Note legali

Informativa sui cookie

Tutti i cookie impostati da questo sito e tutte le altre informazioni memorizzate nel tuo browser.

Ultimo aggiornamento: 2026-09-23

Si tratta di una prima bozza in attesa di revisione da parte di un avvocato abilitato in Québec. Il testo descrive le effettive funzionalità di questo sito, verificate sulla base del codice e del database dello stesso, ma non è stato sottoposto a verifica dal punto di vista della sufficienza giuridica e nulla di quanto in esso contenuto deve essere interpretato come una certificazione di conformità alla Legge 25 del Québec o a qualsiasi altra normativa.

Questo documento non è ancora stato tradotto nella tua lingua. Il testo in inglese riportato di seguito è la versione ufficiale. Le traduzioni vengono sottoposte a revisione prima della pubblicazione, in modo che una traduzione automatica di un documento legale non venga mai presentata come se fosse stata verificata.

The short version

This site sets two cookies of its own: one remembers which language you are reading in, and one remembers what you chose about cookies. The sign-in system sets a few more, and those are what make an account possible.

There is no advertising and no third-party tracking on this site. There is now analytics, in two parts — Google Analytics, and a measurement system this site built and runs itself — and both are switched off until you turn them on together. Nothing analytics-related loads before you do, and there is a control for it at the foot of every page.

The list below is not a guess from reading the code. A browser was pointed at the live site and asked what it was actually holding, and this is the answer it gave.

Cookies this site sets

xa_locale — the language you are reading in, as a two-letter code. It is set when you choose a language with the switcher, and when you open a page whose address carries a language, so that returning to the site's front page later brings you back to the language you were in rather than to English. It lasts a year, it is only sent over a secure connection, and it holds a language code and nothing else — no identifier, and nothing that could be used to recognise you.

Every page of this site works with this cookie blocked. You will get English at addresses that do not name a language, and the switcher will still change language for the page you are on; only the memory of your choice is lost.

xa_consent — what you chose about cookies, and the date you chose it. It holds nothing else: no identifier, and nothing about you. It exists so that your choice is honoured on every page and so that we can say when it was made. It lasts a year, and it is itself a necessary cookie — without it there is no way to remember that you said no.

Cookies the sign-in system sets

Signing in is handled by Clerk, and its software runs on every page of this site so that a page knows whether you are signed in before it draws anything. That means a few of its cookies are present whether or not you have an account:

• __client_uat — whether there is a signed-in session and when it last changed. For a visitor who is not signed in, its value is zero.
• __client — Clerk's handle for your browser, set on Clerk's own subdomain of this site (clerk.xtirpa-academy.com).
• __session — appears once you are signed in. It is what keeps you signed in from one page to the next.

Cloudflare protects Clerk's service from automated abuse and sets two cookies of its own on that same subdomain while doing it: __cf_bm, which lasts half an hour, and _cfuvid, which lasts only as long as your browser session. Neither is an advertising cookie and neither is used to build a profile of you.

These are the cookies an account needs in order to work, so there is nothing to consent to or refuse other than not using the site. Most of this site is public and needs no account.

Your choice, and how to change it

The first time you arrive, a single line at the foot of the page asks what you want. It offers three things, all of them one click and all of them the same size: accept everything, refuse everything that is not necessary, or open the settings and decide category by category. Refusing is not harder than accepting, and nothing on this site is withheld while you decide.

There are two categories and no more, because two is what this site has.

• Necessary — the cookies described above. These cannot be switched off: the site could not keep you signed in or protect the sign-in service from automated abuse without them.
• Analytics — two systems under one switch: Google Analytics, and this site's own first-party measurement described below. Google Analytics can recognise a returning visitor and follow which pages they read; this site's own measurement cannot — it has no cookie and keeps nothing from one visit to the next. Nothing analytics-related is loaded before you allow it: no script is in the page, Google is not contacted, and nothing is sent to this site's own measurement either. If you turn it off again, Google's script is removed and its own off switch set, the cookies it set are deleted, and this site's own measurement stops sending and clears what it had kept in your browser.

Whatever you choose, you can change it at any time: Cookie settings, at the foot of every page. Turning something off takes effect on the page you are looking at rather than at the next visit.

Nothing is ticked for you. Until you have answered, the Analytics switch is off whichever way you reach it; afterwards the panel shows you what you actually chose, so that changing your mind starts from the truth rather than from a blank.

Cookies Google Analytics sets, if you allow it

These appear only after you have switched Analytics on, and they are deleted again if you switch it off.

• _ga — the identifier Google Analytics uses to tell one browser from another, so that two visits from you are not counted as two people. It lasts two years.
• _ga_PP3BG802VK — the same thing for this particular site, and it also keeps the state of your current visit. The letters and numbers are this site's measurement id, not anything about you.

