Cookie Policy
Information on the cookies used on the Certiblok website.
Created: October 1, 2024 · Last revised: June 23, 2026
What are cookies?
This Cookie Policy explains what cookies are and how we use them, the types of cookies we use — that is, the information we collect through cookies, how this information is used and how to manage cookie settings.
Cookies are small text files used to store small pieces of information. They are saved on your device when the website is loaded in the browser. These cookies help us make the website work properly, make it more secure, improve the user experience and understand how the website performs, allowing us to analyse what works and what needs improvement.
How do we use cookies?
Like most online services, our site uses first-party and third-party cookies for several purposes. First-party cookies are mostly necessary for the site to work correctly and do not collect any personally identifiable information.
Third-party cookies on our site mainly serve to understand how the site performs, how you interact with it, to keep our services secure, to provide advertising relevant to you and, more generally, to deliver a better and more refined user experience, helping speed up your future interactions with our site.
Data Controller
Data Controller: Certiblok S.r.l., Piazza della Libertà 14, 38121 Trento (TN), Italia, VAT IT02633560228. Privacy contact: Gianluigi Michelotto — info@certiblok.com. Certified email (PEC): certiblok@legalmail.it. DPO: info@certiblok.com.
Types of cookies we use
Below are the cookie categories used on this site, with the purpose of each and the specific services currently active.
Necessary
Necessary cookies are essential for the basic functions of the website and the site will not work as intended without them. These cookies do not store any personally identifiable information.
| Service / Cookie | Purpose | Provider | Retention |
|---|---|---|---|
| certiblok_consent | Stores the user's cookie consent choices (categories accepted/rejected). | First party (Certiblok) | 1 year |
| certiblok_visitor_id | Anonymous identifier used only to de-duplicate entries in the consent log. | First party (Certiblok) | 2 years |
| sb-* (Supabase Auth) | Authentication session (only set on the reserved area after login). | Supabase (Lovable Cloud) | Session / authentication lifetime |
| cb_lang_pref (localStorage) | Stores the language chosen by the user via the navbar switcher, so subsequent visits automatically open the preferred language version. | First party (Certiblok) | localStorage, until manually cleared |
| cb_lang_auto (sessionStorage) | Technical flag that prevents the automatic browser-language detection from running more than once per session on the first visit. | First party (Certiblok) | Browser session |
Statistics
Analytics cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source and more.
| Service / Cookie | Purpose | Provider | Retention |
|---|---|---|---|
| Internal analytics (no cookie, only server-derived hash) | First-party, cookieless and anonymous web analytics. No cookies or localStorage are written; a non-reversible daily visitor hash is derived server-side from a rotating salt + IP + User-Agent and used only to de-duplicate visits within the day. | First party (Certiblok) | Raw events: 26 months. Daily aggregates: retained for trend analysis. |
Functional
Functional cookies help perform certain features such as sharing the website's content on social media platforms, collecting feedback and other third-party features.
| Service / Cookie | Purpose | Provider | Retention |
|---|---|---|---|
| certiblok_agent_v1 (localStorage) | Stores the AI assistant session id and the latest chat messages on the user's device so the conversation persists across page changes. No third-party scripts are loaded by the widget. | First party (Certiblok) | localStorage, until manually cleared |
| AI assistant rate-limit (no cookie, server-side hash) | Server-side, non-reversible daily hash of IP+UA used only to enforce the per-IP daily message limit for the AI assistant. Raw IP is never persisted. | First party (Certiblok) | 1 day |
Marketing
Advertising cookies are used to provide visitors with personalised ads based on the pages previously visited and to analyse the effectiveness of the advertising campaign.
| Service / Cookie | Purpose | Provider | Retention |
|---|---|---|---|
| No services currently active in this category. | — | — | — |
Data retention and proof of deletion
The retention periods for cookies and server-side technical logs used by this site are listed below and are enforced automatically by scheduled database jobs. Each execution is recorded in an immutable audit log with a SHA-256 integrity hash.
· Cookie certiblok_consent: 12 months (browser expiry) · Cookie certiblok_visitor_id: 24 months (browser expiry) · Server-side consent log (proof of consent): 10 years, aligned with the ordinary contractual prescription term · Analytics raw events: 26 months · AI assistant conversations: 3 months · AI assistant rate-limit: 7 days · Admin action log: 10 years · AI generation logs: 12 months.
On request, the Data Controller can provide a signed PDF compliance report proving that these deletions have actually been executed within the declared windows.
How to manage your consent and your cookies
You can change your cookie preferences at any time using the link at the bottom of this page. This will let you reopen the consent banner and change your preferences or withdraw your consent immediately.
In addition, browsers offer different ways to block and delete the cookies used by websites. You can change your browser settings to block or delete cookies. Below are the links to the support pages explaining how to manage and delete cookies in the main web browsers.
- Chrome: https://support.google.com/accounts/answer/32050
- Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac
- Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox?redirectslug=delete-cookies-remove-info-websites-stored&redirectlocale=en-US
- Internet Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc