Legal · last updated 20 August 2026
timbaly.com sets one cookie, and its only job is to remember your cookie choice. Visit counting works without cookies. There are no advertising cookies, no profiling cookies and no third-party trackers on this site.
The full list
If you check your browser's storage and find something not on this list, that is a bug and we would like to hear about it.
| Name | Type | Purpose | Duration | Party |
|---|---|---|---|---|
aicms_cc | Cookie | Remembers the choice you made in the consent banner, so it is not shown again on every page | 6 months | First-party |
aicms_* | sessionStorage | Current visit: session identifier and, where a campaign link was used, the UTM parameters | Until you close the tab | First-party |
The aicms_ prefix is a legacy internal identifier — the platform's code name predates the Timbaly brand. Renaming it would ask every visitor of every site on the platform for consent again and orphan the consents already recorded, so it stays.
Contents
A small text file a website asks your browser to keep, so that it can recognise something on your next request. Related technologies — localStorage, sessionStorage — do a similar job with different mechanics, and the law treats them the same way, which is why they are listed above alongside the cookie.
Cookies that are strictly necessary for a service you asked for do not require consent. Everything else does, in advance.
Aggregate visit counting on this site is cookieless: the page reports that it was viewed without storing an identifier that persists after your visit. Session-level detail — which pages you looked at in one sitting, and which campaign link brought you — lives in sessionStorage and is gone when you close the tab.
The practical consequence is that we can tell you how many people read a page and roughly where they came from, and we cannot follow an individual across weeks. That is a deliberate trade: less resolution, far less exposure.
There are none on this site. No advertising networks, no social widgets, no external analytics, no embedded video players, and — worth stating explicitly — no fonts loaded from Google.
That last point is the one most sites get wrong. A font stylesheet in the page head sends every visitor's IP address to a third party before the consent banner has had a chance to ask anything, and no consent script can arrive in time to stop it: the head is parsed first. The fonts on this site are downloaded and served from this domain instead.
Where a consent banner is shown on a site built with this platform, the script that shows it is deliberately the first thing in the head, and it intercepts attempts to inject third-party scripts before consent is given.
You can withdraw or change consent at any time, and it costs nothing to do so:
aicms_cc cookie in your browser — the banner will appear again on your next visit and you can choose differently.Withdrawing consent does not make the processing that already happened unlawful, and it does not affect anything relying on a different legal basis, such as security logs.
Every mainstream browser lets you block or delete cookies, from its settings under Privacy. Blocking cookies entirely will not break this site: the only cookie it sets is the one that remembers your consent choice, so blocking it simply means being asked again.
Browser-level “do not track” signals are not honoured by every site on the web. On this one the question is moot, since there is nothing tracking you across sites to switch off.
Controller: Innovazione su Misura di Catana Petronela, registered office at Via Val Della Torre 81, 10149 Torino (TO), Italy, VAT number 12533670019. Contact: info@timbaly.com.
How the data collected through these technologies is handled — purposes, legal bases, retention and your rights — is set out in the privacy policy.
If this policy changes materially, the date at the top changes with it, and where the change affects processing based on consent we will ask again.