Persistent | No |
| appearance-settings | localStorage | Stores theme (light/dark/system), text size, reduced motion | Persistent | No |
| sb-*-auth-token | localStorage | Session token for authentication (managed by Supabase Auth) | Session/Refresh | Supabase |
| insieme-cookie-consent | localStorage | Stores the user's cookie consent choice (necessary/all) | Persistent | No |
| onboarding-completed | localStorage | Indicates whether the user has completed the introductory guide (onboarding) | Persistent | No |
| _ga / _ga_* | Cookie | Google Analytics: anonymous identifier for site usage statistics. Activated only with explicit consent. | 400 days | |
| _clck / _clsk | Cookie | Microsoft Clarity: anonymous identifier for heatmap and session recording. Activated only with explicit consent. | 1 year / Session | Microsoft |
| MUID, MR, SM, ANONCHK, SRM_B (bing.com, clarity.ms) | Third-party cookie | Microsoft Clarity third-party cookies: browser recognition and technical operation of session recording. Activated only with 'Accept all'. | Up to 390 days | Microsoft |
| GAESA | Technical cookie | Cookie of the hosting infrastructure (Google Cloud, where the site runs): it routes requests from the same visitor to the same server. Necessary for operation, does not require consent and is not used for statistics or advertising. | 30 days | Google (hosting) |
| _gcl_au | Cookie | Google Ads: browser identifier used to measure ad conversions and for remarketing. Activated only with 'Accept all'. | 90 days | |
| _gcl_aw | Cookie | Google Ads: click identifier, set only if you arrive from a Google ad. Activated only with 'Accept all'. | 90 days | |
| _gcl_ls | localStorage | Google Ads: copy of ad measurement data kept by the Google tag. Activated only with 'Accept all'. | Persistent | |
| IDE (doubleclick.net) | Third-party cookie | Google Ads: Google advertising cookie used for remarketing and ad measurement. Activated only with 'Accept all'. | 390 days | |
| GCL_AW_P (google.com, googleadservices.com) | Third-party cookie | Google Ads: ad click identifier stored on Google's domains. Activated only with 'Accept all'. | 90 days | |
| insieme-signup-attribution | localStorage | Visit origin (campaign, ad click identifier, referring site, landing page), saved only with 'Accept all' and linked to your profile when you sign up. Visitors who came to the site before version 2.5.0 of the Privacy Policy may already have it in their browser: it expires on its own within 90 days and, without 'Accept all', it is not sent. | 90 days | No |
| insieme-attribution | sessionStorage | Visit origin in the current session (campaign, ad click identifier, landing page), saved only with 'Accept all'. | Session | No |
| __oppref | Cookie | ChatGPT Ads: click identifier, set only if you arrive from an ad on ChatGPT. Activated only with 'Accept all'. | 30 days | OpenAI |
| __obref | Cookie | ChatGPT Ads: browser reference OpenAI uses to recognize whether sign-ups and purchases come from one of its ads. Activated only with 'Accept all'. | 1 year | OpenAI |
| __oaiq_consent / oaiq_consent / oaiq_cs:* | Cookie / localStorage / sessionStorage | ChatGPT Ads: store the consent given to the OpenAI pixel and the pixel's session state. Activated only with 'Accept all'. | 30 days / Persistent / Session | OpenAI |
4. Third-party cookies
The Site integrates the following third-party services:
- Supabase Auth: Manages user authentication via JWT tokens stored in localStorage. Supabase acts as a data processor under Art. 28 GDPR. Tokens contain exclusively session information and are not used for tracking or profiling.
