PORTOFINO B&F
Cookies and external content
Effective 22 September 2026
What this site uses
The catalogue code does not deploy Google Analytics, Meta Pixel or advertising measurement. The cart and enquiry selection are stored under portofino-cart-v1 in your browser’s localStorage for 30 days after the last save. They contain only product IDs, quantities and expiry, with no contact or payment details. Emptying the cart removes the record. The unfinished contact form stays only in page memory. Submitted enquiries are stored on the server. Hosting may use necessary technologies for security, transmission and authentication where access is protected by the platform.
External video choice
Separate permission is required before an embedded video loads. Refusing does not prevent catalogue browsing or enquiries. Withdraw through Privacy settings; the loaded player is removed. Withdrawal does not erase data already received by the provider or its cookies; those can be cleared in your browser.
Choice storage
portofino-privacy-v1: sessionStorage on this website’s domain. Stores the allow/refuse video choice, timestamp and notice version, solely to respect your choice. It expires when the tab closes, is written only after you choose and creates no advertising identifier. If storage is unavailable, the choice lasts only in page memory.
YouTube and photographs
YouTube/Google supplies video via youtube-nocookie.com. After activation, even this mode processes IP address, device and playback information; interaction may use provider storage. Google’s policies govern those technologies and durations. External DJI, Apple and Starlink photographs load when viewing products and disclose technical request data to their providers. External links open when you click them. See the privacy notice for recipients and rights.
Customer account sign-in (28 September 2026)
We send a one-time code through Google Workspace and Google Apps Script, which process your email address and this message. The code lasts 10 minutes and is bound to the requesting browser. The server stores only its hash, expiry and attempt count. The technical cookie __Host-pf-login lasts up to 10 minutes; __Host-pf-customer up to 7 days or until sign-out. Sessions expose only data assigned to the verified email. Abuse prevention stores hashed email/IP identifiers and counters valid for up to one hour. Expired challenges, sessions and counters are removed on the next available sign-in code request. Codes are not stored in the administrator email overview.