Cookie Policy

Last updated: 20 May 2026

Cookies are small pieces of data installed in the User’s browser, which assist the Data Controller in providing the Service according to the purposes described. Some of the purposes for which Cookies are installed may also require the User’s consent.

Where the installation of Cookies is based on consent, such consent may be freely withdrawn at any time by following the instructions in this document.

Index


Data Controller

The Data Controller for the Data collected through Cookies is Alessandro Rossetti (natural person), editorial curator of the OsintOps project (https://osintops.com).

Data Controller’s email address: osintops1@tutanota.com

The processing does not take place in the exercise of a professional or commercial activity: the Site is a non-profit editorial project of an informational nature.

For complete information on the processing of Personal Data, please refer to the Privacy Policy.


Strictly necessary technical Cookies

These Cookies are essential for the proper functioning of the Site and cannot be disabled. They do not require the User’s consent pursuant to Art. 122, paragraph 1, of Italian Legislative Decree 196/2003 and Art. 5, paragraph 3, of Directive 2002/58/EC (ePrivacy).

Cookie Provider Purpose Duration
wordpress_sec_* osintops.com WordPress user authentication (administrators only) Session
wordpress_logged_in_* osintops.com User login verification (administrators only) Session
wp-settings-* osintops.com WordPress admin interface preferences 1 year
wfwaf-authcookie-* osintops.com (Wordfence) Application firewall authentication Session
cookieyes-consent osintops.com (CookieYes) Stores the User’s cookie preferences 1 year
cky-consent osintops.com (CookieYes) Cookie consent status 1 year
translatepress_language osintops.com (TranslatePress) Stores the language selected by the User 1 year

Functional (preference) Cookies

These Cookies allow the Site to remember choices made by the User (such as the name and email associated with a comment) and to provide personalised features. They are installed only with the User’s prior consent, expressed through the cookie management banner.

Cookie Provider Purpose Duration
comment_author_* osintops.com Stores the name of a comment author to avoid re-entering it on each submission 1 year
comment_author_email_* osintops.com Stores the email address of a comment author 1 year
comment_author_url_* osintops.com Stores the URL associated with a comment author, if any 1 year

Analytics Cookies

The Site currently does not use third-party analytics Cookies (Google Analytics, Matomo or equivalents). Should they be introduced in the future, this section will be updated and consent will be requested in advance through the CookieYes banner.


Third-party Cookies and tools

Some services integrated in the Site are provided by third parties and may install their own Cookies or collect Usage Data. The current list is as follows:

Consent management (CookieYes)

To record and demonstrate the User’s consent under the GDPR, the Site loads the CookieYes script from the provider’s CDN.

  • Provider: CookieYes Limited
  • Cookies installed: cookieyes-consent, cky-consent (see the technical Cookies table)
  • Script loaded from: https://cdn-cookieyes.com/
  • Data collected: IP address (in anonymised form), anonymous unique consent identifier, date and time of consent, preferences expressed, browser User-Agent
  • Place of processing: United Kingdom (country covered by an EU adequacy decision)
  • Privacy Policy: cookieyes.com/privacy-policy
  • Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR — demonstration of consent pursuant to Art. 7 GDPR)

Anti-SPAM protection (Akismet)

The Akismet service filters comments and contact form submissions to detect SPAM. Akismet does not install Cookies on the visitor’s browser, but transmits the comment data (including the author’s IP address) to the provider’s servers.

  • Provider: Automattic Inc.
  • Place of processing: United States
  • Privacy Policy: automattic.com/privacy
  • Legal basis: the Data Controller’s legitimate interest in preventing abuse (Art. 6(1)(f) GDPR)

Site security (Wordfence)

The Wordfence application firewall protects the Site from attacks and unauthorised access attempts. Wordfence installs a technical Cookie for firewall authentication (wfwaf-authcookie-*, see the technical Cookies table).

  • Provider: Defiant Inc.
  • Place of processing: the Site’s servers (Italy) for local analysis; aggregate data may be transmitted to Defiant Inc. (United States) for threat intelligence purposes
  • Privacy Policy: wordfence.com/privacy-policy
  • Legal basis: the Data Controller’s legitimate interest in the security of the Site and its visitors (Art. 6(1)(f) GDPR)

Automatic translation (TranslatePress)

The Site uses the TranslatePress plugin to manage multilingual content (Italian and English). The plugin is self-hosted; a technical Cookie (translatepress_language) stores the language selected by the User.

