Cookies and local storage

There is no cookie banner on this site, and that is not an oversight. Ferrario sets no advertising cookies, no analytics cookies and no third-party cookies at all, so there is nothing to ask you about. Under the ePrivacy Directive (Article 5(3)) consent is required for storage that is not strictly necessary for a service you asked for. Everything below is strictly necessary for signing you in or for remembering a choice you made on purpose. The obligation that does apply is to tell you clearly what is stored — which is what this page is.

If that ever stops being true, the banner appears before the cookie does.

Cookies

Session cookies, named sb-*, set by our sign-in provider when you sign in. They keep you signed in and let the server rotate your session safely. They are httpOnly (JavaScript cannot read them), sameSite=lax (they are not sent from other sites), and secure outside local development (HTTPS only). They last as long as your session, and signing out removes them.

`bubo.lang` — English or Dutch, set only when you pick a language with the language switch, so the page arrives in that language before you have signed in. It holds nothing but en or nl, lasts a year, and is sameSite=lax and secure outside local development. Once you are signed in, your account holds the same choice.

There are no other cookies. None of them are used to profile you, and none of them are readable by anyone else.

Local storage

Values written by the page itself, kept in your browser and never sent anywhere by the page:

• Display choices — money.theme and money.theme.device (light or dark, for your account and for this device), money.text (normal or larger text), money.motion (full or reduced motion), money.assistant (which assistant's colours to paint), money.owl (whether the assistant is animated on this device) and money.showcase (whether the decorative showcase effects are on for this device). They let the page paint in the right theme and size before anything else loads. Your account holds the same preferences, so they follow you between devices; the browser copy is only a head start.
• Small memories of this device — ferrario.first-hello (the assistant has said hello here) and ferrario.goals-seen (which goals this device has already celebrated), so a moment is not repeated on every visit. Which guided tours you have finished is kept in your account instead.
• Your onboarding progress — ferrario-onboarding-v1: followed by your account's id (or guest before an account exists). It holds your place in onboarding and the answers you have given so far, so a reload or a dropped connection does not lose them. It stays on this device until you clear your browser's storage for this site. If you share a computer, clear it after you finish.

Session storage — ferrarioEntered, which remembers for this tab only that you have already stepped past the landing page's opening, so it does not play again. It disappears when the tab closes.

Clearing your browser storage loses nothing held in your account.

What we do not do

• No advertising or marketing cookies.
• No third-party trackers, pixels, or social buttons that phone home.
• No cross-site tracking, and no fingerprinting.
• No analytics that identify you. If usage measurement is added later — for example for a closed student test — it will be minimal, separately consented, and named on this page before it is switched on.

Things we load from elsewhere

Nothing, for the pages themselves. The typeface, images and video are served from this site, so opening Ferrario sends no request to any other company. A link to a profile on another site (such as LinkedIn) is an ordinary link: nothing is loaded from it unless you click it.

Document previews are loaded from our own storage provider using short-lived signed links. They set no cookies.

When bot protection is switched on for the sign-up and sign-in forms, it will be named here — including what it stores — before it runs.

Controlling it

Every browser can block or clear cookies and site storage. Blocking our session cookie means you cannot stay signed in, because that is the only thing it is for. Blocking local storage only means the page may flash the wrong theme before it catches up.