Cookie Policy
Version 2026-11-01 · in effect since November 1, 2026 · Change history
This translation is provided for information only. In case of any discrepancy, the Italian version prevails.
On the parkito.app website we use cookies and similar tools: technical ones always, analytics and marketing ones only if you consent. This Cookie Policy supplements the Privacy Policy and is drawn up pursuant to Art. 122 of the Italian Privacy Code, Arts. 13 and 7 GDPR and the Guidelines of the Italian Data Protection Authority (Garante) of 10 June 2021 and 17 April 2026.
1. Controller
All Indabox S.r.l., via G. Mazzini n. 11, Bologna (BO), VAT no. 04099131205 ("Parkito"). Contact: help@parkito.app, PEC (certified e-mail) autoindabox@pec.it.
2. What cookies and similar tools are
Cookies are small files that the website saves in your browser and reads again on later visits. Other tools that read or write information on your device work in a similar way: browser local storage (localStorage, sessionStorage), pixels, scripts and app identifiers. In this policy we call them all "tools".
- First-party: set by parkito.app. Third-party: set by another party through our website.
- Session: deleted when you close the browser. Persistent: remain until the stated expiry.
3. How we manage your consent
We use a consent management tool installed on our website and based on the open-source software c15t, without external services: your choice stays in your browser and proof of consent is kept by Parkito.
- First visit. A banner appears with three equally prominent controls: "Accept all", "Reject all" and "Customize", plus an X to close it. Until you make your choice, only technical tools are active: the others are not loaded.
- Closing with the X or "Reject all". Both count as a refusal: you continue browsing with technical tools only. Scrolling the page or continuing to browse does not count as consent.
- Customize. You can choose by category (Analytics, Marketing) and see the list of individual tools.
- Duration of your choice. We remember your choice for 6 months. We show you the banner again sooner only if the tools or purposes change significantly, or if you delete your cookies.
- Changing and withdrawing. You can change your mind at any time from the "Privacy preferences" link at the bottom of every page. Withdrawing is as easy as consenting. When you withdraw, we remove the first-party cookies of the withdrawn categories.
- Record. We keep proof of your choice: random consent identifier, categories chosen, policy version, date and time. We do not link your name or e-mail to it. We keep it for 12 months from your choice.
Refusing does not restrict your use of the website or Bookings.
4. Technical tools (always active)
They are necessary for the website to work or to provide a service you have requested, and therefore do not require consent (Art. 122(1) Italian Privacy Code).
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| pkt_consent, pkt_consent-vendors | Cookie and localStorage | Parkito | Store your consent choices | 6 months |
| NEXT_LOCALE | Cookie | Parkito | Remembers the website language | 12 months |
| parkito.vehicleId, parkito.hasLpg | localStorage | Parkito | Remember the vehicle type and LPG fuel to filter compatible Parking Spaces | Until deleted from the browser |
| parkito:terms-notice-dismissed:[version] | localStorage | Parkito | Remembers that you have read the notice about the new version of the Terms | Until deleted from the browser |
| parkito:search_walkthrough_completed | localStorage | Parkito | Avoids showing the search guide again | Until deleted from the browser |
| theme | localStorage | Parkito | Remembers the light or dark theme you chose | Until deleted from the browser |
| supabase-cache-[file] | localStorage | Parkito | Local copy of the reviews shown on the website, to load them faster | 7 days |
| pkt_web_throttle_v1 | localStorage | Parkito | Avoids counting the same view or search more than once in the aggregate counters, which contain no identifiers | Until deleted from the browser |
| parkito.locale, parkito:home_intro_seen, announcement:[event] | sessionStorage | Parkito | Language, introduction and notices already seen during the session | Session |
| parkito.dateFrom, parkito.dateTo, parkito.checkInTime, parkito.checkOutTime, parkito.recentSearches, parkito:map-return | sessionStorage | Parkito | Dates, times and recent searches, and return to the map with the current search | Session |
| pkt_web_areac_started_v1, sanremo_confirmed:[payment] | sessionStorage | Parkito | Status of the payment in progress, to show you the correct confirmation | Session |
| __stripe_mid, __stripe_sid | Third-party cookie | Stripe Payments Europe, Ltd | Fraud prevention on payment pages hosted by Stripe | 1 year; 30 minutes |
5. Analytics tools (only with consent)
They tell us how the website is used, so we can improve it. They are active only if you consent to the "Analytics" category.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| _ga | Cookie | Google Ireland Ltd (Google Analytics 4) | Distinguishes visitors for usage statistics | 13 months |
| _ga_[ID] | Cookie | Google Ireland Ltd (Google Analytics 4) | Maintains the session state | 13 months |
| ph_[key]_posthog | Cookie and localStorage | PostHog, Inc. (EU servers, Frankfurt) | Analysis of browsing paths and website errors | 12 months |
| pkt_web_anon_id_v1 | localStorage | Parkito | Random browser identifier for website usage statistics | Until withdrawal or deletion from the browser |
| pkt_web_session_v1, pkt_web_parking_views_v1 | sessionStorage | Parkito | Group the visits of the same session and the Parking Spaces already viewed, for statistics | Session |
Google Analytics 4 does not log or store IP addresses. Google signals and ad personalisation are disabled. Privacy notices: Google, PostHog.
