Cookie policy

Cookie and storage technologies notice

Last updated: 26 October 2026 · Version 1.1

This notice is provided by OMBRE-1 S.r.l. pursuant to Article 122 of Italian Legislative Decree 196/2003 (the «Privacy Code»), Directive 2002/58/EC and the Guidelines on cookies and other tracking tools adopted by the Italian Data Protection Authority on 10 June 2021. It should be read together with the Privacy Policy.

This notice is published in Italian and English. In the event of any discrepancy, the Italian version prevails.

The ombre1.com website uses only technical technologies necessary for its operation. It uses no profiling cookies, no analytics tools, no advertising pixels and no fingerprinting techniques. For this reason no prior consent is required and no cookie banner is displayed.

1. What cookies and similar technologies are

A cookie is a small text file that a website sends to the user’s device, where it is stored and then sent back to the site on the next visit.

The legislation, however, does not cover cookies alone. Article 122 of the Privacy Code governs any form of storing information, or gaining access to information already stored, in the user’s device. Technologies such as localStorage, sessionStorage and browser-held identifiers therefore fall within its scope. For completeness, this notice lists all of them, not only cookies in the strict sense.

Technical or necessary technologies are those indispensable to deliver a service explicitly requested by the user: consent is not required for these, but the duty to inform remains. Profiling technologies instead serve to build a picture of habits and preferences for advertising purposes and require prior consent. This site uses none.

2. Technologies used by this site

The list below is complete. Every entry is technical in nature and is set either by the controller’s own top-level domain or by the authentication service provider, never by third-party advertisers.

Name Type Purpose Duration
sb-vqvepqpjcrbipsdihulz-auth-token localStorage
Technical, necessary		 Keeps the authentication session active in the catalogue area so the user does not have to re-enter credentials on every page. Set by the Supabase authentication library. It is created only after sign-in and is not present for unregistered visitors. Until sign-out or session expiry.
sb-vqvepqpjcrbipsdihulz-auth-token-code-verifier localStorage
Technical, necessary, transient		 Single-use security value used during sign-in and password reset flows to prevent interception of the authorisation code. Deleted when the flow completes.
ombre1-lang localStorage
Technical (preference)		 Remembers the language chosen by the user (Italian or English). Until the browser data is cleared.
o1-intro-seen sessionStorage
Strictly necessary		 Shows the opening animation only once per visit. Until the browser tab is closed.
o1-wipe sessionStorage
Strictly necessary		 Coordinates the visual transition from one page to the next. Deleted when the next page loads.

3. External resources loaded by the pages

Some pages load images and software components from third-party domains. These resources do not store information on the user’s device and therefore do not fall under the consent requirement of Article 122. The request does, however, transmit the IP address to the provider, which is disclosed here for transparency:

  • dl.dropboxusercontent.com — download of the PDF catalogs, only for registered users who request them.
  • cdn.jsdelivr.net — delivery of the authentication library and of the map data used by the international presence map.

Processing of the IP address alone for the purpose of loading these resources is based on the controller’s legitimate interest in operating the site (Art. 6.1.f GDPR).

4. Technologies this site does not use

For the avoidance of doubt, this site expressly does not use:

  • profiling or marketing cookies;
  • analytics tools such as Google Analytics, Matomo, Plausible or equivalents;
  • conversion or retargeting pixels such as Meta Pixel, LinkedIn Insight Tag or Google Ads;
  • device or browser fingerprinting, nor persistent identifiers for advertising purposes;
  • content embedded from third-party platforms such as YouTube or Vimeo videos, interactive maps or social widgets. The social profile links in the footer are plain hyperlinks and transmit no data before they are clicked;
  • third-party anti-spam systems based on cookies. Form protection relies on a hidden field and a form-fill timing check, which run entirely in the user’s browser, store nothing and contact no external server.

5. How to manage or delete storage technologies

Users may delete or block cookies and storage data at any time through their browser settings:

Because the site uses only necessary technologies, deleting them does not affect access to the content. The only consequence is being signed out of the catalogue area, which will require signing in again.

6. Controller, rights and complaints

The data controller is OMBRE-1 S.r.l., with registered office at Via Giorgio La Pira 23, 51031 Agliana (PT), Italy, VAT number 01925340974, reachable at info@ombre-1.com.

Full details of the purposes, legal bases, recipients, retention periods, the rights exercisable under Articles 15 to 22 GDPR and how to lodge a complaint with the Italian Data Protection Authority are set out in the Privacy Policy.

7. Changes to this notice

Any introduction of new storage technologies will trigger an update to this notice and, where the tools are non-technical, the prior activation of a consent collection mechanism compliant with the Authority’s guidelines. The version in force is always published at this address together with the date it was last updated.