Legal
Cookie Policy
Last updated: March 22, 2026
Data Controller
Sole Shareholder Company
45100 Rovigo (RO), Italy
1. What Are Cookies
Cookies are small text files that are placed on your device (computer, tablet, or smartphone) when you visit a website. They are widely used to make websites work more efficiently, to provide information to the site owners, and to enhance the user experience.
This Cookie Policy applies to the website www.tuboost.io ("Website") operated by SkyClouds SRLs ("we", "us", or "our") and is compliant with the EU General Data Protection Regulation (GDPR — Regulation (EU) 2016/679), the Italian Privacy Code (D.Lgs. 196/2003 as amended by D.Lgs. 101/2018), and the Italian Data Protection Authority's Guidelines on cookies and other tracking tools (Provvedimento n. 231 of June 10, 2021).
2. Legal Basis for Cookie Usage
Pursuant to Article 122 of the Italian Privacy Code and the Garante's Guidelines, we process cookies based on the following legal bases:
- Strictly necessary cookies: No consent required (Art. 122, paragraph 1, exception). These cookies are essential for the website to function and cannot be disabled.
- Analytics & profiling cookies: Explicit, informed, and prior consent required (Art. 122, paragraph 1). These are only activated after you provide consent via our cookie banner.
- Marketing cookies: Explicit, informed, and prior consent required (Art. 122, paragraph 1). Only activated after your consent.
3. Strictly Necessary Cookies
These cookies are essential for the operation of the Website. They enable core functionalities such as authentication, security, and session management. You cannot opt out of these cookies as the Website would not function without them.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| authjs.session-token | NextAuth.js | Stores the encrypted session token for user authentication | Session / 30 days |
| authjs.csrf-token | NextAuth.js | Prevents Cross-Site Request Forgery attacks | Session |
| authjs.callback-url | NextAuth.js | Stores the redirect URL after authentication | Session |
| cookie_consent_id | TuBoost | Links your cookie preferences to a database record | 1 year |
| cookie-consent | TuBoost | Stores your cookie preference selections (localStorage) | Persistent |
| cassandra_session | Cassandra AI | Maintains the live chat session with the AI support widget | Session |
| cassandra_visitor_id | Cassandra AI | Identifies returning visitors to preserve conversation history in the support widget | 1 year |
| __stripe_mid | Stripe | Fraud detection and secure payment processing | 1 year |
| __stripe_sid | Stripe | Session-level fraud detection for payment security | 30 minutes |
4. Analytics Cookies
These cookies help us understand how visitors interact with the Website, which pages are most popular, and how users navigate. This data is used solely to improve the Website's functionality and content. These cookies are only activated after you provide explicit consent.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| _clck | Microsoft Clarity | Stores the Clarity User ID and session preferences | 1 year |
| _clsk | Microsoft Clarity | Connects multiple page views from the same user into a single session | 1 day |
| CLID | Microsoft Clarity | Identifies the first-time Clarity user | 1 year |
| ANONCHK | Microsoft Clarity | Identifies unique anonymous users for Clarity analytics | Session |
| MR | Microsoft Clarity | Used to track user activity and support Clarity heatmaps and session recordings | 7 days |
| va | Vercel Analytics | Privacy-friendly page view and performance analytics — no personal data collected | Session |
Microsoft Clarity: Data may be transferred to Microsoft servers in the United States. Microsoft acts as a data processor under an adequacy framework compliant with Chapter V of the GDPR. For more information, see Microsoft's Privacy Statement.
Vercel Analytics: Vercel Analytics is privacy-friendly and does not use cookies for tracking individuals. It collects aggregated, anonymized page view data. See Vercel's Analytics Privacy Policy.
5. Marketing Cookies
Marketing cookies are used to track visitors across websites and display content relevant to their interests. Currently, TuBoost does not use marketing or profiling cookies. Should we introduce them in the future, this policy will be updated accordingly and your consent will be requested before activation.
6. Third-Party Services & Data Transfers
TuBoost relies on the following third-party services, some of which may set their own cookies or process data outside the European Economic Area (EEA):
| Service | Purpose | Data Location | Legal Basis |
|---|---|---|---|
| Vercel | Website hosting, edge functions, analytics | Global CDN (EU preferred) | Legitimate interest / Consent (analytics) |
| Stripe | Payment processing, fraud detection | EU / US (SCC) | Contract performance |
| Amazon Web Services (S3) | Video file storage and delivery | EU (eu-west-1) | Contract performance |
| Microsoft Clarity | Heatmaps, session recordings, analytics | US (DPF) | Consent |
| Neon / PostgreSQL | Database for user data, clips, preferences | EU | Contract performance |
| Inngest | Background job processing (video analysis) | US (SCC) | Legitimate interest |
| Google Gemini API | AI video classification and content analysis | US (DPF) | Contract performance |
| Modal.com | GPU cloud infrastructure for AI video processing | US (SCC) | Contract performance |
| Resend | Transactional email delivery (notifications) | US (SCC) | Contract performance |
| Cassandra AI | AI-powered live chat & voice support widget | EU | Legitimate interest |
Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR, or adequacy decisions under Art. 45 GDPR (e.g., EU-US Data Privacy Framework).
7. How to Manage Your Cookie Preferences
You can manage your cookie preferences at any time by clicking the cookie icon (🍪) located at the bottom-left corner of every page, or through your browser settings.
Browser settings: Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies may prevent parts of the Website from functioning correctly. Here are links to manage cookies in popular browsers:
8. Your Rights Under GDPR
Under the GDPR and Italian Privacy Code, you have the following rights regarding your personal data processed through cookies:
- Right of access (Art. 15) — obtain confirmation and a copy of your data
- Right to rectification (Art. 16) — correct inaccurate data
- Right to erasure (Art. 17) — request deletion of your data
- Right to restrict processing (Art. 18) — limit how we process your data
- Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
- Right to object (Art. 21) — object to processing based on legitimate interest
- Right to withdraw consent (Art. 7(3)) — withdraw consent at any time without affecting prior processing
- Right to lodge a complaint — with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it
To exercise any of these rights, contact us at info@skyclouds.co or skyclouds@pec.it.
9. Data Retention
Cookie consent preferences are stored for a maximum of 12 months from the date of consent, after which you will be asked to renew your preferences. Session cookies are deleted when you close your browser. Persistent cookies are automatically deleted after their expiry date, as specified in the tables above.
10. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any significant changes will be communicated through a notice on the Website and, where required, by requesting your consent again. We recommend reviewing this page periodically.
11. Contact Us
If you have any questions about this Cookie Policy or how we handle your data, please contact us:
- Email: info@skyclouds.co
- PEC: skyclouds@pec.it
- Support: Contact Form