Cookie Policy

1. Data controller

The controller is {{TITOLARE_RAGIONE_SOCIALE}} ({{TITOLARE_FORMA_GIURIDICA}}), with registered office at {{TITOLARE_SEDE_LEGALE}}, VAT number {{TITOLARE_PIVA}}. For any matter you may write to {{TITOLARE_EMAIL_PRIVACY}}.

2. What this page is for

This page lists everything the public mayo website (mayoeasyorder.com) stores on your device, and nothing else. If an entry is not here, the website does not create it.

For the full description of which data we collect and why, see the Privacy Policy: this page deals solely with storage on your device.

One important premise: the website needs no cookies whatsoever in order to work. There is no account area, there are no forms, there is no shopping cart. The only thing we write to your device is the record of the choice you made on the banner, and it is described under point 4.

3. How you give and how you withdraw consent

On your first visit a banner appears offering three possibilities: accept everything, refuse everything, or choose category by category. There are two categories and they are independent:

analytics — browsing statistics (governs Google Analytics 4);
marketing — advertising campaign measurement (governs the Meta pixel and the advertising click identifiers).

Accepting one never activates the other.

You can change your mind at any time through the permanent link “Manage cookie preferences” present in the footer of every page of the website. It reopens the same panel and the new choice replaces the previous one.

Until you express a choice, and if you choose to refuse, no consent-dependent tool is loaded: the Google and Meta scripts are not even downloaded.

4. mayo_site_consent — where your choice is kept

This is the only entry the website writes to your device.

Record of the mayo_site_consent entry: name, technology, who creates it, when it is created, purpose, legal basis and duration.
Name	`mayo_site_consent`
Technology	Browser `localStorage` — it is not a cookie: it is never sent to the server and does not travel with your network requests
Who creates it	The website itself (first party)
When it is created	Only at the moment you express a choice on the banner. Before that it does not exist
Purpose	Remembering your choice, so that the banner is not shown to you again on every page, and keeping the proof of consent required by Art. 7(1) GDPR
Legal basis	Technical necessity of giving effect to the choice you expressed, and the obligation to demonstrate it
Duration	It remains until you withdraw your choice or clear your browsing data. It has no automatic expiry

Its content is exactly the following, and nothing else:

decision — your choice for each of the two categories: analytics true or false, marketing true or false;
decidedAt — the moment at which you chose, as a date and time in ISO-8601 UTC format;
bannerVersion — the version of the banner text that was shown to you when you chose (currently 2026-07-31.1). It serves to distinguish a choice expressed against the current text from one expressed against an earlier text: if we change the categories or the information in the banner, the version changes and we ask you to make your choice again.

It contains neither your name, nor an identifier relating to you, nor a sequential number allowing you to be recognised from one visit to the next.

If your browser prevents the write (for example in private browsing), the choice applies for the current session and the banner reappears on your next visit. We do not log the error and we do not show you any warning.

How to delete it. You can remove it from your browser settings, together with website data. Once deleted, the banner reappears on your next visit.

5. Tools that store nothing on your device

The website uses two measurement tools provided by Vercel — @vercel/analytics and @vercel/speed-insights — which are always active and not subject to consent.

We mention them here so that you know they exist, but they do not install cookies and write nothing to your browser: that is why they do not appear in the list under point 4, which concerns storage on your device. How they work, which data they collect and the reason why they are not subject to consent are described in full in section 4 of the Privacy Policy.

6. Third-party cookies activated only after your consent

If — and only if — you grant consent to a category, the website requests the corresponding provider's script. From that moment it is that provider, not the website, that sets its own cookies on your device, with names, durations and purposes determined by it.

Third-party scripts loaded after consent, by category: provider, resource requested and the provider's privacy notice.
Category you must grant	Provider and tool	What gets loaded	Provider's privacy notice
`analytics`	Google — Google Analytics 4	`https://www.googletagmanager.com/gtag/js`	`https://policies.google.com/privacy`
`marketing`	Meta — Meta pixel	`https://connect.facebook.net/en_US/fbevents.js`	`https://www.facebook.com/privacy/policy`

Before consent these requests do not go out at all: the first script of every page declares all consent signals as denied, and neither of the two scripts is present in the document.

If you withdraw consent, the cookies already set by the provider remain on your device until you delete them from your browser settings: what changes immediately is the consent signal transmitted to the provider, which from that moment is no longer authorised to use them for the purposes withdrawn.

7. What happens if you refuse

The website works exactly as before. There is no content reserved for those who accept, there are no banners repeated on every page and there is no penalty of any kind. Refusing is a legitimate choice and we treat it as such.

8. Changes

If the categories or the tools described here change, we update this page, increment the banner version and ask you to make your choice again.

Last updated: {{DATA_ULTIMO_AGGIORNAMENTO}}.