Cookie Policy
Last updated: August 2026. Generic draft, subject to legal review.
1. What cookies are
Cookies are small text files a website stores on a visitor's device to make the site work correctly or to remember preferences.
2. Our approach
We put cookies into two groups. Strictly necessary cookies are always on: without them you could not sign in, pay, or see the site in your language. Everything else — measurement and marketing — is optional and switched off until you allow it from the banner shown on your first visit. Until then none of those tools loads and none of their cookies is written.
No measurement or marketing tool ever runs in the member area, whatever you choose. That is where your child's profile, missions and uploaded artwork live, and those pages are not measured.
Counting visits without cookies. Whatever you choose, we count visits to the public pages on our own server: the date, the page, the language, whether the device is a phone or a computer, and the name of the site you arrived from. Nothing is written to your device, nothing is sent to anyone else, and your IP address is not kept: it is used, together with the browser, only to compute a one-way code with a random value that changes every day, so that two visitors can be told apart within a day without anyone being identified and without one day being linked to the next. Legal basis: our legitimate interest in knowing how many people visit the site. This counting never runs in the member area either. The aggregate figures are kept for 14 months.
3. Strictly necessary cookies (always on)
| Name | Purpose | Duration |
|---|---|---|
| barti-session | Keeps you signed in and links requests to the same user. | Session / 120 minutes |
| XSRF-TOKEN | Protects site forms against cross-site request forgery. | Session / 120 minutes |
| barti_lang | Remembers which language you are reading in ("it" or "en"). Contains no personal data. | 12 months |
| barti_consent | Records your choice on the cookie banner, so we do not ask again on every page. | 6 months |
| remember_web_* | Set only if you choose "Remember me" when signing in. | 12 months |
4. Optional cookies (only with your consent)
These load only if you agree, and only on public pages.
Measurement. Helps us see which public pages are actually useful to families.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _clck, _clsk | Microsoft Clarity | Usage statistics and anonymous recording of interactions on public pages. | Up to 12 months / 1 day |
| _ga, _ga_* | Google Analytics (via Google Tag Manager) | Aggregate visit statistics. | Up to 24 months |
Marketing. Helps us tell whether our adverts reach the right people.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta (Facebook) | Advertising campaign measurement. | Up to 3 months |
Your choice is passed to Google as a consent signal (Google Consent Mode): until you agree, every storage and advertising signal is set to denied. If you accept measurement, only the signal that statistics need is granted; the advertising signals stay denied either way, because we do not use Google for advertising.
5. Changing your mind
You can change or withdraw your choice at any time using the "Cookie settings" link in the footer: the banner comes back and you can choose again. You can also delete or block cookies in your browser settings; blocking the strictly necessary ones may stop you signing in, completing a payment, or saving your language.
6. Payments
When you proceed to payment you are taken to Stripe, which sets its own cookies to process the transaction and prevent fraud; Stripe's cookie notice applies there.
7. Contact
For questions about this cookie policy, write to contact@playbarti.com.