Cookie Policy
Last updated: March 2026
1. What are cookies
Cookies are small text files that websites send to the user's browser, where they are stored and retransmitted to the same websites on subsequent visits. They are used for various purposes, including authentication, preference storage, and traffic analysis.
2. Cookies used by this website
The website webglobalbuild.it uses technical cookies necessary for the operation of the service, analytics cookies (Google Analytics 4), performance monitoring tools (Vercel Analytics, Speed Insights), and error monitoring tools (Sentry) subject to user consent. It also uses Cloudflare Turnstile as an anti-bot system on login pages. No profiling or advertising cookies are used.
2.1 Technical cookies (necessary)
These cookies are essential for the proper functioning of the website and cannot be disabled.
| Name | Type | Purpose | Duration | Manager |
|---|---|---|---|---|
wgb-portal-session | Technical / Authentication | Maintains the authenticated session for the client portal. Contains a signed JWT with minimal data (client ID, email, project ID). | 7 days | WebGlobalBuild (first-party) |
next-auth.session-token | Technical / Authentication | Maintains the authenticated session for the admin area via NextAuth. | 30 days | WebGlobalBuild (first-party) |
__Secure-next-auth.session-token | Technical / Authentication | Secure variant of the NextAuth session cookie, used in production environments (HTTPS). Functionally identical to next-auth.session-token. | 30 days | WebGlobalBuild (first-party) |
NEXT_LOCALE | Technical / Preference | Stores the language selected by the user (IT or EN). | Session | WebGlobalBuild (first-party) |
cf_clearance | Technical / Security | Set by Cloudflare Turnstile after passing the anti-bot challenge on login pages. Protects authentication forms from automated access. Only activates after failed login attempts. | 30 minutes | Cloudflare (third-party) |
Cloudflare Turnstile — This website uses Cloudflare Turnstile as an invisible CAPTCHA on login pages, activated after failed login attempts. This service verifies the user is human without requiring explicit interaction. Processed data is limited to verification tokens and page interaction data. It does not require user consent as it is a technical cookie necessary for service security. Privacy policy: cloudflare.com/privacypolicy.
2.2 Local storage (localStorage)
The website uses the browser's localStorage (which is technically not a cookie) to store the following information:
| Name | Type | Purpose | Duration | Manager |
|---|---|---|---|---|
cookie_consent | Technical / Consent | Records the user's choice regarding acceptance or rejection of cookies. | Permanent (until manually cleared) | WebGlobalBuild (first-party) |
cookie_consent_date | Technical / Consent | Records the date when the user expressed their cookie preference. | Permanent (until manually cleared) | WebGlobalBuild (first-party) |
theme | Technical / Preference | Stores the theme preference (light or dark mode). | Permanent (until manually cleared) | WebGlobalBuild (first-party) |
wgb-install-dismissed | Technical / Preference | Records whether the user has dismissed the PWA install banner. | Permanent (until manually cleared) | WebGlobalBuild (first-party) |
wgb-chat-session | Technical / Functional | Stores the visitor's chat session ID to maintain conversation continuity. | Permanent (until manually cleared) | WebGlobalBuild (first-party) |
The following values are used exclusively in the admin area:
| Name | Type | Purpose | Duration | Manager |
|---|---|---|---|---|
wgb-admin-sidebar-collapsed | Technical / UI | Stores the admin sidebar state. | Permanent (until manually cleared) | WebGlobalBuild (first-party) |
wgb-email-sidebar-collapsed | Technical / UI | Stores the email sidebar state. | Permanent (until manually cleared) | WebGlobalBuild (first-party) |
wgb-admin-sidebar-groups | Technical / UI | Stores expanded groups in the admin sidebar. | Permanent (until manually cleared) | WebGlobalBuild (first-party) |
wgb-admin-sidebar-width | Technical / UI | Stores the custom width of the admin sidebar. | Permanent (until manually cleared) | WebGlobalBuild (first-party) |
wgb-email-settings | Technical / UI | Stores admin email client settings. | Permanent (until manually cleared) | WebGlobalBuild (first-party) |
wgb-email-folder-rules | Technical / UI | Stores email folder rules. | Permanent (until manually cleared) | WebGlobalBuild (first-party) |
wgb-email-font-size | Technical / UI | Stores the font size in the email client. | Permanent (until manually cleared) | WebGlobalBuild (first-party) |
The website also uses sessionStorage (data cleared when the browser is closed):
| Name | Type | Purpose | Duration | Manager |
|---|---|---|---|---|
estimator_lead | Technical / Functional | Temporarily carries estimator data to the contact form. | Session | WebGlobalBuild (first-party) |
2.3 Service Worker (PWA)
This website installs a Service Worker for PWA (Progressive Web App) functionality. The Service Worker does not collect any personal data: it exclusively manages static asset caching and push notifications intended for the site administrator.
