Cookies and browser-side technologies
Strictly necessary technologies cover authentication, secure session continuity, memory of the privacy choice, and other functions explicitly requested by the user to operate the service. They are not used for profiling or marketing.
In this deployment, the only genuinely optional category is 'Preferences'. It covers convenience-only browser memory such as the preferred language of legal pages, the authenticated sidebar position, and restoration of an unfinished client-create form draft.
Those technologies remain off until the user makes a positive choice. Without consent, the service still works with the strictly necessary set only.
Users can accept all active categories, reject the optional ones, or customize the choice. Withdrawal remains available from the same entry points exposed in the footer and application settings.
| Technology | Provider | Category | Purpose | Duration | Legal basis |
|---|---|---|---|---|---|
| __session | BRG s.a.s. | necessary (required) | maintains the server-authenticated session and protects restricted application routes | session / up to 5 days for the server-side authenticated session cookie | technical necessity; ePrivacy exemption for strictly necessary user-requested functionality |
| Firebase Authentication browser persistence Used only to keep the requested sign-in state between navigations or across browser sessions depending on the user's login choice. | Firebase Authentication | necessary (required) | browser-side sign-in continuity and support for the authenticated session exchange | browser session or persistent browser storage depending on the 'remember me' choice | technical necessity; ePrivacy exemption for the user-requested authentication flow |
| we-gentic:privacy-consent | BRG s.a.s. | necessary (required) | stores the privacy-banner decision and avoids re-prompting outside the allowed cases | up to 180 days or until replaced by a newer decision | technical necessity and documentation of the user's privacy choice |
| we-gentic:privacy-consent-queue | BRG s.a.s. | necessary (required) | queues consent receipts locally when the browser is offline or the audit endpoint is temporarily unavailable | until successful backend delivery or until browser data is cleared | technical necessity and compliance-interest in preserving consent receipts during temporary network failures |
| sidebar_state Optional technology: saved only after preference consent to remember whether the authenticated-app sidebar is expanded or collapsed. | BRG s.a.s. | preferences | stores the display preference for the authenticated application sidebar | up to 7 days | consent |
| we-gentic:privacy-locale Optional technology: saved only after preference consent to remember the preferred language of the legal pages. | BRG s.a.s. | preferences | stores the selected language for the Privacy Notice and Cookie Notice | up to 180 days or until browser data is cleared | consent |
| we-gentic:client-create-draft Optional technology used only in the admin /clients/new area to restore an unfinished draft. | BRG s.a.s. | preferences | stores a local draft of the client-create form for operational convenience | until the form is submitted, manually cleared, or browser data is removed | consent |
This inventory covers only cookies, local storage, and similar browser-side technologies evidenced in the code. Server-side providers are described in the Privacy Notice.
Stiamo preparando l'esperienza mobile. Nel frattempo, visita il sito da desktop o tablet in orizzontale per esplorare servizi, casi d'uso e aree operative.
