PRIVACY AND COOKIES
Cookies, clearly explained.
Updated: 21 October 2026 · version 2026-10-21.4
What is used while you browse
The website uses technical cookies for security and access to restricted areas. The reviewed configuration contains no Google Analytics, Google Tag Manager, Meta Pixel or equivalent advertising analytics tools. No general consent is requested for necessary technical cookies alone.
Cookies are small pieces of data stored by the browser. Session storage is browser storage limited to a tab. These tools may be necessary for a requested service or optional: their category depends on their actual function, not just their name.
The hosting security cookie
On 21 October 2026, the HTTP response from the public home page at www.studioiaccarino.eu set the __cf_bm cookie, provided by Cloudflare to distinguish automated traffic and protect the service. It was set for www.studioiaccarino.eu with Secure, HttpOnly and SameSite=None and a 30-minute expiry. Cloudflare documents expiry after 30 continuous minutes of inactivity.
In this configuration it is classified as a technical security cookie, not marketing consent. Its presence and renewal depend on the infrastructure. The website does not read the encrypted contents of this cookie. Provider processing and possible transfers are addressed in the Privacy Policy and Cloudflare documentation.
Technical inventory
| Name | Provider | Purpose and scope | Duration |
|---|---|---|---|
studio-media-preferences | Studio Iaccarino | LocalStorage: map and tour choices and consent receipt | 180 days |
__cf_bm | Cloudflare | Bot protection; observed on the public home page | 30 minutes of inactivity |
__Host-studio-owner | Studio Iaccarino | Owner area session, after sign-in | Up to 12 hours |
__Host-studio-buyer | Studio Iaccarino | Buyer area session, after sign-in | Up to 12 hours |
__Host-studio-professional | Studio Iaccarino | Professional area session, after sign-in | Up to 12 hours |
__Host-studio-operator | Studio Iaccarino | Operator selection in the work area | Up to 12 hours |
__Host-studio-google | Studio Iaccarino | Google sign-in flow security | 10 minutes; removed on return |
__Host-studio-google-calendar | Studio Iaccarino | Restricted Calendar connection security | 10 minutes; removed on return |
studio-operator-confirmed | Studio Iaccarino | Session storage: operator confirmation, work area only | Tab lifetime, with session revalidation |
Maps, tours and external links
Available cover photographs and static maps are served by this website without contacting Google or Matterport. The “Start the tour” and “Activate the interactive map” buttons, accompanied by information about the processing, express consent only for the named service. Interactive content loads after the choice has been recorded. No optional choice is preselected. In “Map and tour preferences”, you can select Accept all, Reject all or Save my choices. No general banner is displayed for strictly necessary cookies alone.
Google Maps receives your IP address, browser information and map request; it may use cookies and other storage under its policies. For anonymous Showcase visitors, Matterport describes localStorage for settings and its own usage analytics, including technical data and approximate location; visitors already signed in with the provider may have additional cookies and identifiers. We do not treat these services as automatically exempt from consent merely because they are useful for a viewing.
Preferences, receipts and withdrawal
The technical studio-media-preferences item stores selected services, version, language, date, expiry and receipt identifier in this browser’s localStorage for 180 days. The server records the same choice with its own timestamp, without attaching a name, email or raw IP address, to document it. Expired receipts are deleted on the next recording. Pseudonymous anti-spam counters expire within 24 hours. If recording fails, the content remains blocked.
You can change or withdraw your choices using Map and tour preferences in the footer, Cookie Policy or beside the content. Withdrawal immediately removes embedded content and blocks subsequent loads; it does not retroactively delete data or cookies already received by the provider. Use your browser settings and the provider’s tools for those. This choice does not authorise WhatsApp or email marketing.
Browser controls and updates
You can view, delete or block cookies in your browser settings. Blocking technical cookies may prevent access to personal areas or affect security protections. CRM marketing choices are managed by contacting the agency or unsubscribing: deleting cookies does not change them.
This inventory distinguishes the cookie observed on the anonymous home page from cookies defined in the code for authenticated access. Sign-in flows handled directly by OpenAI/ChatGPT or Google may have their own cookies, described in those services’ notices. Their actual duration is not inferred from the agency’s application cookies.
