This is a translation provided for convenience. The Italian version, Informativa sui cookie, is the legally binding text.
This page explains which cookies and similar tools horrorcult.com uses, what they are for and how you can choose or delete them, under Article 122 of the Italian Personal Data Protection Code (Legislative Decree 196/2003), Article 13 GDPR and the Italian Data Protection Authority's cookie guidelines of 10 June 2021. In short: technical tools are always on; Google Analytics and YouTube and TikTok videos only work if you accept them in the banner, and until then they are not even loaded.
The data controller is Codedesign S.r.l., Via Nino Pesce 38, 18018 Taggia (IM), Italy, VAT number IT01739830089; contact details are in the privacy policy.
What cookies are
Cookies are small text files that a site stores in your browser. Similar technologies, such as the browser's local storage, work in a similar way. European and Italian law requires consent for those that are not strictly necessary to provide the service you ask for.
A cookie is "first-party" if it is set by the site you are visiting, "third-party" if it is set by another domain.
The banner and your choices
On your first visit a banner asks whether you accept two optional categories: Statistics (Google Analytics) and External content (YouTube and TikTok videos). "Accept" turns both on; "Reject", which is just as prominent, turns neither on. With "Customise" you choose category by category. Nothing is pre-selected.
Until you choose, and if you reject, the site does not load any Google, YouTube or TikTok program. Video thumbnails are served by our site, so your browser does not contact YouTube; instead of the video you find a preview with a link to watch it on YouTube or to turn videos on.
We save your choice in the technical cookie hc_consent for 6 months (180 days): during this period the banner is not shown again, unless this policy changes. After 6 months the banner asks you to choose again. To be able to prove consent we also keep a record of choices, without your IP address, for 24 months; then it is deleted automatically.
You can change your mind at any time from "Cookie preferences" at the bottom of every page. Withdrawal does not make what was done before unlawful.
Technical tools, always on
They make the site work and remember the choices you make. They do not require your consent (Article 122(1) of the Italian Privacy Code). They are all first-party, set by horrorcult.com, unless stated otherwise.
| Name | What it is for | Duration |
|---|---|---|
hc_consent |
Remembers the choice made in the banner: the version of this policy, the categories accepted, the date and a random code for the choice. | 6 months |
HorrorCult.Auth |
Keeps you signed in. Members only. | 30 days, renewed on every visit |
HorrorCult.Culture |
Remembers the language you chose. | 30 days |
HorrorCult.Session |
Briefly remembers that you are active, to update the date of your last activity without doing so on every page. Members only. | 30 minutes of inactivity |
.AspNetCore.OpenIdConnect.Nonce.*, .AspNetCore.Correlation.* |
Protect the sign-in procedure between the site and the authentication service. | During sign-in, at most 1 hour |
.AspNetCore.Antiforgery.* |
Protects the site's forms from submissions forged by other sites. | Until the browser is closed |
.AspNetCore.Mvc.CookieTempDataProvider |
Carries a confirmation or error message to the next page after you save a form. | Until the message is read |
When you sign in or sign up, the authentication service at identity.codedesign.it, run by Codedesign, sets on its own domain the technical session cookies needed to sign in, for example AUTH_SESSION_ID, KEYCLOAK_IDENTITY, KEYCLOAK_SESSION and KC_RESTART: they recognise and protect the sign-in session and serve no other purpose. If you sign in with Google, Google uses its own cookies on its domains, under its own policy.
The site also uses the browser's local storage to remember things you do. This data stays on your device until you delete it or it expires:
| Name | What it is for | Duration |
|---|---|---|
hc-join-pending |
If you tap a members-only action (for example "Want to watch") without being signed in, it remembers the film so it can be saved as soon as you sign up or sign in. | 24 hours, then deleted |
hc-join-strip-dismissed |
Remembers that you closed the invitation to sign up, so it is not shown again. | Until you delete it |
evw:* |
Only if you turned Ghoulie on in your profile (that is why it is not in the banner: you choose it there): keeps the history of your conversations with the assistant. | Until you delete it |
Statistics, only with your consent: Google Analytics
If you accept Statistics, the site loads Google Analytics 4 to understand how it is used: how many people come back, where they come from, which pages they visit. Google Analytics processes the identifiers stored in cookies, the pages visited, device and browser data and approximate location, and sets these cookies on our domain:
| Name | What it is for | Duration |
|---|---|---|
_ga |
Distinguishes visitors with a random identifier. | 2 years |
_ga_FR5P3QC5J4 |
Keeps the state of the visit session. | 2 years |
Some browsers delete these cookies earlier if you do not come back to the site: Safari, for example, after 7 days.
We have enabled IP address anonymisation. For this purpose Google Ireland Limited processes data on our behalf, as a processor; Google may also process data in the United States, at Google LLC, under the EU-US Data Privacy Framework, to which Google LLC is certified. How Google uses data from sites that use its services is explained at policies.google.com/technologies/partner-sites. We have turned off Google Signals and ad personalisation: the data is not used for advertising. User-level and event-level data is deleted after 14 months.
The legal basis is your consent (Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code), which you can withdraw at any time from "Cookie preferences". If you withdraw it, the site deletes the Google Analytics cookies.
External content, only with your consent: YouTube and TikTok
If you accept External content, on pages with a trailer or a video the site loads the YouTube player, in the privacy-enhanced version from youtube-nocookie.com, and TikTok videos. From that moment these services receive your IP address and the data of your visit and may store cookies and player data in your browser on their own domains, as independent controllers, under their own policies. This is what their public sources say:
- YouTube: for people living in the European Economic Area the controller is Google Ireland Limited (Google privacy policy). According to Google, in privacy-enhanced mode watching a video is not used to personalise your experience on YouTube or the advertising you see outside our site (YouTube Help). The cookies Google also uses for YouTube, for example
YSC(session security),PREF(player preferences) and__Secure-YNID(running the service), are described on the page How Google uses cookies. Google processes data on servers around the world and, for the United States, relies on the EU-US Data Privacy Framework (policies.google.com/privacy/frameworks). - TikTok: for people living in the European Economic Area the joint controllers are TikTok Technology Limited (Ireland) and TikTok Information Technologies UK Limited. TikTok states that it uses cookies to remember your language, to avoid showing you the same video more than once, for security and for marketing, and that it transfers data outside the European Economic Area on the basis of adequacy decisions or standard contractual clauses (TikTok's EEA privacy policy, TikTok cookie policy).
The legal basis is your consent (Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code), which you can withdraw at any time from "Cookie preferences".
Images from other sites
Some images, such as The Movie Database (TMDB) posters, publications' article covers and the profile pictures of people who sign in with Google, are loaded by your browser directly from the servers of whoever publishes them. They do not set cookies on our behalf, but those servers receive your IP address, as with any image on the internet. Details are in the privacy policy.
How to change your choice and delete data
- Statistics and External content: from "Cookie preferences" at the bottom of every page.
- Everything the site has saved: from your browser settings, usually in the privacy or site settings section, under cookies and site data. If you delete
HorrorCult.Authyou will need to sign in again; on your next visit the banner will ask you to choose again.
Questions
For any question about this policy write to [email protected]. How we process personal data, and your rights, are described in the privacy policy.