Cookie Policy
Cookie notice
Cookies are small files a website leaves in the visitor's browser. Some make the pages work, some tell us how they are read, others measure advertising campaigns. This page explains which ones we use and what you get to decide. Last updated 21 October 2026.
What you can choose
- Necessary: they keep the session, the cart and the security of the forms. Without them the site does not work, which is why they cannot be turned off. They are not used to recognise you elsewhere.
- Statistics: they tell us how many people read the site, and which pages. They only start if you consent.
- Marketing: they measure the ads on Facebook and Instagram, and let the map and videos hosted by others load on their own (see below). They only start if you consent. The same consent covers the purchase we also report to Meta from our server (Conversions API, see the Privacy Policy) and the signals by which we tell Google Analytics that the data may also be used for advertising (Google Consent Mode): without consent we deny it.
Until you choose, the site loads necessary cookies only: no statistics, no advertising measurement.
Changing your mind
The “Cookie preferences” link at the bottom of every page, and the icon at the bottom left, reopen your preferences: accept, refuse or choose item by item, whenever you like. Your choice lasts 12 months, and we ask again if we change this notice. You can also delete cookies from your browser settings.
Proof of your choice
When you answer the banner we record what you chose, when, the browser and the language, along with a reference you can find in the preferences panel. We also keep, once for each version, the exact text of the banner and of this notice you had in front of you, so that what you were told can be proven. Instead of your IP address we keep a pseudonymised fingerprint, computed with a secret key. The records are chained together, so that a later change would show. It exists to show that consent was asked for and given as Article 7 GDPR requires, and it is deleted after 24 months: the 12 for which the choice is valid plus 12 to be able to answer any dispute.
Content hosted by others inside our pages
Some pages carry a frame that does not come from our site: the arena map, which is Google Maps, and the videos, which live on YouTube, Vimeo, Twitch or Dailymotion. Until you accept marketing cookies, you will find a placeholder in their place: the content only loads if you press its button, and only that one; alternatively there is a link to open it on the site that hosts it. Once loaded, whoever hosts it can see your IP address and write their own cookies in your browser, under their rules and not ours. YouTube videos are embedded from its privacy-enhanced domain (youtube-nocookie.com).
Everything else you see — fonts, images, the photo archive — comes from our own servers and storage instead: until you choose, and until you load one of those frames, no other website learns that you were here. The exception is the Cloudflare network, which our hosting's traffic goes through: to protect the site from bots it may set the technical cookie __cf_bm, listed below.
Who receives the data
Statistics cookies belong to Google Ireland Ltd. (Google Analytics 4), marketing cookies to Meta Platforms Ireland Ltd.; the map is Google Ireland Ltd.'s, the videos are Google Ireland Ltd.'s (YouTube), Vimeo Inc.'s, Twitch Interactive Inc.'s or Dailymotion SA's. Their processing, and transfers outside the European Union, are described in the Privacy Policy.
The list below is not written by hand: an automated scan visits the site every week with a real browser and notes what is loaded before and after consent.
The cookies we use
Updated on 11/9/2026. This list comes from an automated scan of the site, not from a hand-written page: it changes by itself when the site changes.
Necessary
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| __cf_bm | Cloudflare (rete di DigitalOcean App Platform) | Set by the network that serves the site to tell harmful automated traffic apart from visitors. It is not used for profiling and the site does not read it. | 30 minutes |
| laravel-session | Savino Del Bene Volley | Keeps the browsing session: cart, account area and site messages. | 8 hours |
| XSRF-TOKEN | Savino Del Bene Volley | Protects the site's forms against requests forged by other sites. | 2 hours |
Addresses contacted: sito-savino-assets-2026.fra1.digitaloceanspaces.com
Statistics
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Ireland Ltd. | Tells visitors apart in order to count how many people read the site. | 2 years |
| _ga_MZ6MT5576Y | Google Ireland Ltd. | Holds the Google Analytics 4 measurement session state. | 2 years |
Addresses contacted: www.google-analytics.com, www.googletagmanager.com
Marketing
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta Platforms Ireland Ltd. | Links visits to the site with ads on Facebook and Instagram. | 3 months |
| fr | Meta Platforms Ireland Ltd. | Measures and personalises Meta's advertising. | 3 months |
Addresses contacted: connect.facebook.net, www.facebook.com
