Cookie Policy of POP API

Welcome to the cookie policy of POP API. This policy will help you understand what cookies and tracking technologies we use, how we use them and what your rights are in relation to it

Latest update: 9 April 2026

Introduction

This document informs Users about the technologies that help POP API to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with POP API.

For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.

Some of the purposes for which Trackers are used may also require the User's consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.

POP API uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information – such as the presence of other Trackers - in the linked privacy policies of the respective third-party providers or by contacting the Owner.

Owner and Data Controller

Babini Mazzari S.r.l.
Via Francesco Baracca, 21
Lugo (RA) 48022
ITALY

Owner contact email: legal@babinimazzari.com

How POP API uses Trackers

Necessary

POP API uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.

Trackers managed directly by the Owner

POP API

WooCommerce

Company: POP API

Personal Data processed: billing address +9

WooCommerce is a WordPress plugin used by POP API that allows the Owner to build and run an e-commerce website.

Personal Data processed:
  • billing address
  • data relating to the point of sale
  • email address
  • name
  • order ID
  • payment info
  • phone number
  • shipping address
  • Trackers
  • Usage Data
Service provided by:
  • POP API
Trackers duration:
  • wc_cart_created: indefinite
  • woocommerce_cart_hash: indefinite
  • woocommerce_items_in_cart: indefinite
  • woocommerce_recently_viewed: indefinite
  • wp_woocommerce_session_*: 2 days

Trackers managed by third parties

Cloudflare, Inc.

Cloudflare

Company: Cloudflare, Inc.

Place of processing: United States

Personal Data processed: Trackers +1

Cloudflare is a traffic optimisation and distribution service provided by Cloudflare Inc. The way Cloudflare is integrated means that it filters all the traffic through POP API, i.e., communication between POP API and the User's browser, while also allowing analytical data from POP API to be collected.

Personal Data processed:
  • Trackers
  • various types of Data as specified in the privacy policy of the service
Service provided by:
Trackers duration:
  • _cfuvid: indefinite
  • cf_clearance: 30 minutes
SiteGround Hosting Ltd.

SiteGround Hosting

Company: SiteGround Hosting Ltd. +1

Place of processing: United Kingdom +3

Personal Data processed: Trackers +2

SiteGround Hosting is a hosting service provided by SiteGround Hosting Ltd. or by SiteGround Spain S.L., depending on how the Owner manages the Data processing.

Personal Data processed:
  • Trackers
  • Usage Data
  • various types of Data as specified in the privacy policy of the service
Service provided by:
PayPal Inc.

PayPal

Company: PayPal Inc.

Place of processing: See the PayPal privacy policy

Personal Data processed: billing address +8

PayPal is a payment service provided by PayPal Inc., which allows Users to make online payments.

Personal Data processed:
  • billing address
  • company name
  • email address
  • first name
  • last name
  • payment info
  • shipping address
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • LANG: 8 hours
  • __paypal_storage__: indefinite
  • akavpau_ppsd: duration of the session
  • enforce_policy: duration of the session
  • l7_az: duration of the session
  • nsid: duration of the session
  • ts: duration of the session
  • tsrce: duration of the session
  • x-cdn: duration of the session
  • x-pp-s: duration of the session
Stripe Inc

Stripe

Company: Stripe Inc

Place of processing: United States

Personal Data processed: billing address +5

Stripe is a payment service provided by Stripe Inc.

Personal Data processed:
  • billing address
  • email address
  • first name
  • last name
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • 1: indefinite
  • __Host-LinkSession: 2 years
  • __stripe_mid: 1 year
  • __stripe_sid: 30 minutes
  • _mf: indefinite
  • dashboard.banner-dismissals: duration of the session
  • link.auth_session_client_secret: duration of the session
  • m: 2 years
  • pay_sid: 1 year
iubenda srl

iubenda Privacy Controls and Cookie Solution

Company: iubenda srl

Place of processing: Italy

Personal Data processed: IP address +1

The iubenda Privacy Controls and Cookie Solution allows the Owner to collect and store Users’ preferences related to the processing of personal information and in particular to the use of Cookies and other Trackers on POP API.