If integration with a third-party machine translation service (Google Cloud Translation, DeepL) is enabled in the future, this section will be updated accordingly and consent will be requested in advance.

Webfonts

Until the migration currently in progress is complete, some pages of the Site load webfonts (Inter, Space Grotesk, JetBrains Mono) from the Google Fonts CDN (fonts.googleapis.com, fonts.gstatic.com). Google Fonts does not install Cookies, but receives the User’s IP address when the font is downloaded.

Once the migration is complete, the webfonts will be self-hosted and this section will be removed.

  • Provider: Google LLC
  • Privacy Policy: policies.google.com/privacy
  • Legal basis: the Data Controller’s legitimate interest in the correct presentation of the Site (Art. 6(1)(f) GDPR). Once the migration is complete, this basis will no longer apply, since no data transfer will occur.

Links to third-party sites

The footer and some pages of the Site contain links to external profiles and channels of the OsintOps project:

These are simple links (<a href>), not embedded content. Therefore, until the User voluntarily clicks one of these links, no third-party Cookies are installed by the Site.

Once the User follows one of these links, the use of the external service is governed exclusively by the provider’s policy. Users are encouraged to consult the respective notices:


How to give or withdraw consent to Cookies

Upon first access, the Site displays a consent management banner (CookieYes) that allows you to:

  • Accept all Cookies;
  • Reject all Cookies that are not strictly necessary;
  • Customise preferences by category (technical, functional, analytics, third-party).

Consent is recorded and can be changed at any time by clicking the cookie management icon in the bottom-right corner of every page of the Site. Withdrawing consent does not affect the lawfulness of any processing carried out previously.


Managing Cookies via the browser

In addition to the CookieYes banner, the User can manage Cookies directly through their browser settings. Through those settings it is also possible to delete Cookies already installed. Below are the official guides for the most popular browsers:

Warning: disabling technical Cookies may compromise the proper functioning of the Site and prevent access to some features.


Response to “Do Not Track” requests

The Site does not automatically support Do Not Track (DNT) requests sent by browsers. To check whether any third-party services integrated in the Site support them, the User is invited to consult their respective privacy policies.


Changes to this Cookie Policy

The Data Controller reserves the right to update this Cookie Policy at any time, providing notice to Users on this page. Users are encouraged to consult this page regularly, referring to the “Last updated” date shown at the top.

Should the changes affect processing operations based on consent, the Data Controller will collect the User’s consent again through the CookieYes banner.


Definitions and legal references

Personal Data (or Data)

Personal Data is any information that, directly or indirectly, even in combination with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data

Information collected automatically through the Site (including from third-party applications integrated in the Site), such as: the IP addresses or domain names of the computers used by the User, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the characteristics of the browser and operating system used by the visitor, the various time-related details of the visit and the details concerning the path followed within the Site.

User

The individual who uses the Site and who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Processor)

The natural or legal person, public administration or any other entity that processes Personal Data on behalf of the Data Controller, as set out in this Cookie Policy and in the related Privacy Policy.

Data Controller (or Controller)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures relating to the operation and use of the Site. Unless otherwise specified, the Data Controller of this Site is the owner of the Site.

This Site

The hardware or software tool through which the Personal Data of Users is collected and processed.

Service

The editorial service provided by OsintOps through the Site.

European Union (or EU)

Unless otherwise specified, any reference to the European Union in this document is intended to extend to all current member states of the European Union and the European Economic Area.

Cookie

A small piece of data stored within the User’s device.

Legal references

This Cookie Policy is drafted pursuant to Regulation (EU) 2016/679 (GDPR), Italian Legislative Decree 196/2003 (“Personal Data Protection Code”) as amended by Italian Legislative Decree 101/2018, and Directive 2002/58/EC (ePrivacy), implemented in Italy by Art. 122 of Italian Legislative Decree 196/2003.

Unless otherwise specified, this Cookie Policy applies exclusively to this Site.