Cookie policy

Updated: 26 July 2026

This website stores settings required for sign-in, security, language, and consent. Optional services remain disabled until you consent.

Necessary cookies and browser storage

These items are needed for sign-in, security, language, payment return and recording the choice. They are not used for advertising or profiling.

• fatture_pa_session: Login session, first-party cookie, no more than 14 days, HttpOnly, Secure in public operation and SameSite=Lax.
• fatture_funnel_session: The technical cookie fatture_funnel_session contains a random, anonymous identifier used to measure the path from the landing page to the first XML in aggregate. It expires after 24 hours. We do not store IP addresses, email addresses, document data, URL parameters or advertising identifiers, and we do not use it for advertising or profiling.
• fatture_cookie_consent: Stores the version, time and selection for up to 180 days in local browser storage.
• fatture_locale: Stores the portal language in local browser storage until changed or manually deleted.
• pending_subscription_id: Temporarily stores the PayPal subscription reference during the browser session and is removed after return.
• _GRECAPTCHA: Necessary reCAPTCHA security cookie. It may be set when a protected form is submitted and supports risk analysis and prevention of automated access.

Necessary bot and abuse protection

is active as a necessary security service. Google reCAPTCHA v3 loads only when a protected action is submitted. In particular, the IP address, browser and device details, interaction signals, action, security token and risk assessment may be sent to Google. Invoices and document contents are not sent to reCAPTCHA. The service is intended as a necessary security function for sign-in, registration, password reset, email verification and the contact form and does not depend on optional analytics or marketing consent.

Analytics cookies

may be enabled after consent. If enabled and consented to, Google Analytics loads. Public page views and, in the customer portal, checkout start, purchase, renewal and cancellation may be measured with plan, amount, currency and a pseudonymous transaction reference. Email addresses, PayPal identifiers, tax data and invoice content are not transmitted. Typical GA4 cookies are _ga and _ga_<container-id>, with a default duration of up to two years; browsers may restrict them earlier.

Marketing cookies

may be enabled after consent. If enabled and consented to, Google Ads may measure interactions and campaigns. Google advertising and measurement storage may be set and technical usage data sent to Google.

Choice, withdrawal and external providers

Optional services do not load before a choice. Refusal is as easy as acceptance. The choice can be changed at any time through “Cookie settings” in the footer. Browser storage may also be deleted or blocked in browser settings; necessary features may then be restricted.

Your choice is stored for 180 days and can be changed at any time through “Cookie settings”. Google Privacy Policy and information about reCAPTCHA and Google services.