Personal Data processed:
  • IP address
  • Trackers
Service provided by:
Trackers duration:
  • _iub_cs-*: 1 year
Google Ireland Limited

Google Tag Manager

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Google Tag Manager is a tag management service provided by Google Ireland Limited.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Cloudflare, Inc.

Cloudflare Bot Management

Company: Cloudflare, Inc.

Place of processing: United States

Personal Data processed: app information +37

Cloudflare Bot Management is a malicious bot protection and management service provided by Cloudflare, Inc.

Personal Data processed:
  • app information
  • Application opens
  • browser information
  • browsing history
  • city
  • clicks
  • country
  • county
  • custom events
  • device information
  • device logs
  • geography/region
  • interaction events
  • IP address
  • keypress events
  • language
  • latitude (of city)
  • launches
  • longitude (of city)
  • metro area
  • motion sensor events
  • mouse movements
  • number of sessions
  • operating systems
  • page events
  • page views
  • province
  • scroll position
  • scroll-to-page interactions
  • search history
  • session duration
  • session statistics
  • state
  • touch events
  • Trackers
  • Usage Data
  • video views
  • ZIP/Postal code
Service provided by:
Trackers duration:
  • __cf_bm: 3 seconds
  • __cfruid: duration of the session
  • _cfuvid: indefinite
  • cf_clearance: 30 minutes
  • cf_ob_info: 3 seconds
  • cf_use_ob: 3 seconds
  • cfmrk_cic: 3 months
Google LLC

Google reCAPTCHA

Company: Google LLC

Place of processing: United States

Personal Data processed: answers to questions +8

Google reCAPTCHA is a spam protection service provided by Google LLC. The use of reCAPTCHA is subject to the Google privacy policy and terms of use.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed:
  • answers to questions
  • clicks
  • keypress events
  • motion sensor events
  • mouse movements
  • scroll position
  • touch events
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • _GRECAPTCHA: duration of the session
  • rc::a: indefinite
  • rc::b: duration of the session
  • rc::c: duration of the session
  • rc::f: indefinite

Functionality

POP API uses Trackers to enable basic interactions and functionalities, allowing Users to access selected features of the Service and facilitating the User's communication with the Owner.

Trackers managed by third parties

Mailing list or newsletter

Personal Data processed: company name +5

By registering on the mailing list or for the newsletter, the User’s email address will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature concerning POP API. Your email address might also be added to this list as a result of signing up to POP API or after making a purchase.

Personal Data processed:
  • company name
  • email address
  • first name
  • last name
  • Trackers
  • Usage Data

Experience

POP API uses Trackers to improve the quality of the user experience and enable interactions with external content, networks and platforms.

Trackers managed by third parties

Fonticons, Inc.

Font Awesome

Company: Fonticons, Inc.

Place of processing: United States

Personal Data processed: Trackers +1

Font Awesome is a typeface visualisation service provided by Fonticons, Inc. that allows POP API to incorporate content of this kind on its pages.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Google Ireland Limited

Google Fonts

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Google Fonts is a typeface visualisation service provided by Google Ireland Limited that allows POP API to incorporate content of this kind on its pages.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:

Measurement

POP API uses Trackers to measure traffic and analyze User behavior to improve the Service.

Trackers managed directly by the Owner

POP API

WooCommerce Order Attribution Tracking

Company: POP API

Personal Data processed: page views +3

WooCommerce Order Attribution Tracking is an analytics feature of WooCommerce that connects data from online orders to marketing activities, channels, or campaigns in order to measure their efficacy.

