Cookies and local storage

Version: 2026-09-21

Ing. Francesco Massimo Gallo
Via Corrado Alvaro 7/A, 87036 Rende (CS), Italia
VAT number: IT03573440785
info@logisticait.com
+39 329 135 6443

Scope

This notice covers cookies and other storage used by xwish.link. Essential functions include authentication, request protection and interface preferences. The absence of a banner does not mean there are no cookies. Non-essential tools requiring consent need a prior, revocable choice; merely accepting this notice does not authorize them.

Sessions and security

The session cookie has a configurable name, normally derived from the app name with the _session suffix, and identifies a server-side session. XSRF-TOKEN protects requests when issued by the framework. The prepared production profile uses 120 minutes of inactivity; actual expiry depends on configuration and renewal. These tools serve access and security rather than advertising.

Remember me and preferences

Choosing Remember me may create a cookie prefixed remember_web_; the installed framework initially allows up to 400 days, subject to configuration, revocation and browser limits. Logout and security controls may end its effectiveness. The template may store preferences under admin-, front- and templateCustomizer- prefixes in cookies or localStorage. LocalStorage has no automatic expiry and remains until cleared or replaced. The final inventory of names and actual durations in the public environment must be completed before launch.

PWA and camera

The PWA stores offline screens and icons in browser cache; its service worker does not archive personal list pages for offline use. Cache may remain until updated or site data is removed. Scanning requires camera permission and processes frames on your device without sending video to UPCitemdb. The code is sent when you start product lookup. Camera permission can be revoked in browser settings.

External services and browser controls

Google Fonts requests reach Google even without advertising cookies; optional Google login may use the provider's own tools on its pages. See the privacy notice too. You can clear or block cookies, localStorage and cache in your browser, but some features may stop working and you may need to sign in again. The final inventory must include tools added by the hosting service or new integrations.