2.4 Analytics cookies (Google Analytics 4)
This website uses Google Analytics 4 (GA4) to collect anonymous data about site usage. Analytics cookies are activated only after explicit consent from the user via the cookie banner. If the user declines, no analytics data is collected.
IP anonymization is enabled. Google Signals and ad personalization are disabled.
Tracked events:
| Name | Type | Purpose | Duration | Manager |
|---|---|---|---|---|
page_view | Analytics | Records each page visit. | GA4 session | Google Analytics (third-party) |
form_submit | Analytics | Records form submissions (contact, estimator, ticket). No personal data from the form is collected. | GA4 session | Google Analytics (third-party) |
chat_open | Analytics | Records when the chat assistant is opened. | GA4 session | Google Analytics (third-party) |
cta_click | Analytics | Records clicks on main navigation buttons (e.g., Request Quote, Client Area). | GA4 session | Google Analytics (third-party) |
scroll_depth | Analytics | Records page scroll percentage (25%, 50%, 75%, 100%). | GA4 session | Google Analytics (third-party) |
time_on_page | Analytics | Records time spent on page (30s, 60s, 120s, 300s). | GA4 session | Google Analytics (third-party) |
blog_read | Analytics | Records when a user has read a blog article to the end. | GA4 session | Google Analytics (third-party) |
Cookies set by Google Analytics 4:
| Name | Type | Purpose | Duration | Manager |
|---|---|---|---|---|
_ga | Analytics / Identification | Distinguishes unique users. | 2 years | Google (third-party) |
_ga_* | Analytics / Session | Maintains session state. | 2 years | Google (third-party) |
_gid | Analytics / Session | Distinguishes users for 24 hours. | 24 hours | Google (third-party) |
Google privacy policy: policies.google.com/privacy. Opt-out tool: Google Analytics Opt-out Browser Add-on.
2.5 Vercel Analytics and Speed Insights
This website uses Vercel Analytics and Vercel Speed Insights for performance monitoring. These tools are activated only after user consent via the cookie banner, in the same way as Google Analytics 4. They do not install cookies in the browser. Collected metrics include: pages visited, referrer, browser, operating system, device type, and Core Web Vitals (LCP, FID, CLS, TTFB). No personally identifiable data is transmitted. Vercel privacy policy: vercel.com/legal/privacy-policy.
2.6 Sentry (error monitoring)
This website uses Sentry (Functional Software Inc.) for application error monitoring and performance tracking. Sentry is activated only after explicit consent from the user via the cookie banner. If the user declines, no data is transmitted to Sentry.
Data collected:
- JavaScript error stack traces
- Browser and operating system information
- Session Replay: anonymized session recordings with automatic text masking and media content blocking
- Performance metrics (load times, Web Vitals)
Sentry does not install cookies in the browser but uses session identifiers to correlate errors. All text data in Session Replay recordings is masked to protect user privacy. Privacy policy: sentry.io/privacy.
3. Consent management
On first visit, an informational banner is displayed that allows you to:
- Accept all cookies
- Reject non-essential cookies
The user's choice determines the activation of analytics cookies (Google Analytics 4), performance monitoring tools (Vercel Analytics, Speed Insights), and error monitoring (Sentry). If the user declines, only necessary technical cookies remain active (including Cloudflare Turnstile for anti-bot protection). Technical cookies cannot be disabled via the banner as they are essential for the service to function.
4. How to disable cookies in your browser
You can manage or delete cookies through your browser settings. Below are instructions for the main browsers:
- Google Chrome: support.google.com/chrome/answer/95647
- Mozilla Firefox: support.mozilla.org/kb/clear-cookies-and-site-data-firefox
- Apple Safari: support.apple.com/guide/safari/manage-cookies-sfri11471
- Microsoft Edge: support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
Disabling technical cookies may compromise the functionality of some parts of the website, particularly access to the client portal and admin area.
5. Further information
For more information about the processing of personal data, please see our Privacy Policy.
For any questions regarding cookies, please contact:
- Email: info@webglobalbuild.it
- Certified email (PEC): salvatoreguccione6@pec.it