Cookie Policy
Last updated · 30/10/2026
Scope: main iu2jmz.it website and Guestbook. Last updated: 30 October 2026. Cookies, localStorage and sessionStorage are different technologies: a cookie-free implementation is not automatically exempt from terminal-storage rules.
Technologies actually identified
| Name and type | Purpose and scope | Duration | Classification |
|---|---|---|---|
iu2jmz.languagelocalStorage | Remember IT/EN on the main-site origin. Not automatically shared between www, apex and subdomains. | No expiry in code; until removed by the user or browser. | Requested language preference; technical, no prior consent required. |
iu2jmz.visit.sessionsessionStorage | Random tab identifier to deduplicate the internal counter only. Created after interaction if storage is available. | Tab session, subject to browser restoration. Separate from the server’s 30-minute inactivity expiry. | First-party aggregate measurement equivalent to technical storage under the conditions below. |
iu_guestbookfirst-party HTTP cookie | Only after administrator login, for moderation authentication. Login host, no explicit Domain; Path=/guestbook/; HttpOnly; SameSite=Strict; Secure. | Max-Age=28800 seconds (8 hours); removed on logout. | Technical authentication cookie, not installed merely by browsing public pages. |
Why no consent banner is displayed
No marketing, profiling, advertising pixels or third-party analytics were found on the homepage or Guestbook. The counter uses only an aggregate total and transient deduplication identifiers handled by the station’s server, without browsing-path or cross-site tracking. For this configuration, the applicable exemption is first-party aggregate measurement equivalent to technical storage under section 7.2 of the Garante’s Guidelines of 10 June 2021, not a blanket exemption for all counters.
The counter is used exclusively for internal statistics: identifiers are not matched with Guestbook/QSO/other records, commercially reused or disclosed to third parties. Changes require reassessment and prior blocking of any non-exempt technologies. Clicking, scrolling or using sessionStorage does not constitute consent.
As there are no optional categories on the main site, no consent banner is displayed and no cookie-consent choice is stored. Remove language or session data in browser site-data settings; removing the session identifier may cause a new visit to be counted. Without sessionStorage the total remains readable but the visit is not recorded. Administrators can log out to remove the authentication cookie; blocking it prevents login.
Temporary memory and server data
The Guestbook anti-abuse form token stays in JavaScript memory, not cookies or Web Storage. The Guestbook anti-abuse database stores IP-derived HMACs and attempt times; the counter stores session HMACs and last activity. These are separate server-side processing operations described in the Privacy Policy. Labels such as “hashed” or “cookie-free” do not guarantee anonymity.
Linked services
The homepage does not automatically load QRZ, Weather Underground, the antenna map or WebSDR player. The Weather.com request is server-to-server. The Guestbook logo comes from the station’s live domain. Opening live/SDR enters separate services separate from the main website; the live map contacts unpkg.com, cdn.jsdelivr.net and tile.openstreetmap.org. A CDN request is not in itself evidence of profiling: those services’ purposes, data and obligations still need verification. This policy does not declare every subdomain exempt.
References and contact
For the controller, contact details, recipients and rights, see the Privacy Policy. References: Article 122 of Italian Legislative Decree 196/2003; Guidelines of 10 June 2021; official Garante FAQs, particularly questions 4 and 12.
Telegram link · 30/10/2026
The homepage Telegram button is an ordinary voluntary link to the IU2JMZ channel. It embeds no widget, makes no Telegram request before a click, and uses no cookies, localStorage or other identifiers to decide whether to appear. It remains visible to returning visitors. Following the link opens an external service that receives connection metadata under its own terms and notices; joining is optional.
A previous invitation version could store the iu2jmz.telegramInvite.seen browser key with the fixed value 1. The new button neither reads nor updates it. Any leftover value, which does not identify a visitor and is not sent to the server, remains until site data are cleared or the browser removes it. Clearing it is not necessary to see the button. Other website storage described in this notice remains separate.