CercaPosta

Cookie Policy

Version: 1 August 2026

1. Controller

WpWeb S.r.l., via Livorno 60, 10144 Turin, Italy, tax and VAT ID 07292240012. Privacy contact: privacy@wpweb.com.

2. Necessary technologies

The site stores “necessary only” or “analytics” in browser localStorage so the banner does not appear on every visit. This preference is never used to track you. The authenticated app uses tokens and local data required for sessions, security, language and theme. Consent is not required for technologies strictly necessary to deliver a requested service.

When Cloudflare Turnstile protects the contact form, it may use technical signals and strictly necessary technologies to distinguish people from automation. WpWeb does not use Turnstile for advertising.

The Web session uses the necessary __Host-cp_web_refresh cookie, protected by HTTPS and unreadable to scripts, lasting for the session duration configured by the service. cp-browser-session stores only a random value to coordinate tabs. Access tokens remain in memory and are not saved in localStorage.

3. Optional Umami analytics

Umami is self-hosted on European infrastructure and loads only after “Accept statistics”. It measures aggregate page views, source, device and essential interactions to understand site use. We do not use advertising identifiers, remarketing or profiling. The legal basis is consent.

Category Technology Purpose Duration
Necessary cercaposta-consent-v1 in localStorage remember your choice until cleared in the browser
Analytics self-hosted Umami script aggregate site statistics while consent is active; data follows the Umami configuration

4. User-requested services

Google, Stripe and PayPal may use their own technologies when you voluntarily choose their login or payment flow and leave CercaPosta for their pages. Their own policies apply; they are not loaded by the marketing site for advertising.

5. Change your choice

Use “Cookie preferences” in the footer. “Necessary only” withdraws analytics consent and “Accept statistics” grants it. Withdrawal blocks future loads; clear site data in your browser to remove stored local data. We also pass the browser's Do Not Track preference to Umami.

6. More information

See the Privacy Policy for legal bases, recipients, retention and rights.