Versions 1.0 (effective from 12 July 2026), 1.1 (effective from 19 September 2026) 1.2 (effective from 2 October 2026), 1.3 (effective from 10 October 2026) and 1.4 (effective from 22 October 2026) are retained as historical records and may be requested from the Controller.
1. Introduction
This document describes the cookies and storage technologies used by the website dentalphotovideo.it, operated by Battaglia Alessandro – sole proprietorship (impresa individuale), Viale Paolo Onorato Vigliani 17, 20148 Milan (MI), Italy, VAT No. 14248220965 ("Controller").
Contacts: a.battaglia@dentalphotovideo.it — Certified email (PEC) alessandro.battaglia@pec.fiscozen.it
For the processing of personal data, please refer to the Privacy Policy.
2. What cookies, localStorage and sessionStorage are
Cookies are small text files that the website stores on the user's browser and that may be sent back to the website on subsequent visits.
localStorage and sessionStorage are browser storage areas that allow the website to retain information on the user's device. These are technologies comparable to cookies from a regulatory standpoint and are therefore described in this policy.
The website uses these technologies for technical purposes strictly functional to the service requested by the user and, only with prior consent, for two optional, independent categories: Analytics (Google Analytics 4) and Marketing (Meta Pixel).
3. Strictly necessary technologies
These are indispensable for the operation of the website and for the delivery of the requested services. They do not require consent pursuant to Article 122 of the Italian Privacy Code and Directive 2002/58/EC.
| Technology | Type | Purpose | Duration |
|---|---|---|---|
Technical authentication session and refresh tokens, stored by the authentication service under a key such as sb-...-auth-token | localStorage / technical cookie of the authentication service | keep the user authenticated in the reserved area, renew the session, protect access | duration of the session or until expiry/logout |
| Technical security parameters of the infrastructure | technical cookie or request headers | load balancing, protection against abuse and unauthorised access, service stability | session or short technical duration |
4. Strictly functional preferences
These store choices made by the user in the browser and are necessary to provide the service in the form requested. They are not used for analytics, measurement or marketing purposes.
| Technology | Type | Purpose | Duration |
|---|---|---|---|
lang | localStorage | store the selected language (Italian or English) | persistent until deleted |
cart | localStorage | retain the services added to the cart across pages and sessions | persistent until deleted or the cart is emptied |
cart_addons | localStorage | retain the selected add-ons in the cart (fast delivery, extra revisions, licensed music, extended retention) | persistent until deleted or the cart is emptied |
dpv_cookie_consent | localStorage | store the user's choices on the optional categories (consent version v, analytics, marketing and date ts) | persistent until deleted or a new consent version is introduced |
dpv_signup_draft | sessionStorage | temporarily store data already entered in the registration form, to prevent its loss during the process | until the browser tab is closed or registration is completed |
5. Payments and checkout
The payment form is provided by Stripe and is loaded only when the user starts the checkout process. It is not loaded during normal browsing of the website.
At that stage, Stripe may set its own cookies or technologies strictly necessary for the operation of the payment, for transaction security and for fraud prevention. Such processing is governed by Stripe's privacy notice.
6. Sign-in with Google
The website does not embed Google social plugins, share buttons or trackers and does not load Google resources during normal browsing.
Only if the user chooses to use the "Sign in with Google" function is the browser redirected to domains operated by Google for authentication: in that context Google may use its own cookies and technologies, in accordance with its own policy. The Controller does not set profiling cookies and does not receive data other than that described in the Privacy Policy.
7. Analytics cookies (optional, consent only)
The website uses Google Analytics 4 (Google Ireland Limited) for aggregate usage statistics. The Google Analytics script is not loaded and no request is sent to Google until the user gives consent through the banner or the Cookie preferences page. Google Consent Mode is active with a "denied" default for all purposes; analytics_storage becomes "granted" only with Analytics consent, and ad_storage, ad_user_data, ad_personalization only with Marketing consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics 4 | pseudonymously distinguish browsers for aggregate statistics | up to 2 years |
_ga_<ID> | Google Analytics 4 | keep the measurement session state | up to 2 years |
No direct identifiers (name, email, phone, practice details, tax data, order notes, clinical data) are sent to Google; User-ID, Google Signals, remarketing and advertising features are not enabled. For details on processing, please refer to the Privacy Policy.
