Legal
Cookie Policy
Last updated 2 November 2026 · Version 1.2
1. Who is responsible
The controller is CHARITABLE CORTI, charitable trust under Jersey law, Italian tax code 92078130520, registered office 82A James Carter Road, Mildenhall, Suffolk, IP28 7DE, United Kingdom. Contact point in the European Union: Annalisa Corti, c/o Azienda Agricola il Gallazone, Loc. Fontemaggio 25/b, 53040 Rapolano Terme (SI), Italy. Contact: info.ayot@gmail.com.
Full details on how we handle personal data are in our Privacy Policy.
2. What cookies are
Cookies are small text files that a website stores on your device. Similar technologies (local storage, pixels, tags) work in the same way. They let a site remember your choices, keep a session secure, or measure how the site is used.
We group them into three categories, and only the first is active without your permission.
3. Categories
Strictly necessary — always active, no consent required
These make the website work and keep it secure. They cannot be switched off.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| ayot_consent (local storage) | ayot (first party) | Stores the choice you make in the banner, so we do not ask on every page | Until you clear your browser data |
| [session / security cookie] | Base44 (hosting) | Session management, load balancing, security | Session |
Analytics — only with your consent
They tell us which pages are read, how visitors arrive and where they leave. We use them to improve the site, never to identify you personally.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics 4 | Distinguishes visitors with a randomly generated identifier | 2 years |
| _ga_G-P6EEWTFBYZ | Google Analytics 4 | Keeps the session state for this property | 2 years |
Marketing — only with your consent
They measure the results of our campaigns on Facebook and Instagram, and let us show the programme to people who may be interested. They identify your browser to Meta.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta Platforms | Distinguishes browsers for advertising and measurement | 90 days |
| fr | Meta Platforms | Advertising delivery and measurement | 90 days |
How the Meta Pixel behaves before you choose. The pixel script is loaded on every page, and it starts in a state where consent is revoked. In that state Meta does not use the data for advertising or measurement. Accepting switches it to granted and sends a page view; rejecting it, or choosing only necessary, keeps it revoked and removes the cookies it had already set.
If we later add another tool, for example a heatmap or a chat widget, we add it to this table before activating it, and we ask for your consent.
4. How consent works on this site
- The two tags are installed on the page when it loads. Until you choose, Google runs in Consent Mode with analytics and advertising storage denied, and Meta runs with consent revoked: the data they collect is not used for analytics, advertising or measurement.
- Accept all switches both to granted and sends a page view. Reject all and Only necessary leave them off: Meta stays revoked, Google gets no permission, and the tracking cookies already stored are removed.
- Your choice is kept in your browser, under one key, and the banner does not appear again on that device.
- The banner offers Accept all, Reject all and Only necessary, with reject as visible and as easy as accept.
- No category is pre-selected, and the banner does not disappear until you have made a choice.
- You can change your mind at any time from the Cookie preferences link in the footer.
- We keep a record of your choice, so we can demonstrate that your consent was obtained.
- Refusing consent does not limit your access to any part of the site, and it does not affect your participation in the programme.
5. Third parties you meet off our site
When you contribute, you leave our website and go to PayPal or SumUp, which set their own cookies and process your payment data as independent controllers. Their cookie and privacy policies apply on their pages, and we have no control over them.
The same is true for YouTube, which hosts our video, and for the Facebook and Instagram links in our footer.
Our video is embedded in privacy-enhanced mode and loads nothing at all until you press play. Only when you click do we load the YouTube player, from the youtube-nocookie.com domain, and YouTube may then set its own cookies. If you never press play, no connection to YouTube is made and no cookie is set. This is why the video does not appear in the table above: it is not a cookie we set, it is a third-party service you activate yourself.
6. How to withdraw consent, and how to delete cookies
Use the Cookie preferences link in the footer of any page, or the button below, to change or withdraw your consent.
You can also delete or block cookies from your browser settings: Chrome, Safari, Firefox and Edge all allow it, per site or globally. Blocking strictly necessary cookies may stop parts of the site from working.
Google Analytics can be disabled with the official opt-out add-on. Meta advertising preferences can be managed from your Facebook or Instagram account settings.
7. Changes
If we add, remove or change a cookie, we update this table and the date at the top. If the change requires your consent, we ask again.