What Google receives is the ordinary information a web request carries — your IP address, your browser, which page you opened — and it is used to count and group visits. Google holds that under its own terms, and our privacy policy says so alongside everything else we share.

Google keeps that data for 14 months, for both the individual events and anything associated with a returning browser. That is a different thing from how long the cookies last, and the two numbers are genuinely different: the _ga cookie sits in your browser for two years, while the data it produced is deleted by Google after 14 months. Clearing the cookie ends the first straight away; the second is Google's timer and is set on this site's analytics property.

This site's own measurement of how pages are used

Separately from Google Analytics, this site can run its own first-party measurement of how the public pages are used — which parts of a page get clicked, how far people scroll, whether a form field causes trouble, whether a page is slow, whether something breaks. It is off by default, it is switched on by the same Analytics choice above, and as of this writing it has not been turned on.

What it records, in plain terms: which page, in which language; whether you are on a phone, a tablet or a computer, by screen width only; roughly where on a page a click lands and a short technical description of what was clicked (its tag and role — never the words on it, never a link's address); how far down a page you scrolled and how long you stayed looking at it; clicking the same spot several times in quick succession, or clicking something that visibly does nothing; whether a form field was used and left empty or filled in, and whether the form was sent or abandoned; a technical error message if the page breaks, with anything identifying removed from it first; and how quickly the page loaded and responded.

What it never records, under any circumstance: anything you type — a form field reports only whether it was left empty or filled in, never its contents; your IP address; your browser's identifying details beyond the coarse screen- width category above; the address bar's full address, including anything after a question mark or a hash sign; any cookie; and anything at all about a page you reach only by signing in, including every page of My Dashboard and the admin area. It is measurement of the public pages, full stop.

What ties your visits together, and what does not: a random code is kept in your browser's temporary session memory for as long as the browser tab stays open, so that several things you do on one visit can be understood as one visit rather than several unrelated ones. It is not a cookie, it is not kept once the tab closes, and the next time you visit — even a minute later in a new tab — you are a new, unconnected visit as far as this is concerned.

How long it is kept: the detailed record of what happened is kept for 90 days and then deleted. A day-by-day count of how many of each kind of event happened — with no detail about any single visit — is kept for 25 months, which is what a once-a-year comparison needs.

How to turn it off: the same Analytics choice as Google's — refuse it, or switch it off again in Cookie settings at the foot of any page. Doing so stops anything further being sent immediately and clears the session code described above.

What that means for information about you

Because Clerk's software runs on every page, Clerk receives the ordinary details of a web request — your IP address, your browser's user agent — for every page you open here, signed in or not. That is disclosed in our privacy policy along with everything else, and it is the only service that sees anything about you simply for reading a page.

Other storage on your device

Some things are kept in your browser's own storage rather than in cookies. These are not sent to us.

• Whether you chose the light or the dark theme.
• Whether you have already seen the one-line notice about cookies.
• If you use the administration panel, whether you left its sidebar collapsed and which of its groups you folded shut.
• Clerk keeps a copy of its own configuration, so that a page does not have to fetch it again on every visit.
• If you use the offline shelf on the placement tool, the 3D models and pages you asked to keep are stored in your browser so they work without a connection. You choose what is kept, and clearing your browser data removes it.
• If this site's own behaviour measurement is switched on, a random code identifying this visit only, for as long as the browser tab stays open — see above. Not a cookie, and gone the moment the tab closes.

Third parties

There are no third-party trackers, advertising tags, social media buttons or embedded players on this site. Loading a page of it contacts two hosts: this site, and the authentication subdomain described above. Nothing else.

The typefaces are served from this site's own domain rather than from a font service, so reading a page does not tell a font provider that you did.

Where a page links out to a 3D model hosted by Vectary, that is an ordinary link: nothing is loaded from them unless you follow it, and once you do you are on their site under their terms.

Why the banner is one line and not a wall

Your answer changes exactly one thing: whether analytics runs — Google's and this site's own together. Everything else described on this page is either the memory of a language you chose or a requirement of signing in, and none of it can be switched off without breaking the site.

The switch was built before the analytics rather than after it, because the law that applies here requires anything capable of profiling a person to be off until that person switches it on. Building it first meant analytics arrived already behind it instead of being retrofitted behind it once it was running.

The banner does not cover the page, it does not trap you, and it does not make refusing harder than accepting — one click either way, same size, same place. Those are the three things a consent dialogue is usually wrong about.

If you refuse, nothing is withheld. Every page, every document and the whole of your account work exactly the same.

Turning cookies off

Every browser can block or delete cookies, per site or entirely. Doing so here will lose your remembered language, will lose your recorded cookie choice — so you will be asked again — and will sign you out if you have an account. Nothing else on this site depends on them.

If anything on this page is wrong or unclear, write to techweb@xtirpa.com.