Cookie policy
This page describes cookies and similar technologies that may be generated by www.webinvest.it and by landing pages of domains using WEBINVEST nameservers, directly or through third-party providers integrated into the site.
Some cookies are technical and necessary for security, login, checkout and correct operation. Others, such as analytics, advertising and behaviour analytics tools, are used only according to the preferences expressed through the consent banner where required by applicable law.
The names and duration of third-party cookies may change over time based on updates by the respective providers. For this reason the table also includes “likely” cookies or cookie families normally generated by the services used by the site.
Cookies used or potentially generated
Webinvest technical cookies
| Name | Purpose | Duration | Provider |
|---|---|---|---|
wi_user |
Keeps the user signed in to the public account area. | 30 days | Webinvest, first party |
wi_csrf |
Anti-CSRF token used to protect forms, login, registration and reserved actions from unauthorised submissions. | Session | Webinvest, first party |
wi_admin |
Authentication session for the admin panel, restricted to Webinvest staff. | 7 days | Webinvest, first party |
PHPSESSID / wi_csrf admin |
Technical session used in the admin area for CSRF protection and internal features. | Session | Webinvest, first party |
Security and infrastructure technical cookies
| Name | Purpose | Duration | Provider |
|---|---|---|---|
__cf_bm |
Bot management, DDoS protection and traffic security. | About 30 minutes | Cloudflare |
cf_clearance |
Stores the result of anti-bot checks or security challenges. | Up to 1 year | Cloudflare |
_cfuvid |
Traffic limiting and technical request identification in Cloudflare environments. | Session | Cloudflare |
Consent and privacy cookies
| Name | Purpose | Duration | Provider |
|---|---|---|---|
wi_parking_consent |
Remembers, on each domain, the choice between necessary cookies only and analytics statistics. The value is signed and contains no identifying data. | 180 days | Webinvest, first party |
FCCDCF / FCNEC |
Store preferences expressed through the Google Funding Choices / CMP banner. | Variable, generally up to 13 months | |
euconsent-v2 / addtl_consent |
IAB TCF consent strings potentially used by the CMP to communicate choices to advertising vendors. | Variable | Google / IAB TCF |
WEBINVEST parking landing pages
Parking landing pages do not load Google Analytics, Clarity, advertising or other third-party trackers. No analytics event is recorded before a choice is made. “Reject” and “Accept analytics” are shown with equal prominence; rejecting does not restrict browsing.
After acceptance, WEBINVEST records first-party server-side statistics: visited domain and path, source and its path, any search terms and UTM parameters transmitted in the request, language and general device technical data, bot classification, and clicks. IP and user agent are not retained in the analytics database but are transformed through HMAC into a pseudonymous identifier that changes daily. Events are deleted within 90 days.
The choice is remembered by the technical wi_parking_consent cookie, with Secure, HttpOnly and SameSite=Lax attributes. You can withdraw or change it at any time by selecting “Privacy choices” in the landing-page footer; after withdrawal, no new analytics events are recorded.
Google Analytics 4 analytics cookies
Google Analytics 4 is configured with Consent Mode v2: consent is denied by default until the user enables the relevant category in the banner.
| Name | Purpose | Duration | Provider |
|---|---|---|---|
_ga |
Distinguishes users and visits for aggregate statistics. | Up to 2 years | |
_ga_* |
Maintains session state for a specific GA4 property. | Up to 2 years | |
_gid / _gat* |
Google analytics cookies that may be set for user distinction or request throttling. | From 1 minute to 24 hours |
Google AdSense / DoubleClick advertising cookies
Google AdSense may use cookies and identifiers to serve ads, measure performance, limit frequency and, where authorised, personalise ads.
| Name | Purpose | Duration | Provider |
|---|---|---|---|
__gads / __gpi / __eoi |
Ad delivery, measurement and frequency capping. | Up to 13 months | |
IDE / test_cookie |
DoubleClick cookies for ads, measurement and cookie support checks. | From a few minutes to 13 months | Google / doubleclick.net |
NID / ANID / DSID |
Preferences, security and personalisation for Google services or ads, where applicable. | Variable, generally up to 13 months |
Microsoft Clarity cookies
Microsoft Clarity helps understand how users interact with the site through heatmaps, aggregated recordings and usability statistics.
The Clarity script is not loaded until the user consents to usability analytics. Without consent, Clarity is not started.
| Name | Purpose | Duration | Provider |
|---|---|---|---|
_clck |
Stores a Clarity user identifier to connect visits from the same browser. | Up to 1 year | Microsoft Clarity |
_clsk |
Connects multiple page views in the same session. | About 1 day | Microsoft Clarity |
CLID / ANONCHK / MR / MUID / SM |
Microsoft cookies used for technical identification, analytics, synchronisation and measurement. | From session to about 1 year | Microsoft |
Stripe payment cookies and technologies
Payment checkout is handled by Stripe. When the user proceeds to payment, Stripe may set technical and anti-fraud cookies necessary for transaction security.
| Name | Purpose | Duration | Provider |
|---|---|---|---|
__stripe_mid |
Fraud prevention and technical device recognition in checkout. | About 1 year | Stripe |
__stripe_sid |
Temporary management of the payment session. | About 30 minutes | Stripe |
m / stripe.csrf / similar Stripe cookies |
Security, fraud prevention, checkout integrity and transaction protection. | Variable | Stripe |
How to manage consent and cookies
You can change or withdraw consent at any time through the banner or privacy settings available on the site, when displayed. Withdrawal does not automatically delete cookies already present in the browser: you can remove them from your browser settings.
You can also manage Google ad personalisation via Google Ad Settings and opt out of Google Analytics by installing the opt-out browser add-on.
Quick links to the main browsers' instructions:
Third-party providers
- Cloudflare Cookie Policy
- Google Cookie Policy
- Google - data use on partner sites
- Microsoft Privacy Statement
- Stripe Cookie Policy
Changes to this cookie policy
This cookie policy may be updated if the services, providers or technologies used by the site change. For personal data processing please also see the Privacy policy.
Contact
For any question about cookies or data processing: [email protected] or certified email (PEC) [email protected].