Personal Data processed:
  • page views
  • referral URL
  • Trackers
  • Usage Data
Service provided by:
  • POP API
Trackers duration:
  • sbjs_current: indefinite
  • sbjs_current: indefinite
  • sbjs_current_add: indefinite
  • sbjs_first: indefinite
  • sbjs_first_add: indefinite
  • sbjs_first_add: indefinite
  • sbjs_migrations: indefinite
  • sbjs_session: 30 minutes
  • sbjs_udata: indefinite
  • sbjs_udata: indefinite
  • store_notice*: indefinite

Trackers managed by third parties

Google Ireland Limited

Google Analytics 4

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: number of Users +3

Google Analytics 4 is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of POP API, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network. In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed:
  • number of Users
  • session statistics
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • _ga: 2 years
  • _ga_*: 2 years

Marketing

POP API uses Trackers to deliver personalised ads or marketing content, and to measure their performance.

Trackers managed by third parties

AddToAny LLC

AddToAny

Company: AddToAny LLC

Place of processing: United States

Personal Data processed: Trackers +1

AddToAny is a service provided by AddToAny LLC, which displays a widget that allows interaction with social networks and external platforms as well as sharing the contents of POP API. Depending on the configuration, this service can display widgets belonging to third parties such as the managers of social networks where interactions are shared. In this case, also the third parties that provide the widget will be informed of interactions and Usage Data on the pages where this service is installed. Data collected through the service may be used to help deliver interest-based advertising. Users can opt out of third-party interest-based advertising by visiting the Network Advertising Initiative opt-out page.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Jetpack Digital LLC

Jetpack

Company: Jetpack Digital LLC

Place of processing: United States

Personal Data processed: Trackers +1

Jetpack is an advertising service provided by Jetpack Digital LLC.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • JP:*: indefinite
Google Ireland Limited

Google Ads conversion tracking

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Google Ads conversion tracking is an analytics service provided by Google Ireland Limited that connects data from the Google Ads advertising network with actions performed on POP API.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • IDE: 2 years
  • test_cookie: 15 minutes
Google Ireland Limited

Google Ads Similar audiences

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Similar audiences is an advertising and behavioral targeting service provided by Google Ireland Limited that uses Data from Google Ads Remarketing in order to display ads to Users with similar behavior to Users who are already on the remarketing list due to their past use of POP API. On the basis of this Data, personalized ads will be shown to Users suggested by Google Ads Similar audiences.

Users who don't want to be included in Similar audiences can opt out and disable the use of advertising Trackers by going to: Google Ad Settings.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • Conversion: 3 months
  • DSID: 14 days
  • FCNEC: 1 year
  • FLC: 10 seconds
  • FPAU: 3 months
  • FPGCLAW: 3 months
  • FPGCLDC: 3 months
  • FPGCLGB: 3 months
  • GCL_AW_P: 3 months
  • GED_PLAYLIST_ACTIVITY: duration of the session
  • IDE: 2 years
  • NID: 6 months
  • RUL: 1 year
  • __gads: 2 years
  • __gpi: 2 years
  • __gpi_optout: 2 years
  • __gsas: 2 years
  • _gac_<wpid>: 3 months
  • _gac_gb_<wpid>: 3 months
  • _gcl_ag: 3 months
  • _gcl_au: 3 months
  • _gcl_aw: 3 months
  • _gcl_dc: 3 months
  • _gcl_gb: 3 months
  • _gcl_gf: 3 months
  • _gcl_gs: 3 months
  • _gcl_ha: 3 months
  • ar_debug: 3 months
  • id: 2 years
  • receive-cookie-deprecation: 6 months
  • test_cookie: 15 minutes
Meta Platforms Ireland Limited

Meta ads conversion tracking (Meta pixel)

Company: Meta Platforms Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms Ireland Limited that connects data from the Meta Audience Network with actions performed on POP API. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • _fbc: 3 months
  • _fbp: 3 months
  • fr: 3 months
  • lastExternalReferrer: duration of the session
  • lastExternalReferrerTime: duration of the session
Meta Platforms Ireland Limited

Meta Lookalike Audience

Company: Meta Platforms Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Meta Lookalike Audience is an advertising and behavioural targeting service provided by Meta Platforms Ireland Limited that uses Data collected through Meta's Custom Audience in order to display ads to Users with similar behaviour to Users who are already in a Custom Audience list on the basis of their past use of POP API or engagement with relevant content across Meta's apps and services. On the basis of these Data, personalised ads will be shown to Users suggested by Meta Lookalike Audience.

