Cookie Policy — Hostnest
Version 1.0-hardened-01 — 22/08/2026
Cookie Policy
Last updated: August 22, 2026
This Cookie Policy describes the use of cookies and similar technologies on Hostnest websites and platform operated by Sprint di Linguari Stefano (Largo Piave 11, 28066 Galliate (NO), Italy, VAT ID 08001990962, PEC sprint@mypec.eu, info@hostnest.it).
This Cookie Policy supplements the Privacy Policy and applies to visitors of the corporate website, backoffice users, and guests accessing the public customer area or linked payment flow.
1. What cookies and similar technologies are
Cookies are small text files sent by websites to the user's browser, where they may be stored and sent back to the website on subsequent visits. Similar technologies (such as local storage, session storage, or equivalent technical identifiers) may be used for comparable strictly technical purposes.
Cookies may be session cookies (deleted when the browser closes) or persistent cookies (retained until expiry or manual deletion). Actual duration depends on each cookie's technical settings.
2. Cookie categories used by Hostnest (V1)
In the current product version, Hostnest uses only strictly necessary / technical cookies and storage. Marketing profiling cookies, third-party analytics, or social pixels are not used on the operational platform or corporate website.
| Category | Purpose | Consent required today |
|---|---|---|
| Strictly necessary | Authentication, security, platform operation | No (required for service) |
| Preferences / functional | Selected language (locale) | No in V1 — SUBJECT TO LEGAL VALIDATION |
| Analytics / statistics | Browsing measurement | Not active |
| Marketing / profiling | Behavioral advertising, retargeting | Not active |
3. Hostnest cookie and storage inventory
Cookies and storage set directly by Hostnest may include:
| Name / type | Category | Purpose | Indicative duration |
|---|---|---|---|
| Laravel session cookie (hostnest_session or equivalent) | Necessary | Maintain authenticated session in backoffice or restricted area | Session / until configured expiry |
| CSRF cookie (XSRF-TOKEN or equivalent) | Necessary | Protect browser requests against cross-site request forgery attacks | Session |
| Remember-me cookie (if enabled by user) | Necessary / functional | Limited persistent login recognition after explicit user choice | TO BE VALIDATED — typically up to 30 days or as configured |
| Locale preference cookie or storage (locale) | Functional | Store selected language (IT/EN) to improve browsing | Persistent — technical duration TO BE VALIDATED |
Actual names may vary by environment (development, staging, production) and application framework version. The inventory will be updated when relevant technical changes occur.
4. Cookies in connection with Stripe payments
When a guest or user accesses Stripe Checkout hosted checkout to pay a deposit, Stripe may set cookies or equivalent technologies necessary for payment processing, fraud prevention, anti-money laundering where applicable, and checkout operation.
Such processing is governed by Stripe's privacy notice and cookie policy as independent payment service controller. Hostnest does not control Stripe's full cookie inventory, which may vary by jurisdiction and Connect account configuration.
Hostnest does not add marketing cookies to the payment flow beyond what is technically required when redirecting to Stripe Checkout.
Indicative Stripe cookie examples (non-exhaustive — consult Stripe):
- checkout session and antifraud cookies;
- technical cookies for transaction completion and abuse prevention;
- possible locale preference cookies on Stripe domain.
5. No marketing trackers, analytics, or CMP
Hostnest does not currently use tracking tools for:
- behavioral advertising or retargeting;
- social pixels (Facebook, Instagram, LinkedIn, or similar);
- third-party marketing analytics (Google Analytics 4, Google Tag Manager for marketing purposes, Hotjar, Mixpanel, or similar);
- cross-site profiling A/B testing.
A Consent Management Platform (CMP) for non-essential cookies is not currently implemented, because such cookies are not present on the current service.
Future conditional clause: if Hostnest introduces cookies or trackers requiring prior consent under applicable law (including the Italian privacy authority measure of 10 June 2021 and European Data Protection Board guidelines), Hostnest may implement a consent collection mechanism (consent gate / CMP) before activating those technologies, with an update to this Cookie Policy and the Privacy Policy.
Hostnest will not use analytics or marketing cookies without updated notice and, where required, user consent.
6. Legal basis
SUBJECT TO LEGAL VALIDATION. Strictly necessary cookies for operating the service requested by the user may rely on contract performance or legitimate interest / technical necessity under applicable guidance. Future non-essential cookies will require consent where provided by law.
7. Cookie duration
Actual duration of each cookie depends on system technical settings and the user's browser. Session cookies expire when the browser closes; persistent cookies (remember-me, locale) may remain until configured expiry or manual deletion. Hostnest will update the inventory if application durations change.
8. Managing cookies through your browser
Users may configure their browser to block or delete cookies. Disabling strictly necessary cookies may prevent backoffice access, secure authentication, session maintenance, or proper operation of certain features (including CSRF protection).
Settings vary by browser; please refer to official manufacturer guidance (Chrome, Firefox, Safari, Edge, etc.). Deleting cookies may require a new login and reset of language preferences.
For cookies set by Stripe during checkout, users may consult browser settings and Stripe documentation for management on Stripe's domain.
9. Controller, contact, and rights
The controller for cookies set directly by Hostnest is Sprint di Linguari Stefano. For information, contact info@hostnest.it or PEC sprint@mypec.eu.
For exercising data subject rights and information on personal data processing connected to cookies, see the Privacy Policy. Data subjects may lodge a complaint with the Italian Data Protection Authority (Garante).
10. Updates
This Cookie Policy may be updated following technical or regulatory changes or introduction of new technologies (including analytics or CMP where activated). The date of last update will be shown at the top of the document. If non-essential cookies are introduced, prior consent will be requested where applicable.