No cookies for you, no banner.

This is an English translation provided for convenience. The legally binding text is the Italian version.

1. Cookies and browser storage

A cookie is a small piece of data that a website asks the browser to save, and that the browser automatically sends back to the server with every later request. It is this last part that makes cookies suited to recognising and following people.

There are also other kinds of storage, called localStorage and sessionStorage: they stay in the browser and are not sent to any server, but the rules are the same as for cookies, because they look at substance rather than technical names. That is why you will find them listed below one by one, even though they are not cookies.

The distinction that matters is a different one: technical tools, which are needed to make the website work or to respect a choice made by the user, do not require consent; measurement, advertising and profiling tools require it in advance, and that is why banners exist.

2. Browsing the website gives you no cookies

None. You can check: open your browser's developer tools, usually with the F12 key, and look at the list of cookies for this address. It is empty, and it stays empty even after going through every page and filling in the forms.

The reason is that the pages you see are static: there is no session to maintain and no basket. The forms prepare a message, open it in WhatsApp or in your email app and send a copy to our management system — as explained in sections 2 and 3 of the privacy policy — but delivering a request needs no cookie, and that copy leaves none in your browser.

The only exception sits behind a password and is described in section 4: if you don't have an account with us, that part of the website doesn't concern you and that cookie is never written for you.

3. The two technical storage items, by name

This is the complete list. There are no others.

dp-theme — day or night mode

Type

localStorage (not a cookie: it is not sent to any server)

Content

a single word: day or night

Purpose

to remember the mode you chose with the button at the top, so you don't have to do it again on every page

When it is created

only when you press that button: if you don't touch it, it is not written

Duration

it stays until you delete it

Consent

not required: it records an explicit choice of yours about how the website looks

dp-intro — the opening animation

Type

sessionStorage (not a cookie, and it never leaves the browser)

Content

the number 1

Purpose

to remember that the opening screen with the logo has already been shown to you, so you don't see it again on every page you open

Duration

it deletes itself when you close the browser tab

Consent

not required: it is strictly technical

Neither of them contains information about you: not a name, not an identifier, not a number that would allow you to be recognised next time. Neither of them leaves your browser.

4. The only cookie: the staff-only area

At the address /gestionale there is the area the owner and staff use to update the stock. You log in with an email address and password, and staying logged in from one page to the next requires a cookie: it is the only one on the website.

dpauto_sessione — the session of whoever has logged in

Type

technical session cookie, set by our own domain (not by third parties)

Content

a random number, with no meaning in itself. It does not contain the name, email address or role of the person who logged in: that data is on our server, and the cookie is only used to find it

Purpose

to keep the session open after logging in, so you don't have to log in again on every page

When it is created

only when someone enters a correct email address and password. Visitors to the website never receive it

Where it is sent

only to pages under /gestionale. When browsing the public pages the browser does not send it

Duration

12 hours, renewed while you keep working. Anyone who ticks “Stay logged in” when logging in keeps it for 30 days instead, renewed every time it is used: it is the choice of the person logging in, and the box stays unticked until they tick it. In both cases it disappears when you press “Log out”, and changing the password closes every other open session

Consent

not required: it is strictly necessary to provide a service expressly requested by the user, namely access to their own account

It is not used to measure anything and tells us nothing about people browsing the public website. It is the same kind of cookie that keeps you logged in to an email account.

5. No third-party tools

To be explicit about what is not there:

• no Google Analytics and no third-party analytics service: the counts we make are our own and stay on our servers. How they work is explained in section 6 below;
• no advertising pixel or tag from Meta, Google or anyone else, and therefore no audience to retarget;
• no embedded social buttons: the ones at the bottom of the page are ordinary links;
• no chat service;
• the video of a vehicle, where there is one, does not start on its own. On the vehicle's page you see one of our photos with a play triangle on top: until you press it, nothing is sent to YouTube, not even your IP address. If you press it, from that moment the frame belongs to YouTube (Google group) and its rules apply: we use the youtube-nocookie.com address, which does not place profiling cookies, but playback still happens on their side. Just reload the page to go back to the photo. The “Video of the car” button you see in the showroom does not embed anything: it is an ordinary link and takes you to YouTube, like the ones in section 7;
• the map at the bottom of the home page does not start on its own. The “Come and visit us” box shows the address and a button: until you press “Show the map”, nothing is sent to Google, not even your IP address. If you press it, from that moment the map belongs to Google and its privacy policy applies: it is your choice, made with a click, and reloading the page takes you back to the empty box. The “Get directions” button, on the other hand, is an ordinary link: it takes you off the website, like the ones in section 7;
• no external fonts. This deserves a line: the fonts used to come from Google, and that alone was enough to share your IP address with a third-party company just by opening a page. They are now hosted on the website. It is the technical reason why this page can say that no consent is needed.

