This Cookie Policy describes the cookies and similar identifiers used by sites and apps operated by MANAGEMENT FINANCE VALUE RESEARCH S.R.L.("Skinnalia"), in compliance with the GDPR, the ePrivacy Directive 2002/58/EC and the Italian DPA guidelines (June 10, 2021).
1. What are cookies
Cookies are small text files stored on your device by the website. They keep the site working, remember your preferences, and (with your consent) measure traffic and conversions.
2. Categories we use
2.1 Strictly necessary (always active, no consent)
Required for the site to work: session, authentication, load balancing, CSRF protection, language preference. Do not profile users.
- NEXT_LOCALE β language preference. 1 year. First-party.
- NEXT_FLAG β flag variant (cosmetic). 1 year. First-party.
- sb-β¦-auth-token β Supabase auth session. 7 days. Supabase (Art. 28 processor).
- __cf_bm, cf_clearance β Cloudflare bot protection. Session / 30 min.
2.2 Analytics (consent required)
We use Google Analytics 4 with Consent Mode v2 and IP anonymization to measure aggregate traffic.
- _ga, _ga_* β GA4 identifier. 13 months. Google LLC.
2.3 Marketing (consent required)
We currently don't use third-party advertising cookies (Meta Pixel, Google Ads, TikTok). We'll only enable them after explicit consent and an update of this policy.
3. App-side tracking identifiers
The Skinnalia app also uses non-cookie identifiers (localStorage, sessionStorage), treated by the GDPR as equivalent to cookies when not strictly technical.
- skinnalia.pending_payment β technical marker preserving checkout state if the Mini App is closed. TTL 30 min. Local to the device. Functional.
- skinnalia_referral_* β creator slug, associated coupon and discount percentage. Functional for price calculation.
- skinnalia_referral_tracked β idempotency flag. Functional.
4. Third-party cookies
When interacting with external services (Telegram, Stripe at checkout, Google Sign-In), those parties may set their own cookies under their respective policies:
- Google: policies.google.com/privacy
- Stripe: stripe.com/privacy
- Telegram: telegram.org/privacy
- Cloudflare: cloudflare.com/privacypolicy
5. Managing consent
On first visit a banner lets you accept, reject or customize non-technical cookies. Your choice is stored and editable any time via the "Cookies" link in the footer.
You can also block and delete cookies directly from your browser:
- Chrome: support.google.com/chrome/answer/95647
- Safari: support.apple.com/HT201265
- Firefox: support.mozilla.org
- Edge: support.microsoft.com
Disabling strictly necessary cookies may break the site.
6. Rights and contact
See the Privacy Policy for your rights as a data subject. For any request, emailcorporate@skinnalia.com.
7. Changes
We update this Cookie Policy when our tooling changes. The "last updated" date is at the top.