Users can opt out of Meta's use of Trackers for ads personalisation by visiting this opt-out page.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • _fbp: 3 months
  • lastExternalReferrer: duration of the session
  • lastExternalReferrerTime: duration of the session
Google Ireland Limited

Google Ads Remarketing

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Google Ads Remarketing is a remarketing and behavioural targeting service provided by Google Ireland Limited that connects the activity of POP API with the Google Ads advertising network and the DoubleClick Cookie.

In order to understand Google's use of Data, consult Google's partner policy.

Users can opt out of Google's use of Trackers for ads personalisation by visiting Google's Ads Settings.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • Conversion: 3 months
  • DSID: 14 days
  • FCNEC: 1 year
  • FLC: 10 seconds
  • FPAU: 3 months
  • FPGCLAW: 3 months
  • FPGCLDC: 3 months
  • FPGCLGB: 3 months
  • GCL_AW_P: 3 months
  • GED_PLAYLIST_ACTIVITY: duration of the session
  • IDE: 2 years
  • NID: 6 months
  • RUL: 1 year
  • __gads: 2 years
  • __gpi: 2 years
  • __gpi_optout: 2 years
  • __gsas: 2 years
  • _gac_<wpid>: 3 months
  • _gac_gb_<wpid>: 3 months
  • _gcl_ag: 3 months
  • _gcl_au: 3 months
  • _gcl_aw: 3 months
  • _gcl_dc: 3 months
  • _gcl_gb: 3 months
  • _gcl_gf: 3 months
  • _gcl_gs: 3 months
  • _gcl_ha: 3 months
  • ar_debug: 3 months
  • id: 2 years
  • receive-cookie-deprecation: 6 months
  • test_cookie: 15 minutes
SendinBlue SAS

Brevo marketing automation

Company: SendinBlue SAS

Place of processing: France

Personal Data processed: email address +2

Brevo marketing automation is a User database management service provided by SendinBlue SAS.

Personal Data processed:
  • email address
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • sib_cuid: 7 months
Beehiiv, Inc.

Beehiiv

Company: Beehiiv, Inc.

Place of processing: United States

Personal Data processed: email address +2

Beehiiv is an email address management and message sending service provided by Beehiiv, Inc.

Personal Data processed:
  • email address
  • Trackers
  • Usage Data
Service provided by:
SendinBlue SAS

Brevo email

Company: SendinBlue SAS

Place of processing: France

Personal Data processed: email address +2

Brevo email is an email address management and message-sending service provided by SendinBlue SAS.

Personal Data processed:
  • email address
  • Trackers
  • Usage Data
Service provided by:

How to manage preferences and provide or withdraw consent on POP API

Whenever the use of Trackers is based on consent, users can provide or withdraw such consent by setting or updating their preferences via the relevant privacy choices panel available on POP API.

With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.

How to control or delete Cookies and similar technologies via your device settings

Users may use their own browser settings to:

  • See what Cookies or other similar technologies have been set on the device;
  • Block Cookies or similar technologies;
  • Clear Cookies or similar technologies from the browser.

The browser settings, however, do not allow granular control of consent by category.

Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:

Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).

How to opt out of interest-based advertising

Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.

The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.

Consequences of denying consent

Users are free to decide whether or not to grant consent. However, please note that Trackers help POP API to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, in the absence of the User's consent, the Owner may be unable to provide related features.