COOKIE POLICY
(Information on cookies and other tracking tools, pursuant to Art. 122 of Italian Legislative Decree 196/2003 and the Italian Data Protection Authority's Cookie Guidelines of 10 June 2021, no. 231)
Last updated: 25 August 2026
1. In short
The first time you visit felfil.com we show you a banner asking whether you accept or reject non-necessary cookies.
- Necessary cookies make the site work — cart, session, payments, and remembering your choices — and are always installed.
- Everything else — functional, analytics and marketing — is installed only if you consent.
- You can reject everything with one click and change your mind at any time via the "Cookie preferences" link at the bottom of every page.
Rejecting non-necessary cookies in no way limits browsing or purchasing.
2. What cookies are
Cookies are small text files that websites save on your device and read back on later visits: they keep products in your cart, or count visitors.
Equivalent tools also exist — pixels, web beacons, browser local storage — performing similar functions. On this page we call them all "cookies" and the same rules apply to them.
Cookies may be first-party, set by felfil.com, or third-party, set by other parties through our site.
3. Who processes data collected through cookies
The Data Controller is Felfil S.r.l., Via Sant'Ambrogio 28, 10139 Turin (TO), Italy, VAT 11482100010, email privacy@felfil.com.
For third-party cookies, each provider acts under its own privacy policy, linked in section 6. For rights, retention and transfers outside the EU, see our Privacy Policy.
4. The cookies we use
The list below reflects the automated scan of the website carried out on 25 August 2026.
4.1 Necessary cookies — no consent required
They enable browsing, the cart and payment functions, site security, and storage of your cookie choices. We do not use them for any other purpose.
Legal basis: Art. 122(1) of the Italian Data Protection Code.
| Cookie | Source | Purpose | Duration |
|---|---|---|---|
__stripe_mid |
Stripe (.felfil.com) | Secure payment processing and fraud prevention. | 1 year |
__stripe_sid |
Stripe (.felfil.com) | Secure payment processing and fraud prevention. | 1 hour |
wp_woocommerce_session_* |
WooCommerce (felfil.com) | Links your cart to your browsing session. | 2 days |
woocommerce_items_in_cart |
WooCommerce (felfil.com) | Records the cart contents and any changes to them. | session |
woocommerce_cart_hash |
WooCommerce (felfil.com) | Records the cart contents and any changes to them. | session |
cookieyes-* |
CookieYes (felfil.com) | Stores your cookie preferences. | 1 year |
4.2 Functional cookies — consent required
They enable additional features: embedded videos on product pages, subscription forms, and the support chat.
| Cookie | Source | Purpose | Duration |
|---|---|---|---|
lidc |
LinkedIn (.linkedin.com) | LinkedIn server load balancing. | 1 day |
li_gc |
LinkedIn (.linkedin.com) | Stores the cookie choice made on LinkedIn. | 6 months |
m |
Stripe (m.stripe.com) | Payment fraud detection. | 13 months |
__Secure-YNID |
YouTube (.youtube.com) | Security of the embedded video player. | 6 months |
__Secure-ROLLOUT_TOKEN |
YouTube (.youtube.com) | Manages video player feature rollout. | 6 months |
__Secure-YEC |
YouTube (.youtube.com) | Security of the embedded video player. | session |
ytidb::LAST_RESULT_ENTRY_KEY |
YouTube (youtube.com) | YouTube player local storage. | persistent |
sib_cuid |
Brevo (.felfil.com) | Recognises the visitor for forms and email automations. | 6 months |
4.3 Analytics cookies — consent required
They tell us how many people visit the site, where they come from and which pages perform best. They are not technical cookies and are installed only after you consent.
