Cookie policy
Last updated: 2 October 2026
This cookie policy supplements our Privacy notice and explains which cookies and similar technologies we use on ewibe.com, blog.ewibe.com, risorse.ewibe.com, app.ewibe.com, in the eWibe app for iOS and Android, in our emails and in our push notifications. The controller is eWibe S.r.l., Via Maurizio Gonzaga 2, 20123 Milan, Italy, info@ewibe.com. This policy is also available in Italian; if the two versions differ, the Italian one prevails.
1. What cookies and similar technologies are
Cookies are small text files that a website saves in your browser and reads again on later visits. Other technologies work in a similar way: the browser’s local storage (localStorage, sessionStorage, IndexedDB), SDKs (third party software components built into the app), device identifiers, invisible images (pixels) or personalised links in emails, and the reports the app sends when you open a notification. On this page we call them all “tools”.
They can be first party, if we manage them, or third party, if another company manages them (for example Google or Meta).
2. The categories we use
| Category | What it is for | Is consent needed? |
|---|---|---|
| Necessary | Making our websites and app work, keeping you logged in, remembering your language and your cookie choice, security, error reporting. | No (Article 122 of the Italian Privacy Code). Always on. |
| Statistics | Understanding how our websites and app are used: pages viewed, referral source, device, actions in the app, which push notifications are opened. We use Google Analytics 4 and Firebase Analytics, which are not anonymous: they use a random identifier and, when you are logged in, your eWibe account identifier. | Yes. |
| Marketing | Measuring how well our ads work (Meta Pixel, Google Ads). Meta also uses this data to show you eWibe ads on Facebook and Instagram. Google does not use it for personalised advertising. Only on app.ewibe.com and in the app. | Yes. |
| External content | YouTube videos embedded in our pages. | Yes: a video loads only when you click to play it. |
Before you choose, we use only necessary tools: Google Analytics, Meta and Google Ads are not even downloaded, and our pages load no third party content (videos, fonts). For the app this applies from version 1.9.3 (section 5).
3. ewibe.com, blog.ewibe.com and risorse.ewibe.com
One choice for all our websites. A choice made on one of these three websites also applies to the other two, because it is stored in the ewibe_consent cookie, shared across the ewibe.com domain. app.ewibe.com reads the same cookie: if you reject here, your refusal also applies to the web app; if you accept here, the web app asks you to choose, because it also uses marketing tools, unless you have already accepted statistics there with the current texts; a refusal given in the web app is never undone from here. Conversely, the statistics choice you make on app.ewibe.com also applies to these three websites.
| Name | Type | Provider | Purpose | Duration | Category |
|---|---|---|---|---|---|
ewibe_consent |
First party cookie (.ewibe.com) | eWibe | Remembers your cookie choice, when you made it and the version of the text you saw | 6 months | Necessary |
preferredLanguage |
localStorage (ewibe.com) | eWibe | Remembers your language | Until you clear the site data | Necessary |
_ga |
First party cookie (.ewibe.com) | Google Analytics 4: tells visitors apart with a random identifier. It is shared across the ewibe.com domain: if you also accept statistics on app.ewibe.com, Google Analytics can link your visits to these websites to your eWibe account | 2 years (some browsers cap it at 400 days) | Statistics | |
_ga_XRDHC5KC5G |
First party cookie (.ewibe.com) | Google Analytics 4: keeps the session state | 2 years | Statistics | |
ytidb::LAST_RESULT_ENTRY_KEY (localStorage), YtIdbMeta (IndexedDB) and other YouTube identifiers |
Third party local storage (youtube-nocookie.com) | Google (YouTube) | Running the video player. When you click, Google receives your IP address and browser data (requests to youtube-nocookie.com, google.com and googleapis.com); during playback YouTube may store further identifiers for statistics and advertising | Until you clear the site data | External content, only after you click the video |
Fonts. They are hosted on our own servers: Google Fonts receives nothing.
4. app.ewibe.com (web app)
The choice you make here also applies to statistics on ewibe.com, blog.ewibe.com and risorse.ewibe.com (section 3).
| Name | Type | Provider | Purpose | Duration | Category |
|---|---|---|---|---|---|
ewibe_consent |
First party cookie (.ewibe.com) | eWibe | Remembers your choice on statistics and marketing, its date and the version of the text | 6 months | Necessary |
CognitoIdentityServiceProvider.* |
localStorage | eWibe (Amazon Cognito) | Keeps you securely logged in | Until you log out; the refresh token expires after 730 days | Necessary |
ewibe-auth-store, ewibe-user-store, ewibe-app-store, ewibe-preferences-store, ewibe-portfolio-store, ewibe-wine-store and other ewibe-* keys |
localStorage | eWibe | Keep the app state (profile, preferences, cellar, wines) so it does not reload every time | Until you log out or clear the site data | Necessary |
_ga, _ga_WZMVNPCGPG |
First party cookies (.ewibe.com) | Google Analytics 4: statistics on app use, linked to your account identifier | 2 years | Statistics | |
firebase-installations-database, firebase-heartbeat-database |
IndexedDB | Google (Firebase) | Installation identifier and operation of Firebase Analytics | Until you clear the site data | Statistics |
_fbp |
First party cookie | Meta | Meta Pixel: recognises the browser to measure ads | 90 days | Marketing |
_fbc |
First party cookie | Meta | Meta Pixel: remembers a click on a Meta ad | 90 days | Marketing |
fr |
Third party cookie (.facebook.com) | Meta | Meta measurement and advertising | 90 days | Marketing |
_gcl_au |
First party cookie | Google Ads: links a sign up to the ad it came from | 90 days | Marketing, only if you also accept statistics |
For the Meta Pixel, eWibe and Meta are joint controllers of the collection and transmission of the data: see section 7 of the Privacy notice.
