Spaarkly / ARShades — Legal

ARShades marketing website </br> Version 1.0.1 — Last updated: 23 July 2026 — Effective date: 22 July 2026

This Cookie Policy supplements the Website Privacy Policy and describes the cookies and similar technologies (including localStorage) used by the ARShades marketing website of Spaarkly s.r.l. It concerns solely the website presenting the ARShades solutions; the cookies and technologies used within the ARShades product experiences (for example the Virtual Try-On launched by the User) are described in the Privacy Policy of the ARShades solutions.

1. What cookies are

Cookies are small text files that a website stores on your device. Similar technologies — such as the browser’s localStorage — save information in an analogous way. European law (the ePrivacy Directive, art. 122 of the Privacy Code and the GDPR) requires prior consent for every cookie or similar technology that is not strictly necessary for the operation of the site.

2. Categories used

Strictly necessary / technical — indispensable for the operation of the Site: your cookie choice, theme and language preferences, and the authentication cookies of the restricted admin area. They do not require consent.
Analytics — measurement cookies of Google Analytics 4, used exclusively for aggregate statistics on the Site’s usage. They are installed only if you enable the “Analytics” category in the banner. Analytics is configured in a privacy-friendly mode: consent denied by default (Google Consent Mode v2), IP address anonymization active, no Google Signals, no advertising or remarketing functionality, no cross-site profiling.
Functional — technologies loaded only at your explicit request (for example the address autocomplete in the registration form or the launch of an interactive demo). Since they activate solely following an action of yours, they are not present in the initial banner but are described in §5.
Marketing — a category provided for but currently not used: the Site installs no advertising or profiling cookies. Should it be introduced, the banner and the table will be updated and consent requested again.

Technical cookies are based on legitimate interest (art. 6(1)(f) GDPR); all other categories are based exclusively on your consent (art. 6(1)(a) GDPR), collected through the banner on your first visit, with equal prominence between “Accept all” and “Reject all”.

Your choice — including refusal — is stored for 12 months in the first-party cookie ars_consent. A minimal proof of consent (random identifier, timestamp, version and language of the policy shown in the banner, categories and action — without IP address or user-agent) is recorded on our servers for the time necessary to demonstrate consent (up to 26 months) and then automatically removed. In case of refusal, you will not be asked for consent again for at least 6 months, unless there are substantial changes to the policy.

4. List of cookies

Name	Provider	Purpose	Duration	Category
`ars_consent`	Spaarkly (first-party)	Stores your cookie-consent choice (categories, version, date).	12 months	Strictly necessary
`NEXT_LOCALE`	Spaarkly (first-party)	Set by the site’s language routing to remember the detected/selected language.	Session	Strictly necessary
`theme`	Spaarkly (first-party)	Remembers your light/dark theme preference.	Persistent (localStorage)	Strictly necessary
`_ga`	Google LLC (Google Analytics 4)	Google Analytics 4 — distinguishes users.	2 years	Analytics
`_ga_<container>`	Google LLC (Google Analytics 4)	Google Analytics 4 — keeps session state.	2 years	Analytics
`__admin_session`	Spaarkly (first-party)	Authentication of the restricted admin area (admin pages only).	5 days	Strictly necessary
`__admin_access`	Spaarkly (first-party)	Access gate of the restricted admin area (admin pages only).	1 year	Strictly necessary

The analytics cookies (_ga, _ga_<container>) are installed by Google only after your consent; on revocation they are deleted. User-level and event-level data collected by Google Analytics 4 is retained for a maximum of 14 months; aggregate statistical reports, which contain no personal data, may be kept longer.

Beyond the cookies listed above, the Site uses a few services loaded only at your explicit request that do not install cookies: they are described in §5.

5. Third-party cookies and technologies

The only third party that may install measurement cookies on this Site is Google LLC (Google Analytics 4), and only after your consent. Google LLC adheres to the EU–U.S. Data Privacy Framework; for details on international data transfers see the Website Privacy Policy.

Some services loaded only at your explicit request neither install nor persist cookies on this Site (they therefore do not appear in the §4 table, which lists cookies and storage technologies):

Interactive Virtual Try-On demos served by webvto.it (a Spaarkly service): the embed loads only when you click to launch the demo and lasts for the session.
Google Maps Places API, used by the address autocomplete field of the registration form: it loads only when you start typing in that field. For this service Google acts as an independent data controller; details are in the Website Privacy Policy.

The restricted admin area and the registration form also use Firebase Authentication (Google/Firebase) to manage access: that service stores technical session data in the browser (IndexedDB) for the sole purpose of maintaining authentication, without any tracking or profiling purpose.

6. Managing your preferences

Use the “Cookie preferences” link in the footer of every page to review or change your choices at any time; revoking Analytics consent also entails the deletion of the _ga* cookies.
You may also delete or block cookies from your browser settings (this may affect technical functions such as the persistence of theme and language).

Substantial changes to this Policy (new cookies, new purposes, new third parties) entail a new consent request through the banner. The version of the policy you accepted is recorded together with your choice.

8. Contacts

Spaarkly s.r.l. — Via della Tecnica n. 18, 85100 Potenza (Italy) — privacy@spaarkly.com.