Cookie policy
Last updated: 03/11/2026
Who we are and what this policy covers
This policy is provided by SWEBY di Ricci Manuel, VAT no. IT03180080735 ("SWEBY"), data controller, under Article 13 of Regulation (EU) 2016/679 (GDPR), Article 122 of Italian Legislative Decree 196/2003 (Privacy Code) and the Italian Data Protection Authority's Guidelines on cookies and other tracking tools of 10 June 2021.
It covers the public website sweby.it and the client area console.sweby.it. For the processing of personal data in general, the privacy policy applies; this document supplements it.
What cookies and similar technologies are
Cookies are small text files that a website stores in the visitor's browser and that the browser sends back to the site on later visits. Similar technologies, such as the browser's local storage, can keep information on the device in a comparable way.
Technical cookies are needed to run the site or to provide a service the user asked for (for example signing in to a reserved area) and do not require consent. Profiling cookies and non-anonymised analytics tools observe the user's behaviour and require prior consent.
In short
SWEBY uses technical cookies and technical storage only. We do not use profiling cookies, visitor analytics, advertising pixels, social network plugins, or third-party embedded maps or videos. The site's fonts are served from our own servers: visiting the site does not trigger requests to external font services.
For this reason the site does not ask for consent: the notice shown on your first visit is for information only.
Public website sweby.it
The site's pages do not set cookies of their own. Your browser only keeps, in local storage, the fact that you closed the cookie notice, so that it is not shown again. This value stays on your device, is not sent to us or to third parties and contains no personal data.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| sweby-site-cookie-notice | Local storage, technical | Remembers that the cookie notice was closed | Until cleared from the browser |
Client area console.sweby.it
The client area uses technical session cookies that are strictly necessary for signing in and for account security. They are set only when you sign in, they are protected (sent over encrypted connections only and not readable by scripts) and they are not used for profiling. Without these cookies you cannot sign in to the client area.
| Name | Purpose | Duration |
|---|---|---|
| __Secure-better-auth.session_token | Keeps you signed in and securely identifies the session | 7 days, renewed with use; until the browser is closed if you do not choose "Remember me" |
| __Secure-better-auth.session_data | Signed copy of the session data, avoids repeated checks on every page | 5 minutes |
| __Secure-better-auth.dont_remember | Records that you did not choose "Remember me", so the session ends when the browser is closed | Until the browser is closed |
| __Secure-better-auth.two_factor | Links the two steps of two-factor verification during sign-in | A few minutes, the time needed to complete verification |
| __Secure-better-auth.trust_device | Remembers that you marked the device as trusted, so the second code is not asked at every sign-in | 30 days, only if you choose this option |
| __Secure-better-auth.admin_session | Used only by SWEBY staff while providing support on a client's account | Until the support operation ends |
Third-party services
Cloudflare: the website and the client area are delivered through the network of Cloudflare, Inc., which ensures their availability and protects them against attacks and automated traffic. For this security purpose only, Cloudflare may set technical cookies such as __cf_bm (30 minutes) or cf_clearance (after an anti-bot check, for the duration set by the check). The contact form may be protected by the Cloudflare Turnstile anti-spam check, which does not use profiling cookies.
Payments: when you pay an order by card or PayPal you are taken to the payment pages of Stripe or PayPal, which are those providers' websites and not SWEBY's. On those pages the providers may use their own cookies, including for fraud prevention, under their own policies, which we invite you to read on their websites.
Some of these providers are based outside the European Union: any transfer of data takes place with the safeguards provided by the GDPR, as described in the privacy policy.
How to manage or delete cookies
You can view, block or delete cookies and local storage data from your browser settings (for example Chrome, Firefox, Safari or Edge, in the section on privacy and site data), at any time.
If you block technical cookies the public website keeps working, but you will not be able to sign in to the client area; if you clear local storage, the cookie notice will appear again.
Your rights and contacts
To exercise the rights under Articles 15-22 GDPR (access, rectification, erasure, restriction, objection, portability) or for any question about this policy, write to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Changes to this policy
We update this policy when the cookies or services we use change. The date of the last update is shown at the top of the page. Should we ever introduce cookies that require consent, we will ask for it before using them.