Cookie Policy

1. Definition of Browser Cookies

Cookies are small text documents saved onto your browser directory by the websites you visit. They allow digital platforms to verify your authentication credentials, log interface selections, and compile traffic reports.

Cookies are characterized by the following parameters:

Storage Medium: Text strings placed within browser directories on your device.
Source Origin: First-party cookies set directly by BomberManager SRL, or third-party cookies from external providers.
Lifespan Types: Session cookies (deleted when closing the browser) or persistent cookies (saved until expiration).
Local Web Storage: Technologies like localStorage and sessionStorage that temporarily cache custom coordinates.

2. General Scope of Cookie Usage

At BomberManager (registered in Italy), we utilize cookies and sessionStorage tokens to maintain active member logins, store saved chalkboard coordinates, keep track of poll responses, and evaluate how page load times vary across browsers.

Our tracking scope includes:

Authentication Flow: Identifying you as you navigate between tactical board sub-pages.
State Retention: Preserving custom stadium coordinates during wind-tunnel simulation runs.
Performance Telemetry: Assessing latency metrics to choose the nearest European server node.
Preference Storing: Remembering user settings like dark mode toggles or selected manager tactics.

3. Essential System Cookies

These cookies are mandatory for the platform to function. They handle authentication session validation and secure cross-site request forgery (CSRF) tokens. Blocking them will disable sign-in abilities.

Essential items include:

session_id: Used to map your current request cycle to your authenticated database record.
csrf_token: Security token verifying that forms are submitted directly by you, blocking malicious scripts.
cookie_consent: Stores your preferences regarding which categories of cookies you have approved.
isLoggedIn_bm94: A session storage indicator utilized to control layout rendering for premium members.

4. Analytical & Performance Cookies

These scripts gather anonymized statistics on visitor movement. They record which virtual stadiums are researched most frequently and pinpoint layout rendering errors.

Analytical tracking captures:

Usage Heatmaps: Which areas of the chalkboard are modified most frequently.
Page Load Latencies: Connection speed profiles from different Italian regions.
Error Logs: JavaScript execution errors or failed simulation renders.
Referrer Traffic: Understanding how users discovered our tactical manager site.

5. Interface Preference Cookies

Preference cookies store settings like your coordinate grid choice, text zoom scale, and selected tactics template, ensuring the pitch renders with your saved setup on returning visits.

These settings cover:

Visual Layout: Your chosen grid configuration (e.g., solid green grass, 3D mesh lines, tactical chalkboard).
Manager Archetypes: Saving your default coach choice for stadium tactical reports.
Interface Language: Preserving website options (such as default English views) for subsequent visits.
Viewport Ratios: Standardizing scale configurations for high-definition displays.

6. Third-Party Analytics Cookies

We occasionally authorize third-party services (such as Google Analytics) to place performance cookies. These tools help us map global database loading latency without tracking user credentials.

Third-party cookies collect:

Anonymized IP Profiles: Masking the final octet of user IP addresses for geolocation lookup.
User Demographics: Aggregated indicators of interest, country code, and language presets.
Device Configurations: Operating system, viewport width, and screen refresh rates.
Session Expirations: Standardized tokens that expire automatically to prevent lingering tracking.

7. Session Storage & Local Storage Rules

We use `sessionStorage` (e.g. `isLoggedIn_bm94`) to maintain security states while navigating between separate sub-pages, preventing the need to re-verify authentication tags on every page load.

Specifically, we write:

isLoggedIn_bm94: Set in sessionStorage upon login, and cleared upon closing the tab or logging out.
tactical_draft_bm94: Caches dynamic Cartesian coordinates of your current board layout to prevent loss.
theme_mode: Stores your dark or light theme configuration persistently.
temp_stadium_id: Tracks which arena mockup you are viewing during simulation transitions.

8. Managing Cookie Settings

Most web browsers permit you to block cookies via their settings panels. You can disable cookies entirely, delete existing records, or set your browser to alert you when a cookie is created.

Methods for cookie control:

Browser Preferences: Opting out of cookies by accessing settings inside Chrome, Safari, Firefox, or Edge.
Consent Banners: Using our built-in configuration modal to select only essential scripts.
Do Not Track (DNT): Enabling the browser header flag to notify servers not to load analytics.
Private Browsing: Using Incognito or private modes to clear cookies automatically on exit.

9. Impact of Blocking System Cookies

If you block essential cookies, you will be unable to log in, purchase premium plans, or save custom striker coordinates on our pitch chalkboard.

Consequences of disabling system cookies:

Login Failure: Inability to verify your identity between separate tactical views.
Payment Block: Gateways will fail to process subscription validation keys correctly.
State Reset: Chalkboard drawings and coordinate vectors will reset on every page refresh.
Premium Tier Locks: Premium content will remain locked due to missing license verification.

10. Secure Transmission Flags

All cookies generated by BomberManager are set with `Secure` and `SameSite=Strict` flags. This ensures they are only transmitted over encrypted HTTPS channels, protecting your session token.

These flags enforce the following safeguards:

HttpOnly Flag: Prevents client-side scripts from reading the cookie, blocking XSS attacks.
Secure Flag: Mandates that cookies are only transmitted over encrypted SSL/TLS channels.
SameSite=Strict: Restricts cookies from being sent to third-party domains, preventing CSRF.
HostOnly Attribute: Limits cookie access to the specific domain that set it, preventing subdomain poisoning.

11. Analytical Cookie Expiration Limits

Our performance and analytical cookies are configured to expire automatically within 180 days. Essential session cookies are cleared automatically when you close your web browser.

Our detailed expiration categories:

Session Cookies: Cleared immediately from memory when the active window is closed.
Analytics Cookies: Valid for 180 days from creation, refreshed only on returning visits.
Consent Preference Cookies: Valid for 365 days, storing your choices to avoid repeated prompts.
Local Storage Assets: Persisted until explicitly cleared by the user or browser cleanup scripts.

12. Yearly Consent Reviews

We prompt users to review their tracking preferences once every twelve months to ensure your consent settings remain aligned with your personal privacy goals.

The review sequence entails:

Automatic Prompting: A preference banner reappearing on your screen after 365 days.
Regulatory Compliance: Adjusting choices if European or Italian cookie rules have updated.
Opt-In Verification: Verifying that you still consent to optional Google Analytics tracking.
Manual Modification: Allowing you to trigger settings reviews anytime via footer links.

13. Cookie Policy Amendments & Support

We reserve the right to amend this 13-point agreement. If you have questions regarding cookie security, contact us at privacy@bombermanager.com.

Our communication and registration details:

Corporate Operator: BomberManager SRL, Rome, Italy
Italian Garante Reference: Italian Data Protection Authority (Garante per la protezione dei dati personali)
Compliance Coordinator: Cookie Management Office (privacy@bombermanager.com)
Mailing Address: Via dei Fori Imperiali, 24, 00186 Roma (RM), Italy

Browser Cookies & Local Storage Governance