This Cookie Policy explains how KREATIVDISTRIKT SRL, an Italian corporation with its registered office at Via F. Petrarca 22, 20123 Milano, Italy, registered under VAT and Fiscal Code (P.IVA / C.F.): 09829520965 (the "Company", "we", "us", or "our"), uses cookies and similar technologies on the Kreathon platform (the "Platform" or "Service"). It should be read together with our Privacy Policy.
1. WHAT ARE COOKIES?
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, to make them more efficient, and to provide reporting information. Similar technologies (such as local storage and pixels) are used for the same purposes; in this policy we refer to all of them as "cookies".
2. HOW WE USE COOKIES
We classify the cookies we use into the following categories:
- Strictly necessary: required for core functionality such as authentication and session management. The Platform cannot work properly without them, so they are always active and are exempt from consent.
- Preferences: remember choices you make, such as your cookie-consent decision.
- Analytics (cookieless): we measure aggregate usage with a privacy-friendly, self-hosted analytics tool (Umami) that does not store cookies or personal identifiers on your device. No cookies are set by it, and no consent is required for it.
- Analytics & advertising (consent-based): we use Google Tag Manager to run measurement and advertising tags (such as Google Analytics and Google Ads conversion tracking). These tags may set cookies, but only after you accept them in the consent banner: until then they run in a cookieless, consent-denied mode (Google Consent Mode) and no analytics or advertising cookies are stored on your device.
- Third-party embeds: some pages embed external services (see section 4) that may set their own cookies when they load; these are controlled through the consent banner.
3. COOKIES WE USE
| Cookie | Category | Purpose | Retention |
|---|---|---|---|
access_token |
Strictly necessary | Maintains your authenticated session (HttpOnly JWT access token). | Session / short-lived (~2 hours) |
refresh_token |
Strictly necessary | Renews your session without requiring you to log in again (HttpOnly). | ~7 days |
session_id |
Strictly necessary | Backend (Odoo) web session identifier. | Session |
cookie_consent |
Preferences | Stores your cookie-consent choice so the banner is not shown again. | 180 days |
_ga, _ga_* |
Analytics (consent-based) | Google Analytics: distinguishes visitors and keeps session state. Set only if you accept cookies in the banner. | Up to 13 months |
_gcl_au |
Advertising (consent-based) | Google Ads conversion linking (measures whether a visit led to a booked demo or sign-up). Set only if you accept cookies in the banner. | 90 days |
Our own usage analytics (Umami) is cookieless. Google analytics/advertising cookies are set only with your consent, and the remaining third-party cookies are those set by the embedded services listed in section 4.
4. THIRD-PARTY TECHNOLOGIES & EMBEDS
- Umami (analytics): self-hosted, cookieless product analytics. It does not set cookies and does not collect personal data.
- Google Tag Manager, Google Analytics & Google Ads: Google Tag Manager loads measurement and advertising tags on our behalf. Through Google Consent Mode, these tags operate without cookies until you give consent in the banner; if you accept, they may set the Google cookies listed in section 3 under Google's privacy policy.
- Stream: powers in-app chat and video. It authenticates over short-lived tokens and does not set advertising cookies.
- Calendly: where a scheduling widget is shown (e.g. support or contact pages), Calendly may set its own cookies under its own privacy policy when the widget loads.
- Embedded media (YouTube, Vimeo, Loom) and Google services (Docs, Drive, Maps): when content embeds these, the provider may set its own cookies once the embed loads, governed by that provider's policy.
- Sign-in providers (Google, GitHub): if you choose social login, the provider sets cookies on its own domain as part of the authentication you initiate.
5. MANAGING YOUR PREFERENCES
When you first visit the Platform, a consent banner lets you accept or reject non-essential cookies — the Google analytics/advertising cookies described in sections 3 and 4 and the cookies set by third-party embeds. If you reject (or simply dismiss nothing), Google tags stay in consent-denied mode and set no cookies. Our own analytics (Umami) are cookieless, so they run regardless of your choice. Strictly necessary cookies are always active because the Service cannot function without them. You can change your mind at any time by clearing the cookie_consent entry in your browser storage (the banner will be shown again) and you can also control or delete cookies through your browser settings; note that blocking essential cookies may prevent you from logging in or using key features.
6. CHANGES TO THIS POLICY
We may update this Cookie Policy from time to time. Material changes will be reflected on this page together with an updated effective date.
7. CONTACT
KREATIVDISTRIKT SRLVia F. Petrarca 22, 20123 Milano, Italy
P.IVA / C.F.: 09829520965
Email: support@kreathon.io
www.kreathon.io