Cookie Policy
This Cookie Policy explains which cookies and similar technologies botmail (the "Application", reachable at botmail.it) uses, why, for how long, and how you can accept, refuse or withdraw consent. It complements the Privacy Policy, which describes all the other processing of your Personal Data.
It is written to comply with Regulation (EU) 2016/679 (GDPR), Directive 2002/58/EC (ePrivacy) as implemented in Italy by art. 122 of Legislative Decree 196/2003, the Italian Data Protection Authority's guidelines on cookies of 10 June 2021, and, for California residents, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA).
1. Data Controller
ITALDRONI S.R.L., with registered office in Via Camillo Benso Conte di Cavour 13, 10019 Strambino TO, Italy, Tax Code/VAT No. IT13399080012, e-mail privacy@botmail.it (the "Data Controller").
2. What cookies are
Cookies are small text files that a website saves in your browser and reads back on later visits. Similar technologies (such as local storage, pixels or device identifiers) work the same way. In this policy "cookies" covers all of them.
Cookies can be:
- first-party, set by the Application itself, or third-party, set by another provider whose service the Application uses;
- session cookies, deleted when you close the browser, or persistent cookies, which stay until they expire or you delete them;
- technical cookies, needed for the Application to work, or analytics and profiling cookies, used to measure or to build profiles.
3. Which cookies we use
3.1 Technical cookies (always active)
They are strictly necessary to provide the service you asked for. Under art. 122 of the Italian Privacy Code they do not need your consent, and they cannot be turned off from the banner.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
bm_session |
botmail (first-party) | Keeps you signed in to the dashboard after you enter the login code | 30 days, renewed on each visit, and in any case no longer than 90 days from sign-in |
bm_consent |
botmail (first-party) | Remembers your cookie choices and the random ID of your consent record | 6 months |
Both cookies are sent only over HTTPS and only to botmail.it (SameSite=Lax); bm_session cannot be read by scripts (HttpOnly).
3.2 Analytics cookies (only with your consent)
They stay off until you accept them. When you accept, the public pages of the Application load Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to measure in aggregate which public pages are visited and how. Before you consent, no request is sent to Google and no analytics cookie is set.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga |
Google (set on botmail.it) | Tells visitors apart, in aggregate | 2 years |
_ga_<ID> |
Google (set on botmail.it) | Keeps the state of the analytics session | 2 years |
We configure Google Analytics without Google signals and without advertising personalisation, and we do not link it to any advertising service. Google Analytics is used on the public pages only: the dashboard, where you manage your inboxes and read your messages, contains no analytics cookie or script.
Google may process the data collected through these cookies also outside the European Economic Area, in particular in the United States. As section 5 of the Privacy Policy provides, such transfers are covered by appropriate safeguards: Google LLC is certified under the EU-U.S. Data Privacy Framework, on which the European Commission adopted an adequacy decision on 10 July 2023, and Google also applies the standard contractual clauses approved by the European Commission. To ask about the specific safeguards, write to privacy@botmail.it. You can read how Google uses this data at policies.google.com/technologies/partner-sites and its privacy policy at policies.google.com/privacy.
3.3 Profiling and advertising cookies
Today the Application sets no profiling, advertising, retargeting or social-media cookies: the retargeting and remarketing purposes described in section 3 d) of the Privacy Policy are not active. If we activate them, we will update this policy first and set those cookies only after you consent to them in the banner.
4. How you give, refuse and withdraw consent
The first time you visit a public page, a banner asks which cookies you accept:
- Accept all turns analytics cookies on;
- Reject all keeps only the technical cookies, and is as easy and as visible as accepting;
- Customise lets you choose category by category;
- closing the banner with the X counts as a refusal: only the technical cookies stay on.
Scrolling or continuing to browse is never taken as consent. We do not ask you again for 6 months, unless this policy or the cookies we use change, in which case the banner asks again.
You can change your mind at any time, as easily as you gave consent, with the button below or with "Cookie settings" at the bottom of every public page. When you refuse or withdraw consent, the Application deletes the Google Analytics cookies it can reach and stops loading Google Analytics.
Global Privacy Control
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a refusal of analytics cookies, even if you accepted them in the banner, for as long as the signal is on.
Browser settings
You can also block or delete cookies from your browser settings. Blocking technical cookies stops you from signing in to the dashboard. Instructions for the most common browsers:
To opt out of Google Analytics on every website you can also install the Google Analytics opt-out browser add-on.
5. Record of your choices
Each time you choose, we keep a record with a random ID, the date, the categories you accepted and the version of this policy. It lets us prove your consent as the GDPR requires, contains neither your e-mail address nor your IP address, and is deleted after 24 months.
6. Information for California residents (CCPA)
This section applies to visitors who are residents of California and supplements the rest of this policy.
Categories of personal information collected through cookies in the last 12 months: identifiers (the session token and the consent ID; with your consent, the Google Analytics online identifier) and internet or other electronic network activity information (pages of the public site visited, with your consent). We collect no sensitive personal information through cookies.
Purposes: providing and securing the service (technical cookies) and, with your consent, measuring the use of the public site in aggregate (analytics cookies).
Sale and sharing: in the last 12 months we have not sold personal information and have not shared it for cross-context behavioral advertising, as those terms are defined by the CCPA. Google acts as our service provider for analytics. Section 3 d) of the Privacy Policy allows, only with your express consent, retargeting and the communication of your Personal Data to third parties for their marketing; under the CCPA these may count as a sale or sharing. We do not ask for that consent today; if we ever do, it will be optional, and you can opt out at any time by withdrawing it, by writing to privacy@botmail.it or through a Global Privacy Control signal. We do not knowingly collect personal information of consumers under 16 years of age; botmail is intended for people aged 18 or over.
Your rights: you have the right to know which personal information we collect, use and disclose; to access it; to request its deletion and its correction; to opt out of the sale or sharing of personal information (we honour Global Privacy Control signals as an opt-out); to limit the use of sensitive personal information (we collect none); and not to be discriminated against for exercising any of these rights.
How to exercise them: write to privacy@botmail.it. We will confirm receipt within 10 business days and answer within 30 days, as for every privacy request (the CCPA allows up to 45). We may need to verify your identity, usually by a code sent to the e-mail address of your account. You may use an authorised agent, who must provide your signed permission.
7. Your rights under the GDPR
For the data collected through cookies you have the rights described in the Privacy Policy: access, rectification, erasure, restriction, objection, portability, withdrawal of consent at any time without affecting the lawfulness of the processing before it, and the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the country where you live. Write to privacy@botmail.it.
8. Changes to this policy
We may update this policy when the cookies we use or the law change. The new version applies from its publication on this page; if the change affects cookies that need consent, the banner asks for your choice again.
Last update: 08/10/2026