Cookie Policy — Huntair
Version 1.0 — effective from [●●/●●/2026]
Courtesy translation. This English version is provided for convenience only. The legally binding version is the Italian one, available by selecting Italiano at the top of this page. In case of any discrepancy, the Italian version prevails.
1. Controller
LEAF S.r.l. Semplificata, Via Vincenzo Pacifici 17, 00019 Tivoli (RM), Italy, Tax Code/VAT 15954051007, REA RM-1626132, e-mail privacy@huntairseo.com, certified e-mail (PEC) leafsrlsemplificata@pec.it.
2. What cookies and similar technologies are
Cookies are small text files that the website saves on your device through your browser. By "cookies" we also mean similar technologies: browser local storage (localStorage, sessionStorage), tracking pixels and tags, session identifiers, SDKs and third-party scripts. They can be first-party (set by huntairseo.com) or third-party (set by the providers listed below), session (deleted when the browser is closed) or persistent (remaining for the stated duration).
3. Categories and legal basis
| Category | Purpose | Consent | Legal basis |
|---|---|---|---|
| Technical / necessary | Making the website and Platform work: authenticated session, security, interface preferences, storage of cookie choices | Not required | Art. 122 Italian Privacy Code; Italian Data Protection Authority Guidelines of 10 June 2021 |
| Statistics / analytics | Measuring visits, page views, traffic sources, conversions and feature usage, to understand how the website is used and improve it | Required | Consent (Art. 6.1.a GDPR) |
| Experience / customer journey | Recording browsing sessions in pseudonymous form (with automatic masking of text fields), heatmaps, A/B tests, onboarding paths, support chat and in-app messages | Required | Consent (Art. 6.1.a GDPR) |
| Marketing / profiling | Measuring campaign conversions, showing you relevant ads on other websites and platforms (remarketing), building custom and lookalike audiences, personalising offers and communications based on your interests and usage | Required | Consent (Art. 6.1.a GDPR) |
4. List of cookies and tools
Durations are those declared by the providers and may vary. "Status: active" means the tool is in use as of the date at the top of the document; "planned" means it has been prepared but is not yet active and does not set cookies.
4.1 Technical / necessary (always active)
| Name | Provider | Purpose | Duration | Status |
|---|---|---|---|---|
huntair_session |
Huntair (first-party) | Authenticated session cookie, HttpOnly, Secure, SameSite=Strict |
12 hours | active |
theme, sidebar state, active project |
Huntair (localStorage) |
Interface preferences; not sent to the server | Until deleted | active |
huntair_consent |
Huntair (first party) | Remembering your cookie choices (per category) and the version of the notice accepted; choices are also logged anonymously (truncated IP) as proof of consent | 6 months | active |
| Hosting provider security and load-balancing cookies | Heroku (Salesforce) | Traffic routing and protection | Session | active |
Payment provider cookies during checkout (__stripe_mid, __stripe_sid) |
Stripe | Fraud prevention at checkout | 1 year / 30 minutes | active (payment pages only) |
4.2 Statistics / analytics
| Name | Provider | Purpose | Duration | Notice and opt-out | Status |
|---|---|---|---|---|---|
_ga, _ga_<ID> |
Google Analytics 4 (Google Ireland Ltd.) | Distinguishing users, measuring sessions, pages, events and conversions. IP address truncated on Google's side, user-level data retention 14 months | 24 months | policies.google.com/privacy · tools.google.com/dlpage/gaoptout | planned |
| Google Tag Manager | Google Ireland Ltd. | Centralised tag management; on its own it sets no cookies and loads the tools of the other categories only after consent | — | as above | planned |
4.3 Experience / customer journey
| Name | Provider | Purpose | Duration | Notice and opt-out | Status |
|---|---|---|---|---|---|
_clck, _clsk, CLID, ANONCHK, MR, MUID, SM |
Microsoft Clarity (Microsoft Ireland) | Session recording with field masking, heatmaps, path analysis | session to 13 months | privacy.microsoft.com | planned |