Address suggestions. When you type an address, the text goes through one of our servers to Google Maps Platform to get suggestions. No cookies are stored.
5. eWibe app for iOS and Android
The app has no cookies, but it uses similar tools.
| Tool | Provider | What it does | Data | When | Category |
|---|---|---|---|---|---|
| App storage (AsyncStorage and, for some data, SecureStore) | eWibe | Remembers your privacy choice (ewibe_consent), your session, your country and the app state |
Your account data | Always | Necessary |
| Amazon Cognito (Amplify) | eWibe with Amazon Web Services | Sign up and login | Email, session tokens | Always | Necessary |
| Expo Notifications | 650 Industries (Expo), with Apple and Google | Push notifications | Device token, notification text, your account identifier | Only if you allow notifications on your phone | Necessary (we currently send only service notifications, no promotional ones) |
| Notification open statistics | eWibe | When you tap a notification, the app tells our server which notification you opened | Delivery identifier, linked to your account | Only with statistics consent | Statistics |
| Expo Updates | 650 Industries (Expo) | Downloads app updates | Random installation identifier, app version, operating system, IP address | Always | Necessary |
| Sentry | Functional Software (Sentry), instance in the European Union (Germany) | Reports app errors and crashes, without measuring performance or sessions | Phone model and system, app version, screen, error description, without IP address or identifying data | Always | Necessary (security and operation) |
| Google Places | Google (Google Maps Platform) | Suggests your address while you type it | Text typed, IP address | Only when you type an address | Necessary |
| Firebase Analytics (Google Analytics for Firebase) | Statistics on app use | App instance identifier, Firebase installation identifier, events linked to your account identifier | Only with statistics consent | Statistics | |
| Google Ads, through Firebase | Ad measurement, without personalised advertising | Conversion events, advertising identifier (on iPhone the IDFA only if you allow tracking; on Android the advertising ID) | Only with statistics and marketing consent | Marketing |
On iPhone, ad measurement works only if, in addition to your consent in the app, you allow tracking when iOS asks you (App Tracking Transparency). iOS asks only after you have accepted statistics and marketing in our notice. You can change your mind in Settings > Privacy and Security > Tracking.
Help centre. The help centre (risorse.ewibe.com) is one of our websites: even when you open it from the app, its own cookie notice and section 3 apply.
Versions before 1.9.3. The first time you open a version earlier than 1.9.3 after installing it, before the app updates itself, Firebase Analytics and Sentry may start without asking for your consent and iOS asks for tracking permission straight away. From the next launch, what is described above applies. We recommend updating the app.
6. Our emails
| Tool | Provider | What it does | When |
|---|---|---|---|
| Invisible image (open pixel) | eWibe with Amazon SES (United States) | Tells us whether and when you open the email, with IP address and type of email app | In emails sent from our CRM (newsletter, promotions and messages from our team), except to people who chose “Do not track my opens”. Never in verification codes or automatic account emails |
| Personalised links (through click.ewibe.com) | eWibe with Amazon SES (United States) | Tell us which links you click | In emails sent from our CRM (newsletter, promotions and messages from our team), except to people who chose “Do not track my opens”. Never in verification codes or automatic account emails |
We measure opens and clicks to understand which content is of interest and to stop writing to people who do not read our emails; the legal basis is described under purpose 11 of the privacy notice. We keep this data for 12 months, then only in aggregate form. At the bottom of every email you will find the “Do not track my opens” link: from then on the emails we send you no longer contain the invisible image, the links no longer go through click.ewibe.com and you keep receiving them as usual. Some email apps, Apple Mail for example, load images on their own: in that case an open is recorded even if you did not read the email.
At the bottom of every promotional email you will find a link to unsubscribe.
7. How to give, refuse or withdraw consent
- On your first visit we show a notice with three buttons: “Reject”, “Choose” and “Accept”. “Reject” and “Accept” look the same and are equally prominent. If you close the notice with the X, you continue with necessary tools only. Scrolling or browsing on does not count as consent.
- “Choose” opens the individual categories, all off at the start: switch on only the ones you want. There you will also find “Reject all”.
- You can change your mind at any time: “Cookie preferences” at the bottom of every page of ewibe.com, blog.ewibe.com and risorse.ewibe.com; “Cookie preferences” in the Profile and at the bottom of the public pages of app.ewibe.com; Profile > Privacy preferences in the app. If you reopen your preferences and close them with the X, your previous choice stays as it was.
- When you withdraw, we delete the Google Analytics, Meta and Google Ads cookies we can reach and reload the page. Cookies and data that Meta or YouTube store on their own domains (for example
fr) can be deleted in your browser settings. - Where your choice is kept and for how long. Your choice stays only on your device (the
ewibe_consentcookie or the app storage) for 6 months, then we ask again. We ask earlier if we significantly change our tools, purposes or the information we give you (which is why, with this update, we are asking again those who had accepted), or if we can no longer read your choice (for example because you cleared your cookies). - You can also block or delete cookies in your browser and phone settings. If you block necessary ones, some features may not work.
8. Transfers and provider information
Some providers process data in the United States, with the safeguards described in section 8 of the Privacy notice, where you will also find the full list of providers (section 7). To find out how third party providers use data, see their privacy policies: Google, including YouTube (policies.google.com/privacy); Meta (facebook.com/privacy/policy) and the joint controller agreement (facebook.com/legal/controller_addendum).