This policy lists the cookies and the other browser storage that the Supercell website, the Supercell app and the patient portal use, why, and for how long. It is written under Article 122 of the Italian Personal Data Protection Code and the guidelines of the Italian data protection authority (Garante) on cookies.
What cookies and browser storage are
A cookie is a small text file a website stores in your browser and reads back on later visits. Local storage and session storage are similar places in your browser where a page can keep information: local storage until it is cleared, session storage until you close the tab. In this policy, "cookies" covers all three.
Your choice
Strictly necessary cookies are always on: the website and the app cannot work without them, and the law does not require consent for them. Preference cookies remember a choice you made, such as your language. Analytics cookies are used only if you say yes.
On your first visit, a banner asks whether you accept analytics cookies. Accept and Reject are equally easy. Until you answer, and if you reject, no analytics cookie is set. Your answer is asked once for the website and the app together, and is kept for 6 months; then we ask again. If your browser sends a Global Privacy Control signal, we treat it as a no.
You can change your choice at any time with the Cookie settings link at the bottom of every page, or here:
When you withdraw consent, the analytics cookies are deleted and no more measurement is sent. You can also delete cookies in your browser's settings at any time.
Strictly necessary
| Name | Purpose | Duration | Set by |
|---|---|---|---|
| prcn_consentCookie | Remembers your cookie choice, for the website and the app together. | 6 months | SupercellWebsite, app and portal |
| authjs.session-token, __Secure-authjs.session-tokenCookie | Keeps you signed in. Never set before you sign in. | 60 days | SupercellApp and portal |
| authjs.csrf-token, __Host-authjs.csrf-tokenCookie | Protects sign-in and sign-out against requests forged by other websites. | Until you close the browser | SupercellApp and portal |
| authjs.callback-url, __Secure-authjs.callback-urlCookie | Remembers which page to return to after signing in or out. | Until you close the browser | SupercellApp and portal |
| prcn.sign-in-challengeCookie | Links the one-time code or second sign-in step to this browser while you sign in. | 30 minutes | SupercellApp and portal |
| prcn.sign-upCookie | Keeps a clinic sign-up you started in this browser until you enter the code from the email. | 1 day | SupercellApp and portal |
| prcn.patient-sign-upCookie | Keeps a patient sign-up you started in this browser until you enter the code from the email. | 1 day | SupercellApp and portal |
| prcn.step-up-challengeCookie | Confirms it is you again before a sensitive change to your account. | 30 minutes | SupercellApp and portal |
| prcn.phone-sign-inCookie | Keeps a sign-in with a code sent to your phone on this browser while you do it. | 30 minutes | SupercellApp and portal |
| prcn_inviteCookie | Carries a patient's invitation from the email link to the page that accepts it. | Up to 30 minutes | SupercellApp and portal |
| cal_oauth_nonce, cal_oauth_verifierCookie | Binds connecting your calendar to this browser while you do it. | 10 minutes | SupercellApp and portal |
| prcn_export_linkCookie | Lets the clinic's administrator download a data export once. | Up to 10 minutes | SupercellApp and portal |
| prcn-portal-screening:*Local storage | Keeps a patient's unfinished health questionnaire answers so they can continue. Removed when sent, on sign-out, or when the sign-in page or another account opens. | Up to 1 day | SupercellApp and portal |
| prcn.protocol-intake.v1Session storage | Keeps the protocol form you are filling in while you work on it. | Until you close the tab | SupercellApp and portal |
| prcn_consent_attachedSession storage | Records that your cookie choice was attached to your account in this tab. | Until you close the tab | SupercellApp and portal |
| prcn:checkout-draft:*Session storage | Keeps the delivery address you typed for an order while you check out, if the page reloads. Removed when you confirm or sign out. | Until you close the tab | SupercellApp and portal |
| supercell:clinic-fallback:*Session storage | Shows only once the notice that you no longer have access to a clinic. | Until you close the tab | SupercellApp and portal |
- prcn_consent
Remembers your cookie choice, for the website and the app together.
- Duration
- 6 months
- Type
- Cookie
- Set by
- Supercell
- Used on
- Website, app and portal
- authjs.session-token, __Secure-authjs.session-token
Keeps you signed in. Never set before you sign in.
- Duration
- 60 days
- Type
- Cookie
- Set by
- Supercell
- Used on
- App and portal
- authjs.csrf-token, __Host-authjs.csrf-token
Protects sign-in and sign-out against requests forged by other websites.
- Duration
- Until you close the browser
- Type
- Cookie
- Set by
- Supercell
- Used on
- App and portal
- authjs.callback-url, __Secure-authjs.callback-url
Remembers which page to return to after signing in or out.
- Duration
- Until you close the browser
- Type
- Cookie
- Set by
- Supercell
- Used on
- App and portal
- prcn.sign-in-challenge
Links the one-time code or second sign-in step to this browser while you sign in.
- Duration
- 30 minutes
- Type
- Cookie
- Set by
- Supercell
- Used on
- App and portal
- prcn.sign-up
Keeps a clinic sign-up you started in this browser until you enter the code from the email.
- Duration
- 1 day
- Type
- Cookie
- Set by
- Supercell
- Used on
- App and portal
- prcn.patient-sign-up
Keeps a patient sign-up you started in this browser until you enter the code from the email.
- Duration
- 1 day
- Type
- Cookie
- Set by
- Supercell
- Used on
- App and portal
- prcn.step-up-challenge
Confirms it is you again before a sensitive change to your account.
- Duration
- 30 minutes
- Type
- Cookie
- Set by
- Supercell
- Used on
- App and portal
- prcn.phone-sign-in
Keeps a sign-in with a code sent to your phone on this browser while you do it.