_hjSessionUser_*, _hjSession_*, _hjFirstSeen |
Hotjar (Contentsquare) | As above, as an alternative to Clarity | 30 minutes to 12 months | hotjar.com/legal/policies/privacy | planned |
ph_* / mp_* |
PostHog / Mixpanel | Product analytics: funnels, retention, account-linked events | 12 months | see provider's notice | planned |
hubspotutk, __hstc, __hssc, __hssrc, messagesUtk |
HubSpot | Customer journey, chat and in-app messages, linking visits to a contact | session to 6 months | legal.hubspot.com/privacy-policy | planned |
4.4 Marketing / profiling
| Name | Provider | Purpose | Duration | Notice and opt-out | Status |
|---|---|---|---|---|---|
_gcl_au, IDE, test_cookie |
Google Ads / DoubleClick (Google Ireland Ltd.) | Conversion measurement, remarketing, custom audiences | 90 days to 13 months | adssettings.google.com | planned |
| Google Signals (in GA4) | Google Ireland Ltd. | Aggregated cross-device and demographic data from Google users with ads personalisation enabled | — | as above | planned |
_fbp, _fbc |
Meta Pixel (Meta Platforms Ireland Ltd.) | Conversion measurement, remarketing, custom and lookalike audiences (joint controllership with Meta for collection) | 90 days | facebook.com/privacy/policy · facebook.com/adpreferences | planned |
li_sugr, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory |
LinkedIn Insight Tag (LinkedIn Ireland) | Conversion measurement, B2B remarketing, custom audiences (joint controllership with LinkedIn) | 1 day to 12 months | linkedin.com/legal/privacy-policy · linkedin.com/psettings/guest-controls | planned |
Global opt-outs: youronlinechoices.eu, optout.aboutads.info, optout.networkadvertising.org.
5. How we manage consent
- Prior blocking. The tools in categories 4.2, 4.3 and 4.4 are not loaded and do not set cookies until you have given consent for the relevant category.
- Banner. On first access the banner offers, with buttons of equal prominence, "Accept all", "Reject all" and "Customise". Closing the banner with the X or continuing to browse does not amount to acceptance: only technical cookies remain active.
- Granularity. You can accept or reject each category separately.
- Withdrawal. You can change your mind at any time from the "Cookie preferences" link in the footer of every page. Withdrawal takes immediate effect for the future; data already collected continues to be processed in accordance with the Privacy Policy until the stated expiry.
- Re-prompting. The banner is shown again 6 months after your last choice, or if the tools or purposes change significantly.
- Proof. We keep a record of the choices made (date, categories, version of the notice, pseudonymous identifier) to demonstrate consent under Article 7.1 GDPR.
- No cookie wall. Rejecting non-technical cookies does not limit access to the website or the Platform.
- Consent Mode. Google tools are configured in consent mode: without consent, no analytics or advertising cookies are set.
6. Managing cookies through your browser
You can also block or delete cookies from your browser settings. Blocking technical cookies may prevent the Platform from working. Instructions: Chrome, Firefox, Safari, Edge.
7. Transfers outside the European Union
Several of the listed providers transfer data to the United States. Transfers take place on the basis of the EU-U.S. Data Privacy Framework, for certified providers, or of the European Commission's Standard Contractual Clauses. Details in the Privacy Policy, Section 6.
8. Rights and contacts
To exercise your rights (access, erasure, objection, withdrawal of consent and the others provided for in Articles 15–22 GDPR) write to privacy@huntairseo.com. Details in the Privacy Policy, Section 9.
9. Updates
This Cookie Policy is updated whenever a tool is added, replaced or removed. The date at the top of the document indicates the current version. Changes introducing new categories or purposes result in the banner being shown again.
LEAF S.r.l. Semplificata — Via Vincenzo Pacifici 17, 00019 Tivoli (RM), Italy — VAT 15954051007 — REA RM-1626132 — privacy@huntairseo.com — leafsrlsemplificata@pec.it
Last updated: [●●/●●/2026]