| Cookie | Source | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics 4 (.felfil.com) | Distinguishes visitors and measures sessions. | 13 months |
_ga_* |
Google Analytics 4 (.felfil.com) | Counts page views for the GA4 property. | 13 months |
_hjSessionUser_* |
Hotjar (.felfil.com) | Recognises the user across repeat visits. | 1 year |
_hjSession_* |
Hotjar (.felfil.com) | Identifies the individual browsing session. | 1 hour |
sbjs_first / sbjs_current |
Sourcebuster (WooCommerce) (.felfil.com) | Records where the visit came from (order attribution). | session |
sbjs_first_add / sbjs_current_add |
Sourcebuster (WooCommerce) (.felfil.com) | Additional data on the visit's source. | session |
sbjs_udata |
Sourcebuster (WooCommerce) (.felfil.com) | Device technical data used for attribution. | session |
sbjs_migrations |
Sourcebuster (WooCommerce) (.felfil.com) | Internal data format management. | session |
sbjs_session |
Sourcebuster (WooCommerce) (.felfil.com) | Session duration for attribution purposes. | 1 hour |
4.4 Marketing and profiling cookies — consent required
They serve ads matching your interests on Google, Meta and LinkedIn, measure campaign effectiveness, and avoid showing you ads you have already seen. They involve profiling: you may refuse or withdraw them at any time with no consequences.
| Cookie | Source | Purpose | Duration |
|---|---|---|---|
_fbp |
Meta Pixel (.felfil.com) | Measures conversions and enables remarketing on Facebook and Instagram. | 3 months |
_gcl_au |
Google Ads (.felfil.com) | Attributes conversions to Google Ads campaigns. | 3 months |
test_cookie |
Google Ads (.doubleclick.net) | Checks whether the browser accepts advertising cookies. | 15 minutes |
bcookie |
LinkedIn (.linkedin.com) | Identifies the browser for LinkedIn Ads campaigns. | 1 year |
__cf_bm |
LinkedIn (.linkedin.com) | Bot protection on LinkedIn servers; created only when the LinkedIn tag loads. | 1 hour |
YSC |
YouTube (.youtube.com) | Counts views of embedded videos. | session |
VISITOR_INFO1_LIVE |
YouTube (.youtube.com) | Estimates available bandwidth and personalises recommendations. | 6 months |
VISITOR_PRIVACY_METADATA |
YouTube (.youtube.com) | Stores the cookie choice made on YouTube. | 6 months |
4.5 Tools that set cookies only when you use them
Two services do not appear in the tables above because they set cookies only when you interact with them. We declare them anyway:
- tawk.to — the support chat. If you open the chat window, the service sets cookies to maintain the conversation and recognise you on return. It falls under functional cookies.
- MailMunch — the newsletter sign-up pop-ups. It sets
_mailmunch_visitor_idandmailmunch_second_pageviewto recognise visitors and avoid showing the pop-up to existing subscribers. It falls under functional cookies.
5. Managing your consent
From the banner. On your first visit you can choose between "Accept all", "Reject all" and "Customise", to enable only some categories. We do not use pre-ticked boxes, and scrolling does not count as consent. If you close the banner without choosing, no non-necessary cookie is installed.
Afterwards. The "Cookie preferences" link at the bottom of every page reopens the panel: you can change or withdraw consent whenever you want, as easily as you gave it.
If you don't choose. We will show the banner again after six months, as required by the Italian Data Protection Authority's guidelines.
From your browser. You can also block or delete cookies in your browser settings, but this affects every site you visit and may prevent the cart from working. Note that under Italian law browser settings alone are not a valid way to give consent: consent is expressed through our banner.
To opt out of behavioural advertising across multiple operators at once, you can use youronlinechoices.eu.
6. Third-party privacy policies
Google · Meta · LinkedIn · Hotjar · Brevo · Stripe · MailMunch · tawk.to · YouTube
7. Transfers outside the European Union
Some providers (Google, Meta, LinkedIn, MailMunch, tawk.to) may transfer data to the United States. Transfers take place on the basis of the EU-US Data Privacy Framework adequacy decision of 10 July 2023 and/or the European Commission's Standard Contractual Clauses. Details in the Privacy Policy, section 7.
8. Your rights
You may exercise the rights under Articles 15-22 GDPR at any time — access, rectification, erasure, restriction, portability, objection — and withdraw consent, by writing to privacy@felfil.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority, Piazza Venezia 11, 00187 Rome, Italy — www.garanteprivacy.it — or with the supervisory authority of your country of residence.
9. Changes
This Cookie Policy is updated whenever we change the tools installed on the site. The version in force is always the one published on this page, with the last-updated date at the top.