This page explains which cookies and similar tracking tools andreacerveson.com uses, what they’re for, and how you can accept them, reject them or change your mind. The controller, providers, data transfers and your rights are covered in the privacy policy.
What cookies are
Cookies are small text files that a website saves in your browser. Other tools, such as browser local storage, pixels and tracking scripts, work in a similar way, so on this page I call them all cookies.
Cookies saved on this site’s domain are first-party cookies. Those saved on a provider’s domain, such as Microsoft’s, are third-party cookies.
How I ask for consent
On your first visit you’ll see a banner, run on CookieScript, that follows the Italian data protection authority’s cookie guidelines of 10 June 2021:
- you can accept or reject all non-essential cookies in one click, and both buttons are equally prominent;
- closing the banner with the X counts as rejecting: you keep browsing with strictly necessary cookies only;
- you can choose category by category, and no box is ticked in advance;
- scrolling the page doesn’t count as consent;
- once you’ve made a choice, the banner won’t appear again for 6 months. You’ll only see it sooner if I change the cookies or providers I use, or if your browser no longer has your choice saved, for example because you deleted your cookies.
Changing your mind
You can change or withdraw your consent at any time from the “Cookie settings” link in the site footer, which reopens the banner. Withdrawal takes effect from that moment.
Google Tag Manager and Consent Mode
Statistics tools are loaded through Google Tag Manager and only run according to your choices.
For Google services, I use Google Consent Mode v2 in advanced mode. If you decline, Google tags don’t read or write cookies, but they may still send Google signals without cookies or identifiers (cookieless pings). These carry technical information such as the date and time, browser type, referring page, your consent status and whether you arrived from an ad. Google uses them to estimate visits and conversions in aggregate. Microsoft Clarity, on the other hand, doesn’t run at all without your consent.
The cookies I use
Strictly necessary
These keep the site running securely and remember your cookie choice. They don’t need consent (Art. 122 of the Italian Privacy Code).
| Cookie or tool | Provider | What it does |
|---|---|---|
CookieScriptConsent |
CookieScript | Remembers your cookie choice |
__cf_bm, cf_clearance and similar, only when needed |
Cloudflare | Detect automated traffic and remember a passed security check |
| Turnstile | Cloudflare | Tells people apart from bots when you use the contact form, by checking technical signals from your browser |
Statistics (only with your consent)
| Cookie | Provider | What it does |
|---|---|---|
_ga, _ga_<ID> |
Google Analytics 4 | Tell visitors and sessions apart for visit statistics |
_clck, _clsk |
Microsoft Clarity | Recognize the visitor and group page views into one session, for heatmaps and recordings |
MUID, CLID and other cookies on Microsoft domains |
Microsoft Clarity | Recognize the browser across sites that use Clarity and across Microsoft services; Microsoft also uses MUID for advertising and analytics |
Marketing (only with your consent)
I don’t currently use advertising cookies or pixels from platforms such as Google Ads or Meta. This category passes your choice on to Google and Microsoft Clarity: if you accept it, they may also use the data for advertising purposes. On top of that, when you send the form your browser turns your email address and your first and last name into an unreadable SHA-256 hash and sends it to Google along with the Google Analytics 4 event. The privacy policy has the details.
The full, always up-to-date table generated by CookieScript’s scan is right below, with how long each cookie lasts.
Blocking or deleting cookies in your browser
Besides the banner, you can block or delete cookies in your browser settings, usually in the privacy, security or cookies section. Here are the official guides for the most common browsers:
If you block all cookies, the site can’t remember your choice, so the banner may show up on every visit. Deleting cookies doesn’t delete data already sent to providers: for that, you can exercise your rights as explained in the privacy policy.
Controller and contact
The data controller is Andrea Cerveson, VAT number IT05467130265. For questions about cookies, email me at andrea.cerveson@gmail.com. Legal bases, providers, transfers and your rights are explained in the privacy policy.