This page explains which cookies and other storage tools Post Office uses on postofficeofficial.com, what they are for and how you can manage your consent.
Data controller: Post Office S.r.l., P.IVA 14022001003, Via dei Giuochi Istmici 40 00135 Roma Italy. Contact: [email protected].
Cookies are small text files that a website saves in your browser. The browser’s local storage and session storage work in a similar way and are listed together with cookies.
They make the site and the services you request work, such as sign-in, booking and payment. They are always on and do not require consent.
Our servers manage sign-in and registration. The ci_session cookie maintains your signed-in session, including when you choose Google, Facebook or Apple. Firebase does not manage account sign-in: its browser storage is used only when SMS phone verification is required. External sign-in services may use their own cookies during authentication, under their respective privacy policies.
ci_session · Provider: Post Office S.r.l. · Maintains the signed-in session managed by our servers and the state of features that require it; its duration is renewed while you use the service. · Duration: 1 year
nightify_cookie_consent · Provider: Post Office S.r.l. · Stores your cookie choices. · Duration: 6 months
user_locale · Provider: Post Office S.r.l. · Remembers your language. · Duration: 1 year
nightify_device_timezone · Provider: Post Office S.r.l. · Shows event times in your device’s time zone. · Duration: 1 year
nightify_client_id · Provider: Post Office S.r.l. · Random browser identifier for internal search and browsing statistics and for consistent search results; it is not shared with third parties. · Duration: 1 year
firebase:authUser:* (browser local storage) · Provider: Google Firebase · Maintains the technical identity needed for SMS phone verification; it does not grant access to your account. · Duration: Until sign-out from the SMS verification service or deletion of site data in the browser
nightify.*, nightify:* (browser session storage) · Provider: Post Office S.r.l. · Temporary state of pages and forms. · Duration: until the tab is closed
__cf_bm · Provider: Cloudflare · Tells people and bots apart to protect the site. · Duration: 30 minutes
__cflb · Provider: Cloudflare · Routes your requests to the same server. · Duration: 24 hours
cf_clearance, _cfuvid · Provider: Cloudflare · Remembers that you passed a security check and limits abuse. · Duration: set by the provider for the security check
__stripe_mid · Provider: Stripe · Prevents card payment fraud; only on the payment page. · Duration: 1 year
__stripe_sid · Provider: Stripe · Prevents card payment fraud; only on the payment page. · Duration: 30 minutes
_GRECAPTCHA · Provider: Google reCAPTCHA · Protects phone number verification from abuse. · Duration: 6 months
Only if you accept them, we use Google Analytics 4 to measure visits and site usage in aggregate form. Without your consent the Google script is not loaded.
_ga · Provider: Google Analytics · Distinguishes visitors for statistics. · Duration: 2 years
_ga_9J7N4K2R0Q · Provider: Google Analytics · Keeps the visit state for statistics. · Duration: 2 years
Only if you accept them, we enable the Meta, TikTok and Google pixels and tags configured by the site or by the organizer of the event you are viewing or booking: they measure advertising campaigns and show you relevant ads. With the same consent, when you complete a booking the server may send the conversion to Meta and TikTok (Conversions API and Events API) with your email and phone number hashed. Without your consent none of these tools is enabled.
_fbp, _fbc · Provider: Meta · Measures Meta (Facebook, Instagram) campaign conversions and shows relevant ads. · Duration: 3 months
_ttp, _tt_enable_cookie, ttcsid, ttcsid_*, ttclid · Provider: TikTok · Measures TikTok campaign conversions and shows relevant ads. · Duration: 13 months
_gcl_au, _ga, _ga_* · Provider: Google · Measures Google Ads campaign conversions and the statistics of Google tags configured by organizers. · Duration: 2 years
On your first visit a notice asks you to choose: “Accept” enables every category, “Reject” or the X keeps them off, “Customize” lets you choose category by category. Your choice lasts 6 months and you can change or withdraw it at any time from the “Cookie preferences” link at the bottom of every page: when you withdraw consent we delete that category’s cookies. You can also delete or block cookies in your browser settings; blocking technical cookies may stop some features, such as sign-in or booking, from working.
Third-party providers process data under their own privacy policies: Google, Apple, Meta, TikTok, Cloudflare, Stripe. The event venue map is provided by Apple MapKit, which does not use cookies.
To exercise your rights and for all other information about data processing, see the privacy policy.
Last updated: 8 October 2026