Cookie Policy

1. What this page covers

This page lists the cookies and local storage used on starfinderai.com and in the StarFinder platform, with their purpose and duration. The data controller is [[RAGIONE_SOCIALE]], Via Renato Serra 6, 20148 Milano, Italia.

2. Technical cookies on the website

NEXT_LOCALE — remembers the language you chose, Italian or English, and applies it to the pages that follow. First-party cookie, 12 months. It is written when you switch language and, for visitors arriving from outside Italy, when the site offers the English version.

It is a technical cookie, needed to deliver a service you explicitly asked for: under Art. 122 of the Italian Privacy Code it does not require consent.

3. Cookies in the signed-in area

next-auth.session-token — keeps you signed in. First-party cookie, session duration. Without it you cannot stay authenticated.

next-auth.csrf-token and next-auth.callback-url — protect the sign-in form against forged requests and return you to the right page after signing in. First-party cookies, session duration.

These are technical cookies too and do not require consent.

4. Local storage in the platform

theme — the light/dark preference of the dashboard.

starfinder:* — interface preferences such as the welcome tour already completed, the sidebar state and the active workspace.

These are saved in the browser through localStorage: they stay on your device, are never sent to our servers, and only concern the signed-in area.

5. Usage statistics, advertising and consent

For usage statistics we use PostHog (EU cloud) in cookieless mode: it sets no cookies and no local storage entries, the session identifier lives in the tab's memory and is gone when you close it, and the IP address is discarded rather than stored. It therefore cannot recognise the same visitor from one session to the next. It requires no consent and always runs.

We also use Google Tag Manager (Google Ireland Limited) to manage measurement and advertising tags. The container loads with Google Consent Mode v2 and every storage signal set to “denied”: until you give consent no cookie is written to your device, and Google receives only aggregate signals carrying no identifier.

When you accept, the measurement and advertising tags may set third-party cookies for statistical and advertising purposes. When you reject, they stay switched off. Your choice is recorded in your browser (the sf-consent entry in local storage, see point 4) so that we do not have to ask again on every page.

We use no social network cookies, and we install no advertising pixels other than those managed through the container described above.

6. Managing cookies

You can change your mind at any time: delete the sf-consent entry from your browser's local storage (browser settings, site data section) and on your next visit the banner will ask again, with consent once more revoked by default.

You can change language from the switcher in the site header: the NEXT_LOCALE cookie is simply rewritten with the new preference.

You can block or delete cookies in your browser settings. Removing the technical cookies means losing the session and the preferences: you will have to sign in again and pick the language again.

You can clear local storage from your browser settings, under site data.

7. Changes

We update this page whenever the cookies in use change. The last-updated date is shown at the top.

8. Contact

For questions about this page write to privacy@starfinderai.com. How personal data is processed is described in the Privacy Policy.