Which cookies the quotlab.com website and the Quot app use. Spoiler: only the essential technical ones, no tracking, no banner.
Last updated: 22 June 2026 · version v2026-06-22
Cookies are small text files that a website saves on the device of the person browsing (computer, tablet, smartphone) and that are read again on subsequent visits. Alongside cookies there are similar technologies that store information on the device, such as the browser's localStorage, a small local storage area used by web pages.
Cookies and these technologies can serve to make the site work (for example to keep a session active), or to measure traffic or to profile those browsing for advertising purposes. The distinction is important, because it changes the rules that apply.
The quotlab.com website and the app.quotlab.com application use exclusively technical cookies and strictly necessary technologies for the operation of the service. Specifically:
PHPSESSID) that keeps you logged in after signing in to the app, for as long as the session stays open;gv_token) stored in the browser's localStorage, which lets you stay logged in without re-entering your credentials on every visit.These tools are essential to provide a service you have expressly requested, namely authentication and use of the restricted area. Without them, login could not work.
To be clear: on the website and in the app there are no profiling cookies, no analytics cookies (traffic statistics) and no marketing or advertising cookies. We do not use tools that track you across different sites, we do not build user profiles and we do not share data with advertising networks. The app does not use artificial intelligence and does not carry out automated decision-making or profiling.
Technical cookies do not require the user's consent. This is provided for by art. 122 of the Italian Personal Data Protection Code (Legislative Decree 196/2003), which exempts from consent the technical tools necessary to provide a service requested by the subscriber or user. The "Guidelines on cookies and other tracking tools" of the Italian Data Protection Authority (Garante per la protezione dei dati personali, measure of 10 June 2021) themselves confirm that for technical cookies alone there is no need to collect consent or to display a banner.
Since we use technical cookies only and do not install profiling, analytics or marketing cookies, no cookie consent banner is shown. The traffic statistics we collect are aggregated and cookieless (see below, Plausible Analytics), so they do not trigger the banner requirement. The relevant European rules remain valid and applicable (ePrivacy Directive 2002/58/EC and subsequent amendments), together with EU Regulation 2016/679 (GDPR) for the processing of personal data.
The site's typefaces (DM Sans) are hosted directly on our own servers (self-hosting). They are not loaded from external services such as Google Fonts: therefore no communication of the visitor's IP address to third parties takes place and no cookie is set.
Only on the site's public forms (registration and contact) do we use Cloudflare Turnstile, a security tool that verifies that the form is being submitted by a person and not by automated software (a bot). Turnstile is not a profiling or advertising tool: it does not track you across different sites and, according to Cloudflare's own statements, it does not set tracking cookies. To carry out the check, however, it communicates to Cloudflare the IP address and some technical browser signals, for the sole purpose of security and abuse prevention (legal basis: legitimate interest, art. 6(1)(f) GDPR). Being a technical and security tool necessary for the requested service, it is exempt from consent and does not entail a banner. Cloudflare is listed among our data sub-processors.
To understand how many people visit the site and which pages prove most useful we use Plausible Analytics, a cookieless statistics tool. It does not set cookies on your device, does not assign you a persistent identifier, does not follow you across different sites and does not build profiles: it collects only aggregated data (number of visits, pages viewed, source, country, device type) through a small measurement script. The data are processed by Plausible Insights OÜ on servers located in the European Union. Since no cookie or individual tracking is involved, this tool does not require consent and does not entail a banner (legal basis: legitimate interest in measuring and improving the site, art. 6(1)(f) GDPR). Plausible is listed among our sub-processors.
| Name | Purpose | Duration | Type |
|---|---|---|---|
PHPSESSID |
Keeps the app login session active | Session (deleted when the browser is closed) | Technical / necessary |
gv_token |
Keeps you logged in without re-entering credentials ("remember me") | 30 days (in the browser's localStorage) | Technical / necessary |
| Cloudflare Turnstile | Anti-bot verification of the public forms (registration and contact) | Managed by Cloudflare; any temporary technical storage within its own context | Technical / security |
| Plausible Analytics | Aggregated site traffic statistics, cookieless | No cookies and no data stored on the device | Cookieless statistics |
gv_token is stored in the browser's localStorage and is not a cookie in the strict sense, but we report it here for completeness and transparency.
Even though these are purely technical tools, you can always check and remove them from your browser. You will find the options in the privacy and security settings of the browser you use, under the section dealing with cookies and site data. Roughly:
Please note that deleting the session cookie or the "remember me" token, or disabling them, will log you out of the app and require you to log in again. The localStorage is cleared from the same browser sections dedicated to deleting site data.
The data controller is Donzella di Thomas Donzella, with registered office at Via S. Francesco D'Assisi 47E, 20073 Opera (MI), P.IVA IT02865930180, C.F. DNZTMS00M31F205N. For any request regarding cookies or your data you can write to info@quotlab.com. For the processing of personal data please also refer to our privacy notice.
We may update this cookie policy to bring it in line with regulatory or service changes. The version published on this page, with the date and version number shown above, is the one in force.