Cookie Policy
Version 1.0
Data Controller: Amazed S.r.l. — Registered office: Via Volturno 5, 20900 Monza (MB) — VAT: 14657960960 — REA number: MB-2798911 — Certified email (PEC): amazed@pec.it — Email: support@amazed.tours
Last updated: 14/07/2026 — Version 1.0
1. What cookies and similar technologies are
Cookies are small text files that visited sites send to the user's device, where they are stored to be transmitted again to the same sites on the next visit.
Amazed uses both cookies and similar technologies (localStorage, sessionStorage and similar), which allow data to be stored on the user's device for technical, functional or analytical purposes. In this Cookie Policy the term "cookie" is used broadly to include all these technologies.
This Cookie Policy applies to the website https://amazed.tours and to the Progressive Web Application (PWA) https://app.amazed.tours, hereinafter jointly referred to as "the Service".
2. Types of cookies used
Amazed uses the following categories of cookies:
2.1 Technical cookies (essential)
They are strictly necessary for the operation of the Service. Without them, some basic features would not be available. They do not require user consent.
They include:
- Authentication and session cookies (Keycloak) — keep the user logged in during navigation
- Language preference cookies — store the chosen language
- Consent management cookies — store the user's choices about the cookies themselves
- Local storage of legal consent preferences (registration, age, acceptance of Terms) — required by GDPR regulation for traceability
- Technical storage for the management of the Progressive Web App and updates
2.2 Functional cookies
They improve the user experience but are not strictly necessary. They require user consent.
They include:
- Storage of gameplay progress (completed stages, hints used)
- Storage of geolocation preferences
- Storage of preferences relating to the display of suggestions and banners (e.g. PWA installation)
2.3 Analytical cookies
They help the Data Controller understand how users interact with the Service, in anonymous or aggregated form. They require user consent.
We currently use:
- PostHog (EU instance, Frankfurt) — analytics platform that collects data on Service usage, such as pages visited, actions performed, time spent. Data is collected in pseudonymized form and is used exclusively in aggregated form.
2.4 Marketing and profiling cookies
Not currently used. Should the Service in the future include advertising tools, this Cookie Policy will be updated accordingly and specific consent will be requested.
3. Third-party cookies
Some cookies or storage technologies may be set by third-party services used by the Service to provide specific functionality. The Data Controller does not have direct access to such data; it is processed according to the respective privacy policies.
Active third-party services:
| Service | Purpose | Category | Privacy Policy |
|---|---|---|---|
| Vercel | Site and application hosting | Technical | https://vercel.com/legal/privacy-notice |
| Keycloak (self-hosted) | User authentication | Technical | Internal |
| Mapbox | Interactive map display | Technical/Functional | https://www.mapbox.com/legal/privacy |
| Stripe | Payment processing (checkout page only) | Technical | https://stripe.com/privacy |
| PostHog (EU instance) | Usage analytics | Analytical | https://posthog.com/privacy |
| Google Analytics (amazed.tours site only) | Usage analytics | Analytical | https://policies.google.com/privacy |
4. Consent management
On first access to the Service, the user is shown a cookie consent banner with the following options:
- Accept all — to enable technical, functional and analytical cookies
- Reject all — to enable only technical cookies (mandatory)
- Customize — allows choosing category by category
The user can change their preferences at any time by accessing the Cookie Preferences section from their user profile.
5. How to disable cookies from the browser
In addition to the consent banner, the user can manage cookies directly from their browser settings. Each browser offers different ways to manage, limit or delete cookies:
- Google Chrome: chrome://settings/cookies
- Mozilla Firefox: about:preferences#privacy
- Safari: Preferences → Privacy
- Microsoft Edge: edge://settings/privacy
Attention: disabling technical cookies may compromise the operation of the Service.
6. Cookie duration
The cookies used by the Service have variable duration:
- Session cookies: automatically deleted when the browser is closed
- Preference cookies (language, consent): 12 months
- Authentication cookies: managed by the Keycloak system. The access token lasts a few minutes; the session can last up to 30 days unless the user explicitly chooses "Remember me".
- Analytical cookies (PostHog): 12 months
7. Regulatory references
This Cookie Policy is drafted in compliance with:
- EU Regulation 2016/679 (GDPR)
- Directive 2002/58/EC (ePrivacy)
- Italian Data Protection Authority Ruling of 10 June 2021 on cookies and other tracking tools
8. Changes to the Cookie Policy
The Data Controller reserves the right to modify this Cookie Policy at any time. Changes will be notified through the application and the update date will be indicated at the top of the document.
9. Contacts
For any question relating to this Cookie Policy, you can write to: support@amazed.tours.
Amazed S.r.l. — Via Volturno 5, 20900 Monza (MB), Italy — VAT 14657960960 — REA MB-2798911 — PEC: amazed@pec.it