Technical notice
Cookie Policy
The ITBI website uses first-party cookies required for authentication, security and remembering a language explicitly selected by the visitor, plus a session-scoped browser-storage flag for dismissing the optional News language suggestion. It does not use advertising, analytics or cross-site tracking cookies.
Cookie and Storage Notice
First-party cookies
ITBI_SESSION and ITBI_LOCALE
ITBI_SESSION is an opaque first-party identifier used to maintain authentication and protect account and form activity. It does not contain a password or readable user profile. It is HttpOnly and SameSite=Lax. The Secure attribute is controlled by server configuration and is required for production HTTPS.
ITBI_LOCALE is a first-party preference cookie set when a visitor explicitly selects English, French or Italian. It stores only the selected locale code and is not used for analytics, advertising or cross-site tracking.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| ITBI_SESSION | Authentication, session management and security | Browser session; server-side expiry after 12 hours of inactivity | Strictly necessary |
| ITBI_LOCALE | Remember an explicitly selected interface language | 1 year | Functional preference |
Browser storage
Functional session storage
The application does not store account data in localStorage or IndexedDB. sessionStorage is used only for ITBI_NEWS_LANGUAGE_SUGGESTION_DISMISSED, a session-scoped flag recording that a visitor dismissed the optional language suggestion shown on an English News article. It contains no account data, analytics identifier or tracking information and is cleared with the browser session. Language itself remains represented in the page URL; an explicit language choice is remembered in the ITBI_LOCALE cookie, and for signed-in accounts the preferred locale is kept in the server-side account record.
CSRF tokens are issued by the server for protected requests and associated with the server session; the application does not create a separate CSRF cookie.
External requests
Maps and social links
Pages containing a public map load map styles or tiles from OpenFreeMap and OpenStreetMap infrastructure. Those providers receive normal technical request information. ITBI does not set or read ITBI cookies through these map requests.
Instagram, Facebook and X appear as ordinary links, not embedded tracking widgets. The social platform receives information only after a visitor clicks its link.
Non-essential technologies
Analytics and advertising
ITBI does not currently use analytics, advertising or cross-site tracking cookies. ITBI_LOCALE is used solely to remember a language explicitly selected by the visitor and is not used for tracking.
If non-essential tracking technologies are introduced in the future, this policy and the site's consent mechanism will be updated where required.
Controls
Browser settings
A visitor can delete or block cookies using browser settings. Blocking ITBI_SESSION will prevent sign-in and may stop protected forms from working correctly. Blocking ITBI_LOCALE only prevents the browser from remembering a manually selected language.
This technical register will be updated if the site's storage or third-party services change.