This page lists the cookies and other tracking tools this site uses. It is not a generic list: below you will find the real names, who sets them and how long they last. The processing of personal data that follows from them is described in the privacy notice.
1. What they are, in two lines
A cookie is a small file that a website asks your browser to keep, so as to recognise you on the next request. Some make the site work — without them the cart empties on every page — others count visits or recognise you on other sites for advertising purposes. That is the whole difference, and it is why the first kind cannot be switched off and the second kind does not start without your permission.
The same rules apply to similar technologies (browser local storage, invisible pixels, device identifiers): we call them all «cookies» for simplicity.
2. The rule we follow
Until you choose, your browser does not contact any statistics or advertising service. We do not block them after loading them: we do not load them at all. It is a difference you can measure by looking at the network requests of a page opened without ever answering the banner, and Google, Meta and TikTok do not appear in that list.
The banner offers you three options of equal weight: accept all, reject all, or choose category by category. The reject button has the same shape and the same size as the accept button, because a refusal written small is not a refusal.
3. Strictly necessary cookies
They make the site work. They do not profile anyone, they do not leave this domain and they cannot be switched off: if you block them in your browser, the cart and access to your account stop working. The law does not require consent for these (Art. 122 of the Italian privacy code).
| Name | Set by | Purpose | Duration |
|---|---|---|---|
mastertuning-session | this site | Holds your visit together: the cart, your account session if any, and the result messages of forms. | 120 minutes from the last page opened |
XSRF-TOKEN | this site | The token proving that a form was submitted from this site and not from another page without your knowledge. Without it every submission would be refused. | 120 minutes |
mt_consenso | this site | Stores the choice you made on this page, together with the version of the text you read. It is the cookie that avoids asking you the same thing on every visit. | 180 days |
4. Statistics
They count visits and pages read, to understand what visitors need. They start only with your consent and the data leaves this site for Google.
| Service | Identifier | Cookies | Duration stated by the supplier |
|---|---|---|---|
| Google Analytics 4 Google Ireland Limited | G-CTJCNDS2NB | _ga, _ga_*, _gid, _gat, __utm* | from a few minutes to 2 years depending on the cookie |
| Google Tag Manager Google Ireland Limited | GTM-TN87HVP | none of its own | — |
Google Tag Manager collects nothing by itself: it is the container that loads the other services. We load it only once at least one optional category has been accepted, and we tell it what you have allowed through Google consent mode, which starts with every permission denied before anything else happens.
5. Marketing
They measure advertising results and allow our ads to be shown to you again on other sites. They start only with your consent. These services recognise you outside this site too: that is profiling, and we use the proper word for it.
| Service | Identifier | Cookies | Duration stated by the supplier |
|---|---|---|---|
| Google Ads Google Ireland Limited | AW-16998876597 | _gcl_*, _gac_*, and on the googleadservices.com and doubleclick.net domains IDE and test_cookie | up to 90 days on our domain, up to 13 months on Google's |
| Meta Pixel (Facebook and Instagram) Meta Platforms Ireland Limited | 283746802532152 | _fbp, _fbc | up to 90 days |
| TikTok Pixel TikTok Technology Limited | CVHBE0JC77UF7Q57G0A0 | _ttp, _ttclid, _tt_enable_cookie, ttcsid, ttcsid_* | up to 13 months |
6. Three services that start even without consent, and why
There are three cases in which your browser contacts a third-party server without being asked anything. They are not advertising trackers and they do not profile you, but they do receive your IP address: you have the right to know.
- Cloudflare Turnstile (Cloudflare, Inc.) — the check that tells a person from an automated program, on the public forms and on password recovery. Without it the contact inbox would receive hundreds of automated messages a day. It is a security measure necessary to the service you asked for by using the form; it uses no profiling cookies and Cloudflare states that it does not use the data for advertising.
- OpenStreetMap maps (OpenStreetMap Foundation) and the Leaflet library served by cdnjs (Cloudflare) — on the contact page and the list of centres. The map is the function you asked for by opening that page: putting it behind a consent request would mean showing you a grey rectangle instead of what you were looking for. They install no profiling cookies.
- YouTube videos embedded in three product pages — we use the
youtube-nocookie.comdomain, which writes no advertising identifiers until you press «play». Loading is deferred: if you do not scroll down to the video, it is not downloaded.
If you are not comfortable with this, your browser can block third-party domains; the maps and the videos will stop working, the rest of the site will not.
7. How to change your mind
You can change your choice at any time, in two ways:
- From the site's panel. — the same panel as on day one reopens, with the boxes as you left them.
- From your browser. Every browser lets you see the cookies present and delete them, and refuse third-party ones. The feature has a different name in each but is always in the privacy settings.
When you withdraw consent we do not merely stop: the site deletes from your browser the cookies of the categories you removed, one by one, on this domain and its subdomains. Cookies already written by Google, Meta or TikTok on their own domains we cannot touch from here: for those, the settings of your account on those services and your browser's deletion tools apply.
Withdrawal does not make what was collected before unlawful, but it takes effect immediately for the future (Art. 7(3) GDPR).
8. If this page changes
Every version of this text has a number. When we change the services listed, the number changes: your previous choice lapses and the banner asks you again what you prefer. We do not reuse consent collected on a text different from the one you are reading now, because that would be consent to something else.
Version of this notice: 2026-09-28.1.
9. Where to look next
- Privacy notice — purposes, legal bases, retention periods and your rights.
- Legal notice — who owns this site.
Last updated: 1 October 2026.