Cookie Policy

Last update: June 30, 2026

This Cookie Policy describes the cookies and tracking technologies used by the Split’n’Share website (hereinafter, the “Site”) and provides the information required by Regulation (EU) 2016/679 (“GDPR”), the ePrivacy Directive 2002/58/EC and the Guidelines of the Italian Data Protection Authority dated 10 June 2021. This policy supplements and must be read together with the Site’s Privacy Policy.

1. What are cookies

Cookies are small text files that websites store on the user’s device to retain information useful for the operation of the site or to improve the browsing experience. Similar technologies (localStorage, sessionStorage, web beacons) are treated under this policy in the same way as cookies.

2. Categories of cookies used

The Site uses three categories of cookies: • Technical cookies (necessary) — essential for the Site to function; no consent is required. • Statistical (analytics) cookies — collect aggregated information about how the Site is used; consent is required. • Marketing cookies — used to measure the effectiveness of advertising campaigns and for retargeting; consent is required. The cookie banner also includes the “Preferences” category, which is currently not in use. Should it be activated in the future, this policy will be updated and the user will be asked to provide a new consent.

3. Detailed list of cookies

TECHNICAL COOKIES (always active) • sb-* — Supabase. Authentication session management and refresh tokens. Duration: session. • NEXT_LOCALE — Split’n’Share. Stores the selected language (Italian/English). Duration: 1 year. • sns_cookie_consent_v2 — Split’n’Share (localStorage). Stores the consent choice expressed by the user. Duration: 12 months. • sidebar_state — Split’n’Share. Expanded/collapsed state of the dashboard sidebar. Duration: 1 year. • Cloudflare Turnstile — Cloudflare, Inc. Cookies/storage used by the CAPTCHA widget present on the contact form and newsletter signup to distinguish real users from bots. Duration: session. STATISTICAL COOKIES (subject to consent) • _ga — Google Ireland Ltd. Unique identifier used by Google Analytics 4 to distinguish users. Duration: 2 years. • _ga_* — Google Ireland Ltd. Maintains the Google Analytics 4 session state. Duration: 2 years. Google Analytics scripts are loaded on the page only after the user has given consent to the “Statistics” category. Without consent, no script is activated and no GA cookie is set. MARKETING COOKIES (subject to consent) • _fbp — Meta Platforms Ireland Ltd. Browser identifier used by the Meta Pixel to measure advertising campaign conversions and for retargeting. Duration: 3 months. • _fbc — Meta Platforms Ireland Ltd. Stores the advertising click data (fbclid parameter) to attribute conversions to Meta campaigns. Duration: 3 months. The Meta Pixel is loaded through Google Tag Manager only after the user has given consent to the “Marketing” category. Without consent, no script is activated and no Meta cookie is set.

4. Legal basis for processing

For technical cookies, the legal basis is the legitimate interest of the Data Controller in ensuring the correct functioning of the Site and the security of the services offered (Art. 6(1)(f) GDPR), as well as the performance of the contract with the registered user (Art. 6(1)(b) GDPR). For statistical and marketing cookies, the legal basis is the user’s consent (Art. 6(1)(a) GDPR), freely revocable at any time.

5. Transfer of data outside the European Union

Some third-party cookies involve a transfer of data to non-EU countries: • Google Analytics 4 — data may be processed by Google LLC in the United States. The transfer takes place on the basis of the Standard Contractual Clauses approved by the European Commission and Google’s adherence to the EU-U.S. Data Privacy Framework. • Meta Pixel — data may be processed by Meta Platforms, Inc. in the United States. The transfer takes place on the basis of the Standard Contractual Clauses approved by the European Commission and Meta’s adherence to the EU-U.S. Data Privacy Framework. • Cloudflare Turnstile — Cloudflare, Inc. is based in the United States and adheres to the EU-U.S. Data Privacy Framework. The Data Controller has adopted the safeguards required by the GDPR to ensure an adequate level of protection.

7. How to manage your preferences

The user may change their cookie preferences at any time through the “Cookie Settings” link in the Site footer. From the preferences dialog the user can: • accept or reject individual categories; • consult the up-to-date list of active cookies for each category; • save their choices or withdraw previously expressed ones. Alternatively, the user can configure their browser to block or delete cookies. Instructions are available in the official documentation of the main browsers: • Google Chrome: https://support.google.com/chrome/answer/95647 • Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer • Apple Safari: https://support.apple.com/guide/safari/sfri11471/mac • Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge Disabling technical cookies may compromise the proper functioning of the Site.

8. Third-party cookies

For cookies installed by third parties (Google, Meta, Cloudflare), the Data Controller acts as a technical intermediary: full information on the processing is available in the respective privacy policies. • Google Analytics — https://policies.google.com/privacy • Meta (Facebook) — https://www.facebook.com/privacy/policy/ • Cloudflare — https://www.cloudflare.com/privacypolicy/ Google Tag Manager. The management and loading of marketing tags (including the Meta Pixel) is handled through Google Tag Manager, a tag management tool provided by Google. Google Tag Manager does not itself set profiling cookies, but enables the loading of third-party tags only after the user’s consent to the relevant category. Payments (Stripe). When purchasing subscriptions or paid services, the user is redirected to Stripe’s secure pages to complete the transaction. Stripe acts as an independent payment provider and may use cookies and similar technologies on its own domain for operation, security and fraud prevention purposes. Such cookies are not set on the Split’n’Share domain during normal browsing of the Site and are governed by Stripe’s policy (https://stripe.com/privacy).

9. Data Controller

The Data Controller for the data collected through cookies is: Ideaware S.r.l.s. Registered office: Via Angelo Compagnone 20, 80078 Pozzuoli (NA), Italy VAT: IT08355291215 Email: splitnshare.com@gmail.com Users may contact the Data Controller to exercise the rights granted by Articles 15-22 GDPR (access, rectification, erasure, restriction, portability, objection).