6. The counts we make ourselves

Knowing how many people look at a vehicle, and which website they came from, is useful to us for a concrete reason: working out whether a subscription to a listings portal is worth what it costs. We measure it ourselves, without handing anything over to anyone.

When you open a page of this website, or when you press WhatsApp, the phone number or “Send”, a line reaches our server with:

• which action was taken — visit, WhatsApp, phone, form submission;
• which vehicle and which page of our website;
• only the name of the website you came from, for example “subito.it”: never the full address, which could contain the search you had typed;
• the labels we add ourselves to the links published on listings portals, to tell which listing the visit came from;
• a random number that lives as long as you keep the browser tab open and is only used to avoid counting you ten times. It is not a cookie, it does not follow you from one visit to the next and it disappears when you close the page.

A clarification about the forms: when you submit one, together with that counting line the request you wrote also reaches us, and goes into our management system so that both owners can read it. That is not a count: it is your contact data, and how we handle it is explained in the privacy policy, sections 2 and 3. This section is only about the numbers.

We do not record your IP address, we do not save which browser or phone you use, we do not build any profile and we do not cross-reference these counts with your data. Looking at them, we know that a certain vehicle was opened forty times and that ten of those visits came from a portal: we do not know who you are, and we have no way of finding out. That is why the measurement does not require your consent and does not change what is said above: no cookies, no banner.

7. When you leave the website

The “WhatsApp” buttons, the phone number and the email addresses are links: they do not load anyone else's code into our pages and do not send anything until you press them. When you do press them, though, you leave this website and the rules of the service you land on apply — WhatsApp, your email app, your phone. We have no say over that processing; for WhatsApp, the matter is explained in section 4 of the privacy policy.

8. How to view and delete that storage

You don't need to ask us: it is in your browser and you are in control of it.

• To view it: developer tools (F12), Application or Storage tab, Local storage entry.
• To delete it: your browser's “clear site data” or “clear browsing data” function removes it together with everything else. You will find it in the privacy settings of Chrome, Firefox, Safari and Edge.
• To stop it being written at all: private or incognito browsing deletes it when you close the window. Deleting dp-theme has only one effect: the website starts again in night mode.
• The cookie in section 4, if you have logged in, is removed by pressing “Log out” in the reserved area: that way it doesn't just disappear from the browser, it also stops being valid on our server.

Blocking browser storage altogether does not stop you from using the website: you only lose the day mode choice, which you will have to make again each time.

9. Why there is no banner

Because there would be nothing to ask. Prior consent is required for tools that identify or follow you, and for resources loaded from third parties that involve sharing data: there are none here. The two storage items in section 3 are technical, and the rules expressly say they do not require consent.

The count in section 6 is no exception, and not because of a generous interpretation on our part: it writes nothing in your browser that lasts beyond the open tab, it does not record your IP address, it does not recognise you on your next visit and it stays on our servers. It counts how many times a vehicle was looked at, not who looked at it.

Nor does the cookie in section 4 require it, and not because of a loophole: it is strictly necessary to provide a service expressly requested by the user. Someone who enters an email address and password is asking precisely to stay logged in; a banner asking for permission to remember that on the next page would protect no one.

A banner in this situation would be a nuisance that protects nothing, and above all it would train people to press “accept” where there is nothing to accept. We preferred to remove the causes rather than add a request.

10. If something changes in future

If the website ever uses an analytics tool, a map that loads on its own, a video or any resource loaded from third parties without you asking for it, a prior consent banner will be needed and this page must be rewritten before that tool goes live. It is also written in the website's code, next to the fonts, so that whoever works on it after us will find it.

Last updated: 12 September 2026.