The website does not use:
• advertising cookies or pixels other than the Meta Pixel described in section 7-bis (e.g. Google Ads); • heatmaps, session recording or similar tools; • social plugins that set third-party cookies; • fonts or resources loaded from external CDNs that involve requests to third parties. The typefaces used are system fonts.
Technical access notification via Telegram (consent only)
With the same analytics consent, on the first public page visited in a session the website server sends a technical notification to the Controller via Telegram, containing only the path of the landing page (for example /chi-sono), without query parameters or fragments. The application does not send IP address, user-agent, referrer, email or user identifiers to Telegram, creates no internal database for this feature and performs no profiling. The following key is used to avoid duplicate notifications:
| Name | Type | Purpose | Duration |
|---|---|---|---|
telegram_notified | sessionStorage | avoid duplicate notifications within the same session; set only after analytics consent | until the browser tab/session is closed |
7-bis. Marketing cookies (optional, consent only)
With Marketing consent the website uses the Meta Pixel (Meta Platforms Ireland Limited), ID 1453266836714711, to measure advertising campaigns and visits coming from ads. The Meta script is not loaded and no request is sent to Meta before Marketing consent.
The Pixel is limited to public commercial pages (home, About, Contact, post-production service pages, Insights and related articles) and to the public /assessment page. The standard PageView and Lead events are sent, both without custom parameters. PageView measures views of allowlisted pages. Lead indicates successful submission only and is sent only after completion of the Assessment and successful server acceptance of the request/report form, never before acceptance or on failure.
The Pixel is not loaded in the reserved area, authentication, account, administration, checkout, Live Surgery, legal pages or cookie preferences.
Advanced Matching, automatic form tracking, automatic event setup and automatic Meta events are not enabled. No form or Assessment data is intentionally sent: name, email, telephone, profession, answers, results, fit, callback, newsletter checkbox, clinical photographs, patient data or health data. Marketing cookie consent is separate from the Assessment form's newsletter/commercial consent; the form checkbox does not control the Meta Pixel.
The sessionStorage key dpv_meta_assessment_lead, set only with Marketing consent after sending the event, prevents duplicate Leads in the same tab/session and lasts until the tab/session closes. If sessionStorage is unavailable, deduplication applies only for the page lifecycle.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_fbp | Meta Pixel | distinguish browsers for campaign measurement | up to 90 days |
_fbc | Meta Pixel | link the visit to an ad click, where present | up to 90 days |
8. Managing preferences and withdrawing consent
On the first visit, a banner lets the user accept all or reject optional cookies with equivalent buttons, or open the preferences. Closing or ignoring the banner means no consent is given.
The Cookie preferences page lets the user enable or disable Analytics and Marketing independently at any time. Upon withdrawal of Analytics, collection stops, the website attempts to delete the domain's _ga and _ga_* cookies and the page is reloaded without Google Analytics. Upon withdrawal of Marketing, no further events are sent to Meta and, if the Pixel was already loaded, the page is reloaded without the Meta script. Necessary and functional technologies always remain active.
The user may also:
• delete cookies, localStorage and sessionStorage from their browser settings; • block or restrict cookies via browser settings, bearing in mind that disabling necessary technologies may prevent access to the reserved area, the operation of the cart and the completion of payment; • log out to end the authenticated session.
Instructions for managing cookies are available in the documentation of the browser used (e.g. Chrome, Safari, Firefox, Edge).
9. Updates
This Cookie Policy may be updated in the event of technical or regulatory changes.
Should further measurement, marketing or profiling tools be introduced in the future, this policy and the preferences page will be updated and a suitable consent collection and withdrawal mechanism will be put in place before such tools are activated. A change in the consent version will cause the banner to ask for the choice again.
This English version is a courtesy translation provided for convenience only. In the event of any discrepancy or inconsistency between this English version and the Italian original, the Italian version shall prevail.