Cookie Policy

1. What Are Cookies & Web Storage?

Cookies are small alphanumeric text files placed on your computer, tablet, or smartphone when you visit a website or web portal. They are widely utilized by online platforms to ensure security, authenticate authorized users, and remember institutional preferences across sessions.

In addition to traditional HTTP cookies, modern progressive web applications (PWAs) utilize HTML5 LocalStorage and SessionStorage to store encrypted authentication session tokens and cached offline preferences.

2. How VeraPiù Uses Cookies

VeraPiù operates on a privacy-first engineering philosophy. We only use cookies where technically required to deliver functional software or evaluate platform reliability.

Zero Third-Party Advertising Trackers: We do NOT employ third-party advertising cookies, cross-site tracking pixels (such as Meta Pixel or TikTok tracking tags), or data broker scripts on any VeraPiù portal.

3. Categories of Cookies We Use

A. Strictly Necessary & Security Cookies

Mandatory

Essential for the basic functioning of the website and educational portals. These enable secure session login, CSRF anti-forgery protection, rate-limiting, and tenant routing. Without these, the software cannot function.

• sb-access-token, sb-refresh-token: Encrypted Supabase JWT tokens verifying user login state.

• __cf_bm: Cloudflare bot management and DDoS protection cookie.

• vp_csrf: Cross-Site Request Forgery security validation.

B. Functional & Preference Cookies

Preferences

Used to remember institutional display selections, chosen language/locale, sidebar collapse states, and visual contrast modes.

• vp_locale: Stores user language selection (e.g. English, Italian, Arabic).

• vp_theme: Retains dark/light mode preference across navigation.

C. Platform Performance & Telemetry

Performance

Aggregated, anonymized performance metrics (e.g., Core Web Vitals, server response latencies, and JavaScript exception logs) used strictly to diagnose bugs and improve platform responsiveness.

• _vercel_insights: Anonymized real-user performance latency metrics.

4. Third-Party Service Providers

Certain verified cloud service providers may set cookies or storage entries strictly in connection with the specialized services they render:

Cloudflare: Provides global network edge security, Web Application Firewall (WAF), and malicious bot filtering.
Stripe: Sets fraud-prevention telemetry cookies on institutional checkout and billing invoice pages.
Supabase: Manages secure encrypted authentication sessions for verified portal accounts.

5. Managing & Disabling Cookies

You have the legal right to decide whether to accept or reject non-essential cookies. You can manage or delete cookies directly within your web browser settings:

Google Chrome Cookie Guide→Apple Safari Cookie Guide→Mozilla Firefox Cookie Guide→Microsoft Edge Cookie Guide→

Note: Disabling strictly necessary cookies may prevent authentication to your institutional portal.

6. Policy Updates & Inquiries

We may update this Cookie Policy periodically to reflect technological advancements or regulatory developments.

For any questions concerning our use of cookies or local storage technologies, please contact our Data Protection Office at dpo@verapiu.com.