Cookie Policy

Last updated: 15 October 2026

This policy explains which cookies and similar technologies (localStorage, sessionStorage) propia.it uses, what they are for and how you can choose, under article 122 of the Italian Privacy Code, the Italian data protection authority’s guidelines of 10 June 2021 and the GDPR. The data controller is identified in the Privacy Policy.

1. What they are and how we use them

Cookies are small text files a website stores in your browser; localStorage and sessionStorage are browser storage areas with a similar function. We use them to make the Service work (technical tools, which need no consent) and, only if you accept, to measure how it is used, to record sessions for bug fixing (Statistics category) and to measure how our ads perform with the Meta Pixel (Marketing category). You can accept one category and decline the other.

2. Strictly necessary (no consent required)

NameProviderPurposeDuration
sb-…-auth-token (localStorage)Supabase, on behalf of propiaKeeps you signed in after loginUntil logout or session expiry
propiq_analytics_consent (localStorage)propiaStores your choice about usage statistics and session recordingUntil revoked or site data is cleared
propia_marketing_consent (localStorage)propiaStores your choice about the Marketing category (Meta Pixel)Until revoked or site data is cleared
locale-choice, locale-choice-client (cookies); propia_lang (localStorage)propiaRemember your language choice (Italian or English)12 months
theme (localStorage)propiaRemembers the light or dark themeUntil site data is cleared
Technical session keys (sessionStorage), for example to reload the app after an update or remember an onboarding steppropiaApp operationUntil the tab is closed

3. Usage statistics (only with your consent)

NameProviderPurposeDuration
ph_… (cookie and localStorage)PostHog, hosted in the European UnionUsage statistics: pages, events, device, pseudonymous identifier; session recording with text and media masked12 months
propia_first_touch (sessionStorage)propiaRemembers the campaign or site that brought you (UTM parameters, landing page, referring site) to attribute a signup; also stored with Marketing consent aloneUntil the tab is closed

Before consent PostHog stores nothing on your device and records no usage events.

4. Marketing (only with your consent)

NameProviderPurposeDuration
_fbp (cookie)Meta Platforms Ireland Ltd (Meta Pixel)Browser identifier Meta uses to measure and optimise our ads on Facebook and Instagram: visits, signups, first report, trials and subscriptions90 days
_fbc (cookie)Meta Platforms Ireland Ltd (Meta Pixel)Remembers the click on one of our ads (fbclid parameter) to attribute the signup to it90 days

Before consent the Meta script (fbevents.js) is not loaded and no Meta cookie is stored. With consent, Meta receives the events listed above with pseudonymous identifiers; we also send the signup and the first report from our server (Conversions API), with email and user identifier hashed with SHA-256, and Meta counts each only once. For the collection and transmission of this data Meta Platforms Ireland Ltd is our joint controller; for any further processing it is an independent controller, as described in its privacy policy. If you withdraw consent the Pixel stops at once, the _fbp and _fbc cookies are deleted and our server stops sending events to Meta.

5. Error monitoring and session recording

NameProviderPurposeDuration
Error reports (nothing stored in the browser)Sentry (Functional Software Inc.), data in the European UnionWhen the app hits an error it sends technical details (error type, page, browser, stack trace), never the page content. Always on, in our legitimate interest in a stable Service—
sentryReplaySession (sessionStorage)SentrySession recording for diagnostics, with all text and media masked; started only after consent and stopped when consent is withdrawnUntil the tab is closed; recordings kept at most 90 days

6. Maps

Maps in the app are provided by Mapbox. When a map loads, your browser requests tiles from Mapbox servers, sending your IP address and the area displayed; Mapbox stores no cookies on your device through propia. This processing is necessary for a feature of the Service (contract) and happens only on screens with a map.

7. Payments

Payment takes place on pages hosted by Stripe (checkout and customer portal), not on propia.it. On those pages Stripe sets its own technical and fraud-prevention cookies (for example __stripe_mid and __stripe_sid), described in its cookie policy. propia.it loads no Stripe scripts.

8. How you give and withdraw consent

  • On your first visit the banner asks for consent to two categories: Statistics (usage statistics and session recording) and Marketing (Meta Pixel). “Accept all” turns both on; “Decline” keeps only the necessary tools; “Customize” lets you choose category by category, with both off until you switch them on. Until you choose, nothing non-essential is activated: continuing to browse does not count as consent.
  • You can change your mind at any time: click “Cookie preferences” below, at the bottom of the other legal pages or in the site footer and choose again. If you turn Statistics off after having accepted, statistics stop immediately, session recording stops and the PostHog identifiers stored on your device are deleted. If you turn Marketing off, the Meta Pixel stops, the _fbp and _fbc cookies are deleted and, if you have an account, our server stops sending events to Meta. Withdrawal does not affect the lawfulness of processing already carried out.
  • You can also delete or block cookies and site data from your browser settings; some features, such as staying signed in, may then not work.
  • Your choice is stored in your browser and we do not ask again until you change it, clear the site data, or the purposes change materially.

9. Updates

We update this policy when the tools we use change. The date at the top shows the version in force.