Cookie policy
Last updated: 11 August 2026
This page complements the Privacy policy and describes cookies and similar technologies used on www.mandalo.it. Data controller: Franco Ramonda (tax code RMNFNC76T14D205F), sole proprietor of FR Italy, Via Bruno Caccia 9, 12100 Cuneo, VAT 02976040044 — privacy@fr-italy.com.
1. What cookies are
Cookies are small text files stored on your device when you visit a website. They may be first-party (set by mandalo.it) or third-party (set by external services such as Google). Similar technologies (local storage, pixels) are treated the same way for this notice.
2. Technical cookies (always on)
Required for the Service to work. Legal basis: technical necessity / contract performance. No consent required.
- PHPSESSID — user session (login, security, browsing). Duration: session.
- CSRF / form_token — anti-abuse protection for forms. Duration: session.
- mandalo_lang — language preference. Duration: up to 12 months.
- Download unlock cookies (if any) — access to protected files. Duration: limited.
- mandalo_consent — stores your banner choice (Accept / Essential only). Duration: 12 months.
3. Analytics cookies (consent only)
Used for aggregate site usage statistics. Legal basis: consent. If you refuse, they stay off (Google Consent Mode: analytics_storage = denied).
- Google Analytics 4 (gtag, measurement ID G-…) — traffic and usage metrics in aggregate form. Third party: Google. Retention per GA4 settings and Google policies.
4. Marketing / campaign measurement cookies (consent only)
Used to measure advertising campaigns and conversions (e.g. Pro subscription after payment). Legal basis: consent. If you refuse, they stay off (ad_storage / ad_user_data / ad_personalization = denied).
- Google Ads (gtag, account AW-18383278127) — global site tag and, only after successful payment confirmation, a Purchase conversion event with amount, EUR currency and transaction ID. Third party: Google.
5. Third-party cookies in specific flows
During Google login, PayPal/Pagami checkout or anti-spam checks, third parties may set cookies or receive requests (Google OAuth, PayPal, Pagami, Cloudflare Turnstile if enabled). They are needed for those features or governed by the providers’ policies.
6. How we manage consent
On first visit we show a banner. “Essential only” keeps technical cookies. “Accept” also enables Analytics and Google Ads via Google Consent Mode v2. You can change your mind by deleting the mandalo_consent cookie and reloading, or by writing to privacy@fr-italy.com.
7. Rights and contacts
To exercise GDPR rights (access, erasure, objection, withdraw consent) contact privacy@fr-italy.com. Complaint: Italian DPA — www.garanteprivacy.it.