- Google Analytics: Web analytics service provided by Google Ireland Limited. Collects anonymous and aggregated data about site usage (pages visited, session duration, device). Google Analytics cookies are installed ONLY after the user's explicit consent via the cookie banner. Consent can be revoked at any time by clearing browser cookies. Google Privacy Policy: https://policies.google.com/privacy
- Microsoft Clarity: Behavioral analytics service provided by Microsoft Corporation. Collects heatmaps, scroll maps, and anonymous session recordings (clicks, mouse movements, scrolling) to improve user experience. Recordings automatically mask sensitive inputs (email, password, payment data). Activated ONLY after the user's explicit consent. Extra-EU data transfers covered by Standard Contractual Clauses. Microsoft Privacy Statement: https://privacy.microsoft.com/en-us/privacystatement
- Sentry: Error tracking service provided by Functional Software Inc (USA). Receives JavaScript error stack traces to allow us to identify and fix bugs. Does not collect persistent cookies, does not profile the user, does not transmit message content or personal data (PII). Activated ONLY after the user's explicit consent. Extra-EU data transfers covered by Standard Contractual Clauses. Sentry Privacy Policy: https://sentry.io/privacy/
- Google Ads: Advertising service provided by Google Ireland Limited. Only with 'Accept all': the Google tag on the site and our server tell Google whether you arrived from one of our ads and whether you signed up, connected a Companion or made your first purchase (click identifier, event type, date and time, transaction code, amount net of VAT). The tag also records the pages you visit, to show you our ads on other sites and apps (remarketing). Google may also use this data for its own advertising services. Google Privacy Policy: https://policies.google.com/privacy
- ChatGPT Ads (OpenAI): Advertising service provided by OpenAI. Only with 'Accept all': a pixel on the site records the pages you visit and, when you sign up, connect a Companion or make a purchase, our server sends OpenAI the event type, date and time, the amount, your country, your IP address, your browser type, the click identifier if any, and your email and a user code encrypted in non-reversible form (SHA-256 hash). OpenAI Privacy Policy: https://openai.com/policies/privacy-policy
5. Legal basis
Technical and functionality cookies are strictly necessary for providing the service and do not require prior consent pursuant to Art. 122 of the Italian Privacy Code (Legislative Decree 196/2003). Google Analytics, Microsoft Clarity analytical cookies, Sentry error tracking scripts and advertising measurement and remarketing tools (Google Ads, ChatGPT Ads) are activated only with the user's explicit consent (Art. 6.1.a GDPR), collected via the cookie banner. Before you choose, and if you choose 'Necessary only', Google Analytics receives only cookieless signals stating that consent has not been given (Google Consent Mode): they store nothing on your device and Google uses them in aggregate form to estimate statistics.
The legal bases for the use of cookies are:
- Art. 6.1.b GDPR - Performance of contract (authentication, service operation)
- Art. 6.1.f GDPR - Legitimate interest (storing interface preferences)
- Art. 6.1.a GDPR - Consent (analytical and tracking cookies of third parties such as Google Analytics, Microsoft Clarity, Sentry and advertising tools for measurement (Google Ads, ChatGPT Ads) and remarketing (Google Ads), revocable at any time)
6. Managing cookies
The Site does not yet have a control for changing the choice made in the banner. To withdraw your consent, clear the insieme.ai site data in your browser (cookies and site data, which include localStorage and sessionStorage): on the next load the banner appears again and you can choose 'Necessary only'. If you have an account, the new choice is also recorded on your profile when you log in, and from then on our server no longer sends conversions to Google Ads or ChatGPT Ads and the Google Ads tag is no longer loaded; data already sent stays with the platforms under their privacy policies. Users can also manage cookies through their browser settings. Disabling technical cookies may impair the functionality of the Site.
Instructions for major browsers:
- Chrome:
chrome://settings/cookies - Firefox:
about:preferences#privacy - Safari:
Preferences > Privacy - Edge:
edge://settings/privacy
To delete data stored in localStorage, you can use the browser's Developer Tools (F12 > Application > Local Storage) or the browser's option to clear site data. Logging out of the Service clears session data but keeps your preferences (language, theme, cookie choice) and the visit origin.
7. Updates to the Cookie Policy
This Cookie Policy may be updated periodically to reflect technical or regulatory changes. The date of the last update is indicated at the top of this document. In case of substantial changes, the user will be informed through the Site.
8. Contact
For questions regarding this Cookie Policy or the processing of personal data:
Email: inloop@legalmail.it
For more information on the processing of personal data, please see our Privacy Policy. Privacy Policy