Legal document
Cookie Policy
Last updated: October 2026
1. What cookies are
Cookies are small text files that websites save on your device while you browse. They let the site remember your preferences and, in some cases, collect data about your activity for statistical or advertising purposes.
2. Cookies used on this site
This is the full list of cookies this site may save on your device. It is written and checked by hand, one by one, not by an automated scanner. Where the duration is not ours to decide, we say so.
| Name | Set by | What it does | Duration |
|---|---|---|---|
_iub_cs-s4659078 | iubenda | Technical. Records the choice you made on the banner, so you are not asked again on every page. | 12 months |
_iub_previous_preference_id | iubenda | Technical. Keeps a reference to your previous choice, so it can be recognised if you come back. | 12 months |
dc_xid | davidecosmai.com | Profiling. A random code that lets Meta and TikTok recognise the same person across visits, in encrypted form. It is created only after your marketing consent, and deleted if you refuse or withdraw it. | 90 days |
_fbp | davidecosmai.com and Meta | Profiling. The browser identifier Meta uses to measure ad results. It is created only after your marketing consent. | 90 days |
_fbc | davidecosmai.com and Meta | Profiling. Stores the identifier of the ad you arrived from. It exists only if you came from an ad and gave marketing consent. | 90 days |
fr | Meta, on the facebook.com domain | Profiling. A third-party cookie Meta sets on its own domain, not on this site: you will only find it if your browser accepts third-party cookies. Meta decides how long it lasts. | Set by Meta |
__obref | davidecosmai.com and OpenAI | Profiling. The identifier the ChatGPT Ads pixel uses to recognise your browser between visits and measure ad results on ChatGPT. It is created only after marketing consent, and the pixel deletes it if you withdraw consent. | 365 days |
__oppref | davidecosmai.com and OpenAI | Profiling. Stores the click reference OpenAI appends to the address when you arrive from an ad shown in ChatGPT, so a request sent days later can be linked back to that ad. It exists only if you arrived from an ad, is created only after marketing consent, and the pixel deletes it if you withdraw consent. | 30 days |
__oaiq_consent | OpenAI | Technical. Records the choice you made about advertising cookies, so a refusal still holds after you reload the page. The same value is also written to the browser's local storage (entry oaiq_consent). It stays after withdrawal: it is what makes the withdrawal effective. | 30 days |
__cf_bm | OpenAI, on the bzr.openai.com and bzrcdn.openai.com domains | Technical. Third-party cookies Cloudflare sets on OpenAI domains when the ChatGPT Ads pixel loads its code: they tell automated traffic from human traffic. They are not set by this site. | 30 minutes and session |
lastExternalReferrer | Meta | Profiling. Not cookies but local storage entries, written by Meta's script: they record which site you arrived from, and when. | Until you clear your browsing data |
dc_corso | davidecosmai.com | Technical. Recognises your permission to read a free course you requested access to. It does not track browsing. | 12 months |
dc_admin | davidecosmai.com | Technical. Concerns the site owner only: it keeps the session open in the private panel. It is never created for site visitors. | 30 days |
_tt_enable_cookie | davidecosmai.com and TikTok | Profiling. A cookie the TikTok pixel writes on every load. TikTok does not list it in its own documentation and states no purpose for it: we saw it appear by loading the pixel, and declare it here for that reason. It is created only after marketing consent. | 90 days |
_ttp | davidecosmai.com and TikTok (also on the tiktok.com domain) | Profiling. The identifier the TikTok pixel uses to recognise the browser from one visit to the next and measure ad results on TikTok. It is created only after marketing consent. If you withdraw it we delete the copy written on this site; the one on TikTok's own domain is governed by TikTok. | 90 days |
ttclid | davidecosmai.com and TikTok | Profiling. Stores the code of the TikTok ad you arrived from, so the visit and, if you submit a form, the request can be attributed to the right campaign. It exists only if you arrived from an ad and gave marketing consent. | 1 day |
ttcsid | davidecosmai.com and TikTok | Profiling. TikTok declares them as advertising cookies, used to measure and improve campaign performance and to personalise the experience on TikTok. They are created only after marketing consent. | 90 days |
_ga | davidecosmai.com and Google | Statistics. Identifier Google Analytics uses to recognise the browser from one visit to the next and count distinct visitors. Created only after consent to measurement; if you withdraw it we delete it. | 2 years |
_ga_8GLCLNM0ZT | davidecosmai.com and Google | Statistics. Keeps the state of the current session for Google Analytics: when it started and how many pages were viewed in a row. Created only after consent to measurement; if you withdraw it we delete it. | 2 years |
_gcl_aw | davidecosmai.com and Google | Advertising. Keeps the identifier of a click on a Google ad, to attribute to that ad a request sent in the following days. Exists only if you arrive from a Google ad and gave advertising consent; if you withdraw it we delete it. | 90 days |
Meta's advertising cookies are also described in the document registered with iubenda, our consent management system. The rest you will find only here: who sets each one is in the “Set by” column.
In addition to these, anyone granted access to a free course receives a technical cookie (dc_corso, 12-month duration) whose only purpose is to recognise the reading permission for that single course. It does not track browsing, is not shared with third parties, and requires no prior consent, since without it the requested service cannot be provided. You can delete it from your browser settings: you will lose access to the lessons until you reopen the link received by email.
The site also writes an identifier of its own (dc_xid, 90-day duration): it lets Meta and TikTok recognise the same person across visits, so that a request sent today can be linked to the ad seen last week. Neither platform receives the code itself, only its encrypted fingerprint. It is a profiling cookie in every sense: it is created only after your marketing consent and is deleted if you refuse or withdraw it. It contains neither your name nor your email address — it is a random code.
3. How to manage or withdraw consent
You can change or withdraw your consent at any time using the following methods:
- Cookie banner: the first time you visit the site, a banner appears that lets you accept or reject, separately, measurement cookies and profiling cookies. If you've already expressed a preference, you can reset it by clearing your browser's browsing data (see the next point).
- Browser settings: you can block or delete cookies directly from your browser settings. Keep in mind that disabling technical cookies could break some of the site's features.
- Meta opt-out: you can disable Meta tracking for advertising purposes through Facebook's ad settings or through Your Online Choices.
- TikTok opt-out: in the European Economic Area and Switzerland TikTok provides a "Personalized ads" toggle that turns them off altogether, and a page to disconnect advertisers from data collected off TikTok: both are in its privacy centre. On this site it is enough to withdraw marketing consent from the cookie panel: without that consent the pixel does not start and its cookies are deleted.
4. Regulatory references
This cookie policy is drafted in compliance with:
- EU Regulation 2016/679 (GDPR)
- Legislative Decree 196/2003 (Italian Privacy Code) and subsequent amendments
- Guidelines on cookies issued by the Garante per la protezione dei dati personali, the Italian data protection authority (June 10, 2021)
5. Contact
For any question about the use of cookies on this site write to d.cosmai@gmail.com.
For information about the processing of personal data in general see the Privacy Policy.
Note: this document is an informational draft. Review by a legal professional is recommended before final publication.