Legal
Cookie policy
What this site stores in your browser, why it stores it, and how you decide what runs. Draft — pending legal review.
Draft — pending legal review. This page describes our current intent and the categories of storage this site uses. Exact cookie names and durations will be confirmed once the consent tooling is wired. Where a specific detail is not yet settled, it is marked below. The data controller is NPM2 Solutions Srl [TODO: legal review — registered address and VAT number].
What this covers
"Cookies" here means cookies and equivalent browser storage — local storage, session storage, and similar identifiers. The rules are the same regardless of the technical mechanism: anything that is not strictly necessary to deliver the page you asked for requires your consent before it runs.
The categories we use
We group what the site stores into three categories. Only the first runs without asking you.
- Strictly necessary. Needed to serve the site securely and remember basic choices you make on this page — including your cookie preference itself. These do not require consent, because the site cannot function without them.
- Functional. Remember non-essential preferences, such as your language or interface choices, so the site behaves the way you left it. These run only with your consent.
- Analytics. Help us understand how the site is used in aggregate so we can improve it. We use PostHog, hosted in the European Union. Because PostHog is present, at least one analytics cookie or identifier exists when analytics are enabled. These run only with your consent.
Cookie categories in detail
The table below lists categories, their purpose, and rough retention. Exact per-cookie entries will be published once the consent banner is in place. [TODO: confirm exact cookies, names, and durations once consent tooling is wired]
| Category | Purpose | Consent | Rough duration |
|---|---|---|---|
| Strictly necessary | Secure delivery of the site and storage of your cookie preference | Not required | Session to ~12 months [TODO: confirm] |
| Functional | Remember non-essential preferences such as language and interface state | Required | ~6 to 12 months [TODO: confirm] |
| Analytics (PostHog, EU) | Aggregate usage measurement to improve the site | Required | Up to ~12 months [TODO: confirm] |
How consent works
Analytics and functional storage do not run until you allow them. When the consent tool is active, you are asked once, up front, and nothing in those two categories loads before you choose. Declining is as easy as accepting, and declining leaves the site fully usable — only the strictly necessary category runs. [TODO: confirm — consent banner not yet deployed]
Changing or withdrawing your choice
You can change your mind at any time. Withdrawing consent stops the affected categories from running going forward and is as straightforward as granting it was. You can also clear cookies directly in your browser settings, which resets your preference and prompts you again on your next visit.
Privacy policy
How we handle personal data more broadly — including what analytics data is processed, on what legal basis, and your rights over it — is described in our privacy policy. [TODO: confirm privacy policy path]
Legal basis and guidance
This policy is intended to align with the ePrivacy Directive and the GDPR, and with the cookie guidance issued by the Italian data protection authority (the Garante per la protezione dei dati personali). Under that guidance, non-necessary cookies and identifiers require prior, informed, freely given consent, and refusing must be no harder than accepting. [TODO: legal review — confirm applicable authority and jurisdiction]
Questions
For questions about this policy, write to privacy@worgify.com. [TODO: confirm contact address for privacy matters]