Cookie Policy

1. What Cookies Are

Cookies are small text files that websites save on the user's device (computer, smartphone, tablet) during browsing. They allow the website to remember the user's actions and preferences over time, so that they do not have to be re-entered at each visit.

In addition to traditional cookies, there are similar technologies that perform comparable functions:

• localStorage / sessionStorage — browser memory areas used to store data on the client side without automatic expiry (localStorage) or for the duration of the session only (sessionStorage);
• Service Worker cache — a cache area managed by the browser for PWAs (Progressive Web Apps) that enables offline operation;
• IndexedDB — a local browser database used by some third-party libraries.

2. Types of Cookies Used

3. Cookies on the puntify.it Website

The puntify.it website (showcase site) uses the following tracking technologies:

3.1 Google Analytics 4 (GA4)

The website uses Google Analytics 4, a web analytics service provided by Google LLC. GA4 collects aggregate data on user behaviour (pages visited, session duration, traffic source, device type) through cookies and beacons.

• Property ID: G-KFC8WKG9LT;
• Anonymised IP: Google Analytics 4 does not record the full IP address of EU users by default;
• Data is processed by Google LLC (USA) — transfer covered by SCC and the EU-US Data Privacy Framework;
• Google Analytics privacy: policies.google.com/privacy;
• Google Analytics opt-out: tools.google.com/dlpage/gaoptout.

3.2 Google Fonts

The website makes connections to the Google Fonts servers (fonts.googleapis.com, fonts.gstatic.com) to load typographic fonts. Google may collect the visitor's IP address as an access log. No profiling cookies are installed.

3.3 Leaflet.js (unpkg CDN)

The website loads the Leaflet.js mapping library from the unpkg.com CDN to display the map of participating stores. The CDN may record the visitor's IP address as an access log; it does not install profiling cookies.

4. Storage in the Puntify App (PWA)

The Puntify app (app.puntify.it), available as a Progressive Web App (PWA), does not install traditional cookies but uses the following browser storage technologies:

4.1 Firebase Cloud Messaging (FCM)

The app integrates Firebase Cloud Messaging by Google LLC for sending push notifications (e.g. points accrual confirmation, Merchant promotions). The FCM token is a technical identifier of the device/browser and:

• is generated only if the user explicitly grants permission for notifications from the browser;
• is transmitted to Puntify's servers and to Google's servers for notification routing;
• may be revoked at any time from the app's notification settings or from the browser settings;
• the Firebase SDK may use its own cookies and localStorage — App ID: 1:796763099677:web:297aba5c9002f64f7a2cf4;
• Firebase / Google privacy: firebase.google.com/support/privacy.

4.2 Supabase (Authentication Sessions)

The app uses Supabase Inc. as its authentication and database backend. The session tokens (JWT) are stored in localStorage and not in cookies, but are subject to the same rules for privacy purposes. These tokens:

• are strictly necessary for the operation of the authentication service;
• are automatically deleted on logout or on expiry;
• the refresh token allows automatic renewal of the session without requesting new credentials (validity 7 days);
• data is processed on Supabase servers (USA) — transfer covered by SCC under Article 46 GDPR;
• Supabase privacy: supabase.com/privacy.

4.3 Google Analytics in the App (Firebase Analytics)

The app includes the measurementId: "G-G1EZR6JL2C" in the Firebase configuration, which enables Google Analytics for measuring app usage. This functionality collects aggregate usage data (screens visited, events) and may use cookies or local storage. Data is processed by Google LLC (USA) — transfer covered by SCC and the EU-US Data Privacy Framework.

5. Third Parties and Extra-EU Transfers

Some of the technologies referred to in this policy involve the sending of data to third-party servers located outside the European Economic Area (EEA). Below is an overview:

6. Retention Period

Cookies and storage technologies are distinguished according to their duration:

• Session cookies: automatically deleted when the browser is closed;
• Persistent cookies: retained until the set expiry (e.g. _ga 2 years, _gid 24 hours) or until manual deletion;
• localStorage: retained without automatic expiry until manual deletion or logout;
• Service Worker cache: retained until uninstallation of the Service Worker, update of the app or manual deletion from the browser cache.

7. How to Manage Cookies

7.1 Consent banner (puntify.it website)

On first access to the puntify.it website, a banner is shown allowing you to accept or refuse the analytics cookies (Google Analytics). Technical cookies are installed automatically as they are strictly necessary for the operation of the service. Your preferences are remembered for subsequent visits.

7.2 Browser settings

You can manage, disable or delete cookies directly from your browser settings. Below are the links to the guides of the main browsers:

7.3 Google Analytics opt-out

To disable Google Analytics tracking on all websites that use it, you can install Google's official browser add-on:

Google Analytics Opt-out Add-on

7.4 Clearing localStorage and the App Cache

To clear the localStorage data and the Service Worker cache of the Puntify app:

• From a desktop browser: Settings → Privacy and security → Clear browsing data → select "Cookies and other site data" and "Cached images and files";
• From mobile (Chrome): Settings → Privacy → Clear browsing data;
• From mobile (Safari): iPhone Settings → Safari → Clear History and Website Data;
• From the Puntify app: logging out automatically clears the session tokens from localStorage.

8. Changes to the Cookie Policy

Puntify reserves the right to update this Cookie Policy to comply with regulatory changes, updates to the service or changes in the technologies adopted. Changes will be published on this page with an update of the version date. In the event of substantial changes requiring new consent, the cookie consent banner will be shown again.

9. Contacts

For any questions relating to the use of cookies and tracking technologies, or to exercise the rights provided for by the GDPR (see Privacy Policy — Article 9), you may contact Puntify: