PromptOps — Cookie Policy
Version: 1.0 Effective date: 2 August 2026 Applies to: the website promptops.it and its subdomains Status: in force
This policy explains what we store on your device when you visit our website, why, and how you control it. It supplements the Privacy Policy.
1. What this covers
Italian law (art. 122 of Legislative Decree 196/2003, implementing Directive 2002/58/EC) does not only regulate cookies. It regulates any storing of information on your device, and any access to information already stored there.
That is worth stating plainly, because most of what our site uses is not technically a cookie: it is browser local storage and session storage. The rules are the same, so we list them together.
2. What we store, exactly
2.1 Strictly necessary — no consent required
These are needed for the site to work or to respect a choice you made. Under art. 122(1) they do not require consent.
| Name | Type | Purpose | Duration | Set by |
|---|---|---|---|---|
cookie-consent-given | localStorage | Records that you have made a choice about cookies, so we stop asking | Until you clear it | promptops.it |
cookie-preferences | localStorage | Records which categories you accepted | Until you clear it | promptops.it |
There is a certain irony in storing something to remember that you declined storage, but the alternative is showing you the banner on every page.
2.2 Functional — no consent required in their current use
| Name | Type | Purpose | Duration | Set by |
|---|---|---|---|---|
| Language preference | localStorage | Remembers the language you selected, so it is not reset on every visit | Until you clear it | promptops.it |
| UI state flags | sessionStorage | Remembers whether a one-off notice has already been shown during this visit | Until the tab is closed | promptops.it |
These store a preference you expressed and do not track you.
2.3 Analytics — consent required
Not active until you accept. Google Consent Mode is initialised with all non-essential storage set to denied.
| Name | Type | Purpose | Duration | Set by |
|---|---|---|---|---|
_ga | Cookie | Distinguishes visitors | 2 years | |
_ga_SGW1JSVGNV | Cookie | Keeps session state for the GA4 property | 2 years | |
analytics_session_id | sessionStorage | Groups page views into one visit for our own analytics | Until the tab is closed | promptops.it |
Google Analytics 4 — property G-SGW1JSVGNV, loaded through Google Tag Manager container GTM-WC47VXTZ. Collects pages visited, referrer, campaign parameters, browser and device characteristics, approximate location derived from IP. Provider: Google Ireland Limited. Privacy policy: https://policies.google.com/privacy
First-party analytics — endpoint analytics.shellonback.com. Collects a session identifier, page, referrer, UTM campaign parameters, user agent and viewport size. Operated by us.
2.4 Profiling and advertising — consent required
Not active until you accept, and currently no advertising tag is deployed. The category exists in the banner because Google Consent Mode requires the signals (ad_storage, ad_user_data, ad_personalization) to be declared, and because we would rather ask now than add a category later without telling you.
If we activate advertising technologies, this section will be updated before they go live, and the cookies concerned will be listed with names and durations.
[DA VERIFICARE prima della pubblicazione: ispezionare il container GTM in produzione e confermare che non siano attivi tag pubblicitari. La configurazione del container non risiede nel repository, quindi non è verificabile dal codice.]
3. How you control this
When you first visit, a banner lets you choose. Nothing beyond section 2.1 and 2.2 is stored until you decide.
- Accept all — enables analytics and profiling categories
- Customise — choose category by category
- Reject — only the strictly necessary items remain
Later, you can change your mind at any time from the cookie icon on the site. Withdrawing consent is as easy as giving it, and takes effect immediately for future storage.
In your browser, you can block or delete cookies and clear local storage. Instructions differ by browser; the relevant settings are usually under privacy or site data. Blocking strictly necessary items may stop parts of the site from working.
4. Where the data goes
Analytics data collected through Google is processed by Google Ireland Limited, and may be transferred outside the European Economic Area. Google states it relies on the EU-US Data Privacy Framework for such transfers.
First-party analytics data goes to analytics.shellonback.com, operated by us.
For the full picture of recipients and international transfers, see the Privacy Policy, sections 8 and 9.
5. Legal basis
| Category | Basis |
|---|---|
| Strictly necessary and functional | Art. 122(1) Codice Privacy — no consent required; art. 6(1)(f) GDPR for the processing that follows |
| Analytics | Consent, art. 122(1) Codice Privacy and art. 6(1)(a) GDPR |
| Profiling | Consent, same provisions |
Consent is collected before any non-essential storage takes place, is granular by category, and is withdrawable at any time.
6. Retention
Durations for each item are in section 2. Data collected through analytics is retained according to the settings of the respective platform. Our GA4 property is set to a 14-month retention period.
7. Your rights
You can access, rectify, erase, restrict and object to the processing of your personal data, and lodge a complaint with the Garante per la protezione dei dati personali. How to exercise these rights: Privacy Policy, sections 11 and 12.
8. Changes
We update this policy when the technologies we use change. Where a change introduces a new category or a new non-essential technology, we ask for consent again before activating it.
| Version | Date | Changes |
|---|---|---|
| 1.0 | 2 August 2026 | First published version. Supersedes the internal draft of 2026-07-04. |
9. Contact
SHELLONBACK SRL — Via Stupinigi 29, 10092 Beinasco (TO), Italy luca.mangiacotti@shellonback.com · PEC shellonback@pec.it
