Cookies and technical tools

1. Scope and contact

This notice concerns gluisi.it and forms part of the Privacy policy, which sets out the controller, purposes, legal bases, recipients, transfers and how to exercise your rights. The controller is Gianluca Luisi, contactable at [email protected].

2. What cookies are

Cookies are small pieces of data a website asks your browser to store and which may be sent back with later requests. Other tools may store information or read device characteristics without using cookies: the absence of cookies does not, by itself, mean no data are processed.

The distinction depends on the actual purpose. Tools strictly necessary to transmit a communication or deliver a requested service may qualify for the consent exemption under Article 122 of Italian Legislative Decree 196/2003. Profiling, advertising and other non-exempt purposes require valid prior consent. A provider calling a tool “technical” does not, on its own, establish an exemption.

3. Page functionality

In the current version:

• the website code does not create or read cookies and does not use localStorage, sessionStorage or persistent visitor identifiers;
• the language is indicated by the /it/ or /en/ path, without saving a browser preference;
• the music player uses audio files served by the website and keeps controls and progress within the open page, without saving a listening history;
• images, fonts, audio and video are served by the website, without fetching Google fonts or embedded players from external platforms;
• page code does not integrate behavioural analytics, advertising pixels, remarketing, social plugins or fingerprinting systems.

The browser’s normal cache may hold copies of resources to load them faster, depending on server responses and browser settings. The website code does not use it to identify visitors. HTTP authentication for any restricted preview is handled by the browser and server and does not use a website registration cookie.

4. Cloudflare and network diagnostics

Traffic passes through Cloudflare to reach the website’s hosting server. This layer may process technical data even when the pages contain no third-party scripts.

Protection against automated email address harvesting is also enabled: Cloudflare changes how addresses are represented in page HTML and adds a script, served through the same domain, that makes them readable and clickable in the browser. The inspected script reconstructs addresses already in the page without setting cookies or storing visitor identifiers. Loading it involves a normal network request. See the email address protection documentation.

Domain responses include Network Error Logging (NEL) and Report-To instructions. In compatible browsers, these may generate reports of connection failures to a Cloudflare endpoint. The configuration observed on 22 September 2026 gives the browser instructions a lifetime of 604,800 seconds, or 7 days, renewable when the browser receives fresh instructions, and does not request reports of successful connections. This is not a cookie, and the seven days are not the provider’s log retention period.

Reports may describe the affected request, error type and network conditions. Cloudflare states that it derives network and geographical area information from the IP address and removes the IP from the NEL system after processing the request. See the NEL documentation. These diagnostics are distinct from visitor behaviour statistics.

Additional Cloudflare security cookies depend on the features actually enabled and checks presented to a visitor. They are not set by the website code and are not stated here to be definitely present: no Set-Cookie header was found in the sampled HTTP response, but one request cannot establish absence in every circumstance. The official Cloudflare cookie list describes mechanisms available to the provider, not a list of cookies all active on gluisi.it.

5. Consent and the absence of a page banner

The pages do not display a banner for accepting advertising or analytics cookies because those features are not integrated. Consent is not required for tools that actually meet the strict necessity requirements, although information must still be provided. The Italian Data Protection Authority explains this in its cookie FAQs.

The absence of a banner is not an implicit request for consent: visiting a page, scrolling or continuing to browse does not mean accepting optional tools. Enabling any non-exempt tool, including services added at network level, requires a specific assessment and, where necessary, blocking it before consent, offering refusal and providing a simple way to withdraw the choice.

6. Links to other websites

Links to LinkedIn, SoundCloud, Beatport, companies, projects and publications open external websites. They do not embed those services’ widgets or players. Simply loading a gluisi.it page does not activate those platforms’ cookies through a website integration.

When you choose to open an external website, its policies and cookie choices apply. Any preferences for that service are managed with that service directly.

7. Browser settings

Your browser’s privacy and site data settings let you inspect or remove stored cookies and data and restrict future storage. These settings do not delete emails already sent or logs already processed by providers. Blocking tools necessary for security may prevent you from completing checks or accessing the website.

For questions about tools observed during browsing, write to [email protected], identifying the page, browser and tool, without sending passwords or credentials. This notice will be updated when the features or services change.