- Duration
- 30 minutes
- Type
- Cookie
- Set by
- Supercell
- Used on
- App and portal
- prcn_invite
Carries a patient's invitation from the email link to the page that accepts it.
- Duration
- Up to 30 minutes
- Type
- Cookie
- Set by
- Supercell
- Used on
- App and portal
- cal_oauth_nonce, cal_oauth_verifier
Binds connecting your calendar to this browser while you do it.
- Duration
- 10 minutes
- Type
- Cookie
- Set by
- Supercell
- Used on
- App and portal
- prcn_export_link
Lets the clinic's administrator download a data export once.
- Duration
- Up to 10 minutes
- Type
- Cookie
- Set by
- Supercell
- Used on
- App and portal
- prcn-portal-screening:*
Keeps a patient's unfinished health questionnaire answers so they can continue. Removed when sent, on sign-out, or when the sign-in page or another account opens.
- Duration
- Up to 1 day
- Type
- Local storage
- Set by
- Supercell
- Used on
- App and portal
- prcn.protocol-intake.v1
Keeps the protocol form you are filling in while you work on it.
- Duration
- Until you close the tab
- Type
- Session storage
- Set by
- Supercell
- Used on
- App and portal
- prcn_consent_attached
Records that your cookie choice was attached to your account in this tab.
- Duration
- Until you close the tab
- Type
- Session storage
- Set by
- Supercell
- Used on
- App and portal
- prcn:checkout-draft:*
Keeps the delivery address you typed for an order while you check out, if the page reloads. Removed when you confirm or sign out.
- Duration
- Until you close the tab
- Type
- Session storage
- Set by
- Supercell
- Used on
- App and portal
- supercell:clinic-fallback:*
Shows only once the notice that you no longer have access to a clinic.
- Duration
- Until you close the tab
- Type
- Session storage
- Set by
- Supercell
- Used on
- App and portal
Preferences
| Name | Purpose | Duration | Set by |
|---|---|---|---|
| prcn_localeCookie | Remembers your language, for the website and the app together. | 1 year | SupercellWebsite, app and portal |
| themeLocal storage | Remembers whether you chose the light or the dark theme. | Until you clear it | SupercellWebsite, app and portal |
| prcn_sidebarCookie | Remembers whether the app's side menu is open or collapsed. | 1 year | SupercellApp and portal |
| prcn.last-sign-in-methodLocal storage | Offers first the sign-in method you used last time. | Until you clear it | SupercellApp and portal |
| prcn.dosageCalculator.modeLocal storage | Remembers whether you use the dosage calculator in Beginner or Advanced mode. | Until you clear it | SupercellApp and portal |
- prcn_locale
Remembers your language, for the website and the app together.
- Duration
- 1 year
- Type
- Cookie
- Set by
- Supercell
- Used on
- Website, app and portal
- theme
Remembers whether you chose the light or the dark theme.
- Duration
- Until you clear it
- Type
- Local storage
- Set by
- Supercell
- Used on
- Website, app and portal
- prcn_sidebar
Remembers whether the app's side menu is open or collapsed.
- Duration
- 1 year
- Type
- Cookie
- Set by
- Supercell
- Used on
- App and portal
- prcn.last-sign-in-method
Offers first the sign-in method you used last time.
- Duration
- Until you clear it
- Type
- Local storage
- Set by
- Supercell
- Used on
- App and portal
- prcn.dosageCalculator.mode
Remembers whether you use the dosage calculator in Beginner or Advanced mode.
- Duration
- Until you clear it
- Type
- Local storage
- Set by
- Supercell
- Used on
- App and portal
Analytics (only with your consent)
Google Analytics 4, loaded through Google Tag Manager, runs only after you accept analytics cookies, and only on the public website and the sign-in pages: never on a page you see once signed in, and never in the patient portal. Before your yes, the pages do not even allow Google's addresses to load. Google receives the address of the page you view (without any personal details in it), the page you came from, and technical details of your browser and device. Google receives this data to provide the measurement service; it may be processed in the United States (see the Privacy Policy).
| Name | Purpose | Duration | Set by |
|---|---|---|---|
| _gaCookie | Google Analytics: tells visits apart to count them. | 2 years | GoogleWebsite, app and portal |
| _ga_*Cookie | Google Analytics: keeps track of the current visit. | 2 years | GoogleWebsite, app and portal |
- _ga
Google Analytics: tells visits apart to count them.
- Duration
- 2 years
- Type
- Cookie
- Set by
- Used on
- Website, app and portal
- _ga_*
Google Analytics: keeps track of the current visit.
- Duration
- 2 years
- Type
- Cookie
- Set by
- Used on
- Website, app and portal
Without cookies
On public pages only (the website and the sign-in pages), Cloudflare's Web Analytics may be enabled at the network level by Cloudflare, which carries all traffic to Supercell. Where it is, it counts page views and measures how fast pages load, without setting cookies or storing anything in your browser, and without identifying you. Pages you see once signed in, and the patient portal, do not allow it to run.
On the contact page only, Cloudflare Turnstile checks that a message comes from a person and not from an automated program. It runs in a frame from Cloudflare and is a security measure, not analytics or advertising. We set no cookie for it.
Cloudflare may also set its own strictly necessary security cookie when it checks traffic for automated attacks (for example __cf_bm, for up to 30 minutes).
More information
IUVENTA S.R.L.
- Registered office
- Via Germanico 79, 00192 Roma (RM), Italy
- VAT number
- 17740121003
- [email protected]
Who we are, what data we process and your rights are explained in the Privacy Policy. Questions: [email protected].
Language versions
This policy is published in English, Italian, German, Russian and Lithuanian. If the versions differ, the English version prevails, without prejudice to the mandatory provisions of Italian law.