Cookie Policy
Notice on the use of cookies under Art. 122 of Italian Legislative Decree 196/2003 and the Italian Data Protection Authority's measures of May 8, 2014 and June 10, 2021. Last updated: July 1, 2026.
1. What cookies are
Cookies are small text files that websites save in the user's browser. They are used to make the site work properly, remember preferences and collect aggregated usage statistics.
Expensum uses exclusively first-party cookies (set directly by expensum.it) and third-party cookies (set by the providers listed below), always in accordance with the preferences expressed by the user via the cookie banner.
2. Technical cookies (always active)
Technical cookies are necessary for the website to function and do not require consent. They cannot be disabled.
| Name | Purpose | Duration |
|---|---|---|
cc_cookie | Stores the user's cookie consent preferences | 6 months |
| Session cookie (web app authentication) | Keeps the user's authenticated session in the web app | Session / 30 days |
csrf_token | CSRF protection for authenticated operations | Session |
3. Analytics cookies (with prior consent)
Activated only if the user accepts the "Analytics" category in the cookie banner. They help us understand how users use the site, in aggregated and anonymous form.
| Provider | Cookie | Purpose | Duration | Privacy |
|---|---|---|---|---|
| Google Analytics 4 | _ga, _gid, _ga_* | Aggregated statistics: sessions, pages visited, traffic source | 2 years / 24h | Google Privacy Policy |
| PostHog | ph_*, posthog_* | Pseudonymized product analytics: onboarding funnel, UX events, feature usage | 1 year | PostHog Privacy Policy |
4. Marketing cookies (with prior consent)
Activated only if the user accepts the "Marketing" category in the cookie banner. They allow us to measure the effectiveness of advertising campaigns and show relevant ads.
| Provider | Cookie | Purpose | Duration | Privacy |
|---|---|---|---|---|
| Meta Pixel (Facebook/Instagram) | _fbp, _fbc | Conversion tracking, campaign optimization on Facebook and Instagram | 90 days | Meta Privacy Policy |
4b. Third-party domain cookies
Some analytics and marketing cookies are set directly by third-party domains (e.g.*.google-analytics.com, *.facebook.com,*.posthog.com). These cookies are subject to the respective privacy policies of the providers, linked in the tables above. Expensum has no access to the data collected by these cookies beyond what is aggregated in the respective providers' dashboards.
5. Managing preferences
On first visit to the site, a banner appears with three equally weighted options:
- Accept all: activates analytics and marketing cookies.
- Reject all (or close the banner with the ×): only necessary technical cookies are activated.
- Manage preferences: individually select which categories to activate.
Preferences are remembered for 6 months. You can change them at any time by clicking "Manage cookie preferences" in the footer or by clearing your browser's cookies.
To delete cookies already saved: open your browser settings → Privacy and security → Clear browsing data → Check "Cookies and other site data".
6. Telegram web app cookies
Expensum's Telegram bot does not use cookies. Tracking takes place via the Telegram identifier provided by the platform, which is subject to Telegram's Privacy Policy.
7. Regulatory references
This Cookie Policy is drafted in compliance with:
- EU Regulation 2016/679 (GDPR)
- Italian Legislative Decree 196/2003 as amended (Privacy Code)
- Italian Data Protection Authority measure of 10 June 2021 on cookies
- EDPB Guidelines No. 5/2019 on consent
8. Contact
For any questions about cookies: expensum.finance@gmail.com
For the overall processing of personal data, see the Privacy Policy.