Cookie Policy
Last updated: 30 August 2026
What Are Cookies
Cookies are small text files that websites save on your device while you browse. They are used to make the site work correctly, remember your preferences, and collect statistical information about navigation.
Cookies Used on This Site
Technical Cookies (Required)
Essential for the website to function. They do not collect personal data and do not require consent.
| Name | Purpose | Duration |
|---|---|---|
| __vercel_live_token | Vercel preview deployments | Session |
Analytics tools
Google Analytics and Microsoft Clarity run only with consent to the Analytics category. Vercel Web Analytics, which uses no cookies, and Speed Insights, which collects anonymous Core Web Vitals data without identifying visitors or sessions, are active independently of consent.
| Provider | Cookie or browser identifier | Purpose | Duration |
|---|---|---|---|
| Google Analytics | _ga, _ga_* | Visit statistics | 2 years |
| Vercel Web Analytics | None (cookie-free) | Aggregated visits, pages, and referrers | Visitor hash resets daily |
| Speed Insights | No visitor or session identifier | Core Web Vitals and performance | Not applicable |
| Microsoft Clarity | _clck, _clsk, CLID | Heatmaps & session recording | 1 year |
Marketing and Meta matching
This category is separate from Analytics and runs only when you choose Marketing in Cookie Preferences.
- Meta Pixel measures site visits and actions connected with Meta campaigns.
- If you voluntarily join the newsletter and have accepted Marketing, we normalize the email address and convert it to lowercase; we then calculate the SHA-256 hash locally before sending Meta the hashed, pseudonymized data for matching in a Customer List Custom Audience.
- Meta Platforms Ireland Limited receives the hashed data and provides the Customer List Custom Audience matching service for people covered by the GDPR.
- We use the matching result to measure the effectiveness of and personalize Gate Milano campaigns on Meta.
- The legal basis is consent under Art. 6(1)(a) GDPR.
- You can join and receive the newsletter even if you reject Marketing; in that case, your email is not used for this matching.
- You can withdraw Marketing consent at any time through Cookie Preferences; withdrawing it is as easy as giving it. You can also use the newsletter unsubscribe link or write to info@gatemilano.it for privacy requests.
- After a signup with Marketing active, we keep a first-party encrypted HttpOnly cookie for no more than 12 months solely to link your withdrawal request to the newsletter contact and start removal from matching. Browser scripts cannot read it and it is not used to track you. If you delete this cookie before withdrawing, the automatic link is no longer available: use the newsletter unsubscribe link or the privacy contact channel at info@gatemilano.it.
- We retain pseudonymized proof of consent while the consent remains active. After withdrawal, the pseudonymized proof is retained for up to 24 months and then deleted, provided no Customer Audience membership remains. Aggregate data from operational runs is retained for 12 months. The SHA-256 hash is pseudonymized, not anonymous.
Internal statistics without cookies
Google Analytics, Meta Pixel and Microsoft Clarity are enabled only with your consent. Separately, we use an internal measurement on our servers that does not use cookies and remains active if you decline those tools. For the duration of the tab session, the browser's sessionStorage retains the validated first and last touch with the site: source, medium, campaign, content, term and, when present, the click ID supplied by the provider. The entry page is not part of this snapshot. Before saving values, we discard unsafe values or values that appear to contain personal data. The server temporarily uses the IP address and user agent to calculate a technical visit identifier that is separated by site and renewed for each analytics day; the IP address and user agent are not written to analytics data. To measure the journey through payment, we temporarily record two pseudonymous records, checkout_started and purchase_confirmed, associated, when available, with the technical session identifier and the first/last-touch data described above. The raw order identifier is transformed using a one-way HMAC before it is written and is not retained in analytics data. These records and individual raw analytics events are retained for no more than 90 days and then deleted; only aggregate rollups without visit or order identifiers may remain. Xceed provides only aggregate totals by sales channel and event, so those purchases cannot be attributed to an individual visit or an exact campaign. Vercel Web Analytics is active independently of consent: it uses no cookies, stores anonymized aggregate data, and resets its visitor hash daily, while the session is discarded within 24 hours. Vercel Speed Insights is active independently of consent and collects site performance metrics. The legal basis for this internal measurement is our legitimate interest in understanding how the site performs (art. 6.1.f GDPR): you may object at any time by writing to info@gatemilano.it. Declining the consent-gated tools does not disable our internal measurement, Vercel Web Analytics or Speed Insights.
How to Manage Cookies
You can change or withdraw the Analytics and Marketing categories at any time by opening Cookie Preferences in the footer. You can also disable cookies through your browser settings. Rejecting these categories does not affect browsing or newsletter signup.
To opt out of Google Analytics specifically: Google Analytics Opt-out (opens in new tab)
Contact
For any questions about cookies, write to info@gatemilano.it.For more information, read our Privacy Policy.