Cookie Policy

Last updated: March 26, 2026

This Cookie Policy describes how Lygo uses cookies and similar technologies on its websites (www.lygo.it and app.lygo.it). For broader information about how we handle your personal data, please see our Privacy Policy.

1. What Are Cookies

Cookies are small text files that a website saves on your device (computer, smartphone, tablet) when you visit it. They are used to make the website function properly, to improve its efficiency, and to provide information to site operators. Cookies can be "session" cookies (deleted when you close the browser) or "persistent" cookies (remaining on the device for a defined period).

2. Essential Technical Cookies

Technical cookies are essential for the proper functioning of the Service. They do not require user consent under applicable privacy regulations. Lygo uses the following technical cookies:

• Authenticated session cookie: a signed JWT token stored in an HttpOnly; Secure; SameSite=Strict cookie. Identifies the authenticated User's session on app.lygo.it. Deleted upon session expiry or explicit logout.
  Duration: session (or up to 7 days with "remember me").
• UI preferences cookie: stores local interface settings (e.g., selected language, theme, panel state). Does not contain personally identifiable data.
  Duration: persistent, 12 months.
• CSRF token cookie: anti-CSRF token used to protect authenticated POST requests from cross-site request forgery attacks.
  Duration: session.

3. Analytics Cookies

Lygo uses a first-party analytics system based on CloudFront logs. No third-party cookies are used for analytical tracking. The data collected in logs includes:

• Visitor IP address, anonymized by truncating the last octet (IPv4) or the last 80 bits (IPv6) before processing.
• Browser user-agent (for aggregate statistics on device/browser type).
• Referrer URL, if present in the HTTP header.
• Timestamp and HTTP response code.

This data is processed in aggregate and anonymized form to produce click statistics visible in the application. It is not used to individually identify visitors or for advertising purposes.

Since this analytics system is not cookie-based, it does not require consent. Raw logs are retained for a maximum of 90 days.

4. Third-Party Cookies

Lygo uses the following external resources that may set cookies or make network requests on the User's device:

• Google Fonts: the Manrope and Inter fonts are loaded via Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Google may set performance cookies and collect anonymous usage statistics. See Google's Privacy Policy for details.
  Type: technical/performance. Does not require explicit consent due to the technical nature of the service.

Lygo does not use advertising profiling cookies or third-party tracking pixels (e.g., Facebook Pixel, Google Analytics, Hotjar).

5. How to Manage Cookies

You can control and manage cookies directly through your browser settings. Below are instructions for the most common browsers:

• Google Chrome: Menu > Settings > Privacy and Security > Cookies and other site data.
• Mozilla Firefox: Menu > Settings > Privacy & Security > Cookies and Site Data.
• Apple Safari: Preferences > Privacy > Manage Website Data.
• Microsoft Edge: Menu > Settings > Cookies and site permissions > Cookies and site data.

Please note that disabling essential technical cookies may impair the proper functioning of the application, particularly authentication features.

For more information about managing cookies, visit www.allaboutcookies.org.

6. Cookie Duration

Below is a summary of the duration of cookies used by Lygo:

• Authenticated session cookie (JWT): active session, or up to 7 days if the User selects "Remember me."
• CSRF token cookie: browser session duration.
• UI preferences cookie: persistent, 12 months from creation or last update.

7. Changes to This Cookie Policy

Lygo reserves the right to modify this Cookie Policy at any time to adapt to regulatory or technical changes. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to periodically review this page.

8. Contact

For any questions about Lygo's use of cookies, contact us at:

• Email: privacy@lygo.it
• Mailing address: Lygo — Privacy, Via Placeholder 1, 00100 Rome (RM), Italy