Cookie Policy

3.1 Technical cookies (necessary)

These are cookies that are strictly necessary for the operation of the site and the provision of the service. They do not require the user's prior consent pursuant to Article 122 of the Privacy Code.

oasi_csrf — First-party cookie that protects the submission of forms from forged requests. Duration: 12 hours; it may be renewed when you use the site. It is not an advertising identifier. Restricted areas, if used, also require technical authentication tools.

oasi-route-theme — First-party cookie that remembers the graphic theme of the page, so as to display it immediately with the right colours. Duration: up to 30 days. It is not an identifier and is not used to measure browsing.

Remote assistance, if activated — The first-party cookies oasi_inspect_nonce (15 minutes) and oasi_inspect_admission (1 minute) protect the opening of anonymous inspection. In authenticated sessions, oasi_inspect_sid and oasi_inspect_reuse last 1 hour and make it possible to resume the authorised session. oasi_inspect_active keeps the panel status visible for 15 minutes, or 1 hour in the authenticated path; on its own it does not authorise access. The durations run from the moment the cookie is set and may be renewed when you request the service again. These are technical support tools, not advertising preferences. The expiry of these cookies does not result in the deletion of the support logs on the server.

3.2 Local storage for assistance

The support panel stores the session state in the tab's sessionStorage, with keys based on oasi-inspect and separated by project and user; the content expires with the session and is removed when you end it. The oasi-inspect-pos preference in localStorage remembers where you moved the support button and remains until the site data is deleted. These functions are not used to profile browsing.

3.3 Internal statistical measurements

The site collects internal measurements on the delivery and loading of pages, on reading depth and on certain interactions. It uses requests to its own server and temporary identifiers of the individual view, without a persistent statistics cookie. The counts are processed in the Twipping management system. Request logs may nevertheless contain personal data: the absence of cookies does not mean the absence of processing.

Statistics are not automatically exempt from consent because they are called “anonymous”: treating them as equivalent to technical tools requires the conditions of the Garante's Guidelines of 10 June 2021. The site's configuration disables measurement linked to a named individual and the sending of advertising data to Meta or Google.

3.4 Advertising, external resources and old preferences

The site is configured without advertising or remarketing cookies. Images may be loaded from media.oasi.io; links to social networks open separate services when you select them. Old preferences saved in twipping_consent or oasi_cookie_consent do not reactivate the discontinued purposes and can be deleted from the browser settings.