1. Scope
Cookies and similar technologies at buonoconfetto.eu are used by Confetalia OÜ, registration number 17271565. “Cookies” here also includes local storage, pseudonymous browser and session identifiers, tags, pixels and tracking links. Questions: info@buonoconfetto.eu.
2. Categories and legal basis
**Necessary.** Session, security, authentication, language, consent memory, cart and checkout functions. They are required to provide the service requested by the user, are not used for advertising and cannot be disabled in the consent tool. A browser identifier used to remember the consent choice does not start analytics before analytics consent.
**Preferences.** Optional convenience and personalisation choices. Disabled until separate consent.
**Analytics.** With consent, Confetalia OÜ first-party analytics and configured Google Analytics 4 measure visits, page and product interactions, UTM tags, referring domain and statistical attribution of goals and orders. The full referrer URL and landing-page query string are not retained. Disabled until analytics consent.
**Marketing.** With consent, Google Ads, marketing tags configured through Google Tag Manager and Meta Pixel may measure advertising, conversions or retargeting. Advertising click identifiers such as gclid or fbclid are read and stored encrypted only with this consent. Disabled until separate marketing consent.
3. Technologies and duration
- store session, security, cart and authentication storage: Confetalia OÜ; necessary; normally until the session ends or for the limited period needed by the account or cart; - consent choice and pseudonymous browser identifier: Confetalia OÜ; necessary; up to 12 months; - first-party analytics: Confetalia OÜ; analytics; raw events up to 90 days and session or attribution data up to 180 days; - `_ga` and `_ga_<container-id>`: Google Analytics 4 / Google Ireland Limited; analytics; normally up to 24 months or the shorter configured period; - `_gcl_au` and Google advertising identifiers: Google Ireland Limited; marketing; normally up to 3 months or the service's configured period; - `_fbp` and Meta advertising identifiers: Meta Platforms Ireland Limited; marketing; normally up to 3 months or the service's configured period.
Google Tag Manager is a tag manager and may not itself set a cookie; a tag loaded through it belongs to the category stated above and runs only after the matching consent. Providers may change cookie names or lifetimes; the actual lifetime will not exceed the value displayed by the browser or the provider's current documentation.
4. Making and changing a choice
On the first visit, all non-essential categories can be accepted or rejected with equal ease and selected separately by purpose. An unticked choice, scrolling or continuing to browse is not consent. Choices can be changed at any time through “Privacy settings” in the footer. Withdrawal stops future collection and triggers deletion or anonymisation of related data as described in the Privacy Policy. A Global Privacy Control signal forces marketing off.
5. Third-party access and transfers
Google Ireland Limited or Meta Platforms Ireland Limited receive data only when the relevant service is configured and consent is given. Their services may involve processing outside the European Economic Area under an applicable transfer safeguard. More information: https://policies.google.com/privacy and https://www.facebook.com/privacy/policy/. Deleting cookies in the browser may also remove the cart, login or saved consent choice.
6. Changes
If configured services or retention periods change materially, we update this policy and request fresh consent where required. The current version and publication date appear on this page.