What are cookies

Cookies are small text files that websites send to your browser and store on your device. They allow the site to remember your preferences and recognise you on subsequent visits.

In addition to cookies in the strict sense, there are similar technologies such as localStorage and sessionStorage, which work in a similar way but do not transmit data to the server on every request. BandCalendar uses both technologies exclusively for technical purposes.

2

Necessary technical cookies

BandCalendar uses exclusively technical cookies and storage, strictly necessary for the operation of the service. Consent is not required for these cookies under Art. 5(3) of the ePrivacy Directive.

Name	Type	Purpose	Duration
next-auth.session-token	HTTP Cookie	Authenticated session token (JWT). Keeps you logged in between visits.	30 days
next-auth.csrf-token	HTTP Cookie	Anti-CSRF token to protect login and logout operations from cross-site attacks.	Session
next-auth.callback-url	HTTP Cookie	Stores the destination URL after login is completed.	Session
theme / UI preferences	localStorage	Saves interface preferences (e.g. display settings).	Persistent

These cookies are essential: disabling them will prevent access to the application or cause essential features to malfunction.

3

Third-party cookies

BandCalendar uses Cloudflare as a traffic protection and routing system. Cloudflare may set the following technical cookies in your browser:

__cf_bm30 minutes

Cloudflare Inc.

Bot traffic management. Distinguishes human users from automated bots to protect the service.

cf_clearance30 minutes – 24 hours

Cloudflare Inc.

Stores the result of a Cloudflare security challenge. Avoids repeating the check on every request.

These cookies are technical and security in nature. Cloudflare does not use them for advertising or profiling purposes. For more information, see the Cloudflare Privacy Policy.

Cloudflare Web Analytics

We use Cloudflare Web Analytics for aggregated visit statistics (pages viewed, country, browser). It does not use cookies, does not track individual users and does not share data with third parties for advertising. For more information, see the Cloudflare Privacy Policy.

4

What we do NOT use

BandCalendar does not use:

Profiling cookies

We do not build profiles of your browsing habits for advertising purposes.

Behavioural tracking cookies

We do not use tools such as Google Analytics, Facebook Pixel, Hotjar or similar.

Advertising cookies

We do not show personalised advertising or share data with advertising networks.

Social network pixels

No Facebook, Instagram, LinkedIn or other social network pixels are present.

5

Cookie duration

Cookies are distinguished by duration:

Session cookies

Deleted automatically when the browser is closed. Used for the CSRF token and login callback URL.

Persistent cookies

Remain on the device for a defined period (e.g. 30 days for the authenticated session). You can delete them manually.

6

How to manage cookies

You can manage, restrict or delete cookies at any time through your browser settings. Below are links to guides for the most common browsers:

Google Chrome Mozilla Firefox Apple Safari Microsoft Edge

Please note that disabling technical session cookies will prevent access to the BandCalendar application, as they are required to maintain authentication state.

For Cloudflare cookies, disabling them may cause the security systems to block access to the service.

7

Changes to the cookie policy

We may update this cookie policy following regulatory changes or the introduction of new technical tools. The date of the last update is always shown at the top of this page.

For significant changes we will send you a notification by email or via notice in the application.

8

Contact us

For any questions regarding the use of cookies, you can contact us:

BandCalendar

E-mail: [email protected]

Website: www.bandcalendar.it

Cookie Policy