6. Marketing tools (only with consent)
They measure the effectiveness of our advertising campaigns, for example whether a Booking comes from an ad. They are active only if you consent to the "Marketing" category.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| _gcl_au | Cookie | Google Ireland Ltd (Google Ads) | Links conversions on the website to ad clicks | 13 months |
| _gcl_aw | Cookie | Google Ireland Ltd (Google Ads) | Stores the identifier of the ad click you arrived from | 13 months |
| _gcl_ls | localStorage | Google Ireland Ltd (Google Ads) | Stores the ad click data to attribute the conversion | 13 months |
| Google cookies on its own domains (e.g. IDE, ar_debug) | Third-party cookie | Google Ireland Ltd | Ad measurement and personalisation | Up to 13 months |
We use Google's consent mode (Consent Mode v2): Google tags are loaded only after your consent and receive your choices by category. When you make a purchase after consenting to Marketing, we also send Google your e-mail in encrypted (hashed) form, to attribute the conversion to the ad. Privacy notices: Google.
7. Third-party content and resources without cookies
To show you the map, images and Parking Space data, your browser connects to the servers of the providers listed below, which receive your IP address and the technical data of the request. These providers do not set cookies through our website and process the data as our processors.
| Provider | Content |
|---|---|
| Apple Distribution International Ltd (Apple Maps, MapKit JS) | Map and map tiles |
| Mapbox, Inc. | Route calculation to the Parking Space |
| Sanity AS | Images and editorial content |
| Supabase, Inc. | Data on Parking Spaces and zones on the map |
| LottieFiles (lottie.host) | Animations on some pages |
Booking a call. On the "Become a Host" page, only if you open the calendar to book a call, your browser loads Google Calendar (Google Ireland Ltd), which may set its own cookies in accordance with Google's privacy notice. The calendar is not loaded until you open it.
8. Tracking in e-mails
Some of our e-mails contain tracking pixels (invisible images that record opens) and tracked links (which record clicks). We use them in accordance with the Garante's Guidelines of 17 April 2026.
| Type of e-mail | What we measure | Basis |
|---|---|---|
| Promotional and newsletters | Opens and clicks of the individual recipient | Consent, given together with consent to promotional communications |
| Service (confirmations, refunds, changes to the Terms) | Only the overall open rate, in anonymous form, or security checks | Exemption from consent provided for by the Guidelines |
Every promotional e-mail contains a link to unsubscribe or to disable tracking only. You can also prevent images from loading in your e-mail program's settings. The identifiers in the pixels are random and do not contain your e-mail address.
9. Parkito app
In the iOS and Android app we use device identifiers and tools with the same categories and rules as this policy. Non-technical ones are active only with your consent, which you can change in the "Privacy" section of the app settings. On iOS we also ask for the permission required by App Tracking Transparency before any tracking across third-party apps. In the app we use: Sentry (error and crash reporting, a technical tool), push notifications through Apple and Google services, Mapbox (maps), Stripe (payments), Veriff (identity verification) and AppsFlyer (attribution of installs to advertising campaigns, only with consent).
10. Managing tools from your browser
In addition to the "Privacy preferences" panel, you can delete or block cookies in your browser settings: Chrome, Safari, Firefox, Edge. If you block technical tools, some features, such as logging in to your account, may not work.
11. Transfers, rights and contacts
Some providers in sections 5 and 6 may process data in the United States, with the safeguards described in section 8 of the Privacy Policy. There you will also find your rights and how to lodge a complaint with the Garante. For any questions, write to help@parkito.app.
12. Changes
We update this policy when the tools or purposes change. Each version states its effective date; previous versions remain available on the Change history page. If we add tools or purposes that require consent, we will show you the banner again.