Cookie policy
What this site keeps in your browser, item by item, with how long each lasts — and the choice the banner asks you for. The technical cookies need no consent; Google Analytics, which counts visits, runs only after you say yes.
What they are, and what the banner asks
A cookie is a small file a site asks the browser to keep and to send back with every request. localStorage and sessionStorage are two browser memories that do a similar job without travelling: what is in them stays on your device, and the site reads it only while the page is open.
Under the GDPR, art. 122 of the Italian privacy code and the guidelines of the Italian data protection authority (Garante) of 10 June 2021, technical cookies and tools — those that make the site work or remember a choice the reader made — need no consent, only a notice; anything else, analytics that are not anonymous included, needs your consent first. So on your first visit a band at the foot of the page asks: Reject, Choose or Accept all, three buttons of the same weight, and an × that closes it keeping only the technical ones. Scrolling, or clicking elsewhere on the page, is not an answer.
What this site keeps
Every entry is first-party — the site’s own — and technical. The session cookie exists only if you sign in with Google or Microsoft, and it is the hosting platform, Microsoft Azure Static Web Apps, that sets it on the site’s behalf; on the way to the provider and back the platform may set a second, temporary cookie, gone once the sign-in completes. The rest are preferences you chose yourself, your answer to the banner, and the visit’s own log.
| name | where | what it is for | lasts |
|---|---|---|---|
| StaticWebAppsAuthCookie | cookie | The session of whoever signed in: it is what tells the page who you are once you are back from the provider. | for the session the platform sets, or until you press “sign out” |
| aurum.live.lang | localStorage | The language you last read the site in: the bare root opens in it. | until you clear it from the browser |
| aurum.live.theme | localStorage | Dark or light page. | until you clear it from the browser |
| aurum.live.data | localStorage | The dealers’ live prices, or the sample built into the site. | until you clear it from the browser |
| aurum.live.clicks | localStorage | Whether clicks make a sound. | until you clear it from the browser |
| aurum.live.currency | localStorage | The currency prices are shown in. | until you clear it from the browser |
| aurum.live.area | localStorage | Whether the ranking shows only shops based in the EU, or shops anywhere. | until you clear it from the browser |
| aurum.consent | localStorage | Your answer to the cookie banner: which optional categories you accepted, when, and about which tools — so that you are not asked at every page. | six months, then the banner asks again — sooner if a new tool is named |
| aurum.live.fx | localStorage | The last exchange-rate table read from the price feed (the ECB’s daily reference rates), so a page reopened while the feed is down can still show a rate that has a date on it. | at most 7 days, then it is dropped |
| aurum.live.feed | sessionStorage | The last snapshot of prices this tab read, so that a reload opens on real numbers rather than on a sample. | at most 2 hours, and only while the tab stays open |
| aurum.live.features | sessionStorage | Which parts of the site are open — the paid plans of the API and the accounts behind them — as the site last answered, so that a reload draws the same page at once. | at most 5 minutes, and only while the tab stays open |
| aurum.live.log.live · aurum.live.log.demo | sessionStorage | The log of market events seen during the visit — who took the lead on a coin, which shop moved its premium, how the gold moved — and the readings they are measured against, one per price source. | while the tab stays open |
Optional cookies: analytics
With your consent, and only with it, the site uses Google Analytics to count visits and see which pages are read; the privacy policy says what Google receives, and where. It sets the two cookies in the table below, first-party — on this site’s own domain — and they last six months, as your choice does, rather than Google’s usual two years.
Google Analytics is loaded only if you switch statistics on, and stops the moment you switch them off: its cookies are deleted and the page reloads without it. A new tool would be named here first, and the banner would ask everyone again.
| name | where | what it is for | lasts |
|---|---|---|---|
| _ga | cookie | Google Analytics: a random identifier that tells a returning browser from a new one. | six months |
| _ga_4XJBK3ZKRZ | cookie | Google Analytics: the state of the visit — when it started, how many pages. | six months |
Third parties
Unless you accept an analytics tool named above, this site sets no third-party cookies and loads nothing from third-party domains. When you sign in with Google or Microsoft the authentication happens on their domains, where their cookies and their notices apply; the site receives only the outcome. Links to the dealers’ shops lead to sites with rules of their own.
Changing your mind, and deleting them
“Cookie settings”, at the foot of every page and under the map, reopens the choice at any time. Withdrawing a consent is as easy as giving it and takes effect at once: the tool stops, and its cookies are deleted. A choice is kept for six months and then asked again — sooner if a new tool is named.
The browser’s settings also let you see, delete and block cookies and site data, site by site. Without the session cookie signing in does not work; without the preferences the site starts again from its defaults — English, dark page, live prices, sound off — and the banner asks again. The preferences can also be changed from the page header, which rewrites them.
Changes
A tool that needs consent is named on this page before it runs, and the banner asks again. The date at the top of the page is that of the last revision.