Cookies Policy
v1.0 · Effective 14 May 2026
In short
- Botely uses only strictly-necessary cookies today (auth session, CSRF, locale, anti-bot).
- Analytics and marketing cookies are not used. If we introduce them later, we will ask for consent.
- Strictly-necessary cookies are exempt from consent under EU ePrivacy rules; you cannot turn them off without breaking the Service.
- You can manage optional categories at any time via the cookie banner or through your browser settings.
1. What are cookies
1.1. Cookies are small text files stored by your browser on your device. They allow a website to remember information about you between page loads or visits.
1.2. Similar technologies covered by this policy include localStorage, sessionStorage and pixel tags. Where this policy refers to "cookies", it includes those equivalents.
2. Categories of cookies used by Botely
2.1. Strictly necessary (exempt from consent under Article 5(3) of Directive 2002/58/EC (ePrivacy) and Article 122 of the Italian Codice Privacy). These cookies are essential to provide the Service you have requested and cannot be turned off:
(a) Authentication session — used to keep you signed in to your account. Cookie name visible in your browser: `better-auth.session_token`. Duration: until sign-out or 30 days, whichever first. First-party.
(b) CSRF protection — token used to prevent cross-site request forgery. Cookie name: `better-auth.csrf_token`. Duration: session. First-party.
(c) Locale preference — remembers your chosen language (English or Italian). Cookie name: `NEXT_LOCALE`. Duration: 1 year. First-party.
(d) Anti-bot challenge — Cloudflare Turnstile token, used on signup and waitlist forms to block automated submissions. Cookie name: `cf_chl_*`. Duration: session. Third-party (Cloudflare, Inc., USA).
2.2. Functional (consent required). Optional preferences and UI state. None active at the Effective Date.
2.3. Analytics (consent required). Aggregate, privacy-preserving product analytics. None active at the Effective Date. We are evaluating PostHog or a self-hosted Plausible deployment for future activation; consent will be requested before any deployment.
2.4. Marketing / advertising (consent required). None active at the Effective Date. Botely has no advertising relationships and does not plan to introduce advertising or remarketing cookies. Should this change, consent will be requested before any deployment.
3. Third-party cookies
3.1. Cloudflare — used for anti-bot Turnstile and for our edge proxy. Cookies are strictly-necessary for the security and availability of the Service.
3.2. Stripe — used on the checkout page only, when you initiate a payment. Cookies are strictly-necessary for the payment session and fraud prevention.
3.3. No advertising / cross-site profiling cookies are loaded on any page of the Service.
4. How to manage your preferences
4.1. Cookie banner: when you first access the Service from a device, a banner allows you to Accept all, Reject all or Manage optional categories individually. Your choice is stored in your browser (localStorage) under `botely-cookie-consent` and remembered across pages.
4.2. Change your mind later: clear your browser's site data for botely.trade, or trigger the banner again by appending `?manage-cookies=1` to any URL (planned feature; if not yet available, clear site data).
4.3. Browser controls: all modern browsers let you block or delete cookies in their settings. Doing so will disable the Service in part or in whole.
4.4. Do Not Track: where supported by your browser, Botely honours DNT signals as equivalent to a Reject-all preference for optional categories.
5. Compliance basis
5.1. This Cookies Policy is published in compliance with: Directive 2002/58/EC (ePrivacy) as amended; Article 122 of Italian Legislative Decree 196/2003 (Codice Privacy) as amended; Garante per la protezione dei dati personali guidelines published on 10 June 2021 (Provv. n. 231) on the use of cookies and other tracking tools; Regulation (EU) 2016/679 (GDPR).
6. Updates to this policy
6.1. We will update this Cookies Policy if our use of cookies changes (for example, if we introduce analytics or marketing cookies). When the change affects optional categories, the cookie banner will re-prompt for your consent.
Contact
- Botely — Italian limited liability company to be incorporated prior to commercial launch. Until then, the service is operated in pre-launch by the founding team in their personal capacity, contactable at the addresses below.
- privacy@botely.trade
- compliance@botely.trade (compliance / MAR)
- dpo@botely.trade (DPO)
- Address (post-incorporation): To be confirmed at incorporation.
These documents are published in English (canonical) and Italian. In case of conflict between the two versions, the English version prevails for interpretation.
Changelog
- v1.0 — 2026-05-14 — Initial publication.