Cookie Policy

This Cookie Policy explains in detail which cookies and similar storage technologies are used on the domain valuera.cloud and related interfaces, in line with European privacy rules and the guidance of the Italian Data Protection Authority (Garante) on cookies and other tracking tools. It supplements and completes the Privacy Policy.

July 2026

Scope of this policy

This policy applies to the public pages and authenticated areas made available by Valuera through valuera.cloud, as well as to the preference and traffic-measurement tools described herein.

For purposes, general legal bases, recipients and data-subject rights, please refer to the Privacy Policy, which is the general reference framework.

What cookies and similar technologies are

Cookies are small text files that websites may store on the user's device through the browser. Similar technologies include, by way of example, localStorage and sessionStorage keys, server-side session identifiers and request-protection mechanisms (such as CSRF controls tied to the authenticated session).

Such tools may be strictly necessary to provide a service requested by the user, or — where used — employed for non-essential measurement or comfort purposes. Valuera describes in this policy the technologies currently in use and does not, at present, rely on third-party advertising profiling cookies.

Technologies currently in use

As of the update date of this policy, the following technologies are in use in particular.

• `valuera_tp_session` (HTTP cookie): a strictly necessary technical cookie for authenticated session continuity; indicative maximum lifetime of eight hours; protected according to the platform's security practices (including, where applicable, secure cookie attributes).
• `valuera_public_locale` (localStorage): stores the public interface language preference where the user has made a choice compatible with the consent settings described in the banner.
• `valuera_cookie_consent` (localStorage): records the choice made by the user in the information banner relating to cookies and similar technologies.
• CSRF protection: handled within the server-side session context, without a separate standalone CSRF cookie.
• `va_sid` (sessionStorage, where active): an anonymous or pseudonymised visit-session identifier, limited to the browser session lifetime, used to correlate first-party measurement events within the same visit.

First-party traffic measurement (no third-party advertising)

Valuera may record, on its own systems, page-view events and interactions with key elements of the public interface (for example registration or pricing buttons), in order to understand website usage, diagnose issues and improve the informational experience.

Such measurement is first-party: marketing, retargeting or third-party analytics cookies such as Google Analytics are not used at present. Where unique visits are approximated using hashes of technical elements (for example combinations derived from IP address and user-agent with daily rotation), the raw IP address is not stored in analytics events according to the system design described; nevertheless, such data may still constitute personal data under the GDPR and are processed proportionately for limited aggregate measurement purposes.

Further technical details may be provided on request at davide.simeone@valuera.cloud.

No advertising profiling cookies

No third-party advertising profiling, retargeting or advertising cookies are active at present.

If non-essential tools requiring prior consent under applicable rules are introduced in the future, they will be activated only after informed consent has been collected in a compliant manner and after this policy and the information banner have been updated.

Legal basis and banner logic

Cookies and tools strictly necessary to deliver a service requested by the user (in particular the authenticated session and related security protections) are used on the basis of the need to provide the service and/or the legitimate interest in ensuring functionality and security, within the limits allowed by law.

Storage of language preference and certain non-essential comfort choices may be made subject to the user's express selection in the banner. The banner allows the user to accept the technologies described as compatible with a full preference experience, or to limit processing to what is strictly necessary for essential operation, according to the labels shown.

First-party traffic measurement is designed with proportionality in mind; if regulatory or technical developments so require, the controller may strengthen consent or anonymisation mechanisms and will update this policy accordingly.

Managing preferences and browser controls

In addition to the choices available in the banner, users may configure their browser to block or delete cookies. Disabling strictly necessary cookies may impair access to authenticated areas and certain security features.

Language preference and the consent record may be reset by clearing localStorage data for the site. For assistance, contact davide.simeone@valuera.cloud.

Recipients and hosting context

Technical data connected with the use of cookies and similar tools are processed by the controller and, as relevant, by the infrastructure providers hosting the services, including Hetzner, Hostinger, acting as processors or otherwise under appropriate contractual safeguards.

International transfers and data-subject rights are governed by the Privacy Policy.

Updates and contacts

This Cookie Policy may be updated following regulatory changes, the introduction of new features or changes in technology providers.

For questions about cookies and tracking, please write to davide.simeone@valuera.cloud.