diff --git a/backend/app/controllers/public/pages_controller.rb b/backend/app/controllers/public/pages_controller.rb index 24891ff..e1efb79 100644 --- a/backend/app/controllers/public/pages_controller.rb +++ b/backend/app/controllers/public/pages_controller.rb @@ -30,6 +30,9 @@ module Public def terms end + def cookies + end + def faq end diff --git a/backend/app/controllers/public/sitemap_controller.rb b/backend/app/controllers/public/sitemap_controller.rb index c9739c6..e547e92 100644 --- a/backend/app/controllers/public/sitemap_controller.rb +++ b/backend/app/controllers/public/sitemap_controller.rb @@ -10,6 +10,7 @@ module Public { loc: "#{base}/faq", changefreq: "monthly", priority: "0.8" }, { loc: "#{base}/live", changefreq: "hourly", priority: "0.85" }, { loc: "#{base}/privacy", changefreq: "yearly", priority: "0.3" }, + { loc: "#{base}/cookie", changefreq: "yearly", priority: "0.3" }, { loc: "#{base}/termini", changefreq: "yearly", priority: "0.3" } ] diff --git a/backend/app/helpers/legal_helper.rb b/backend/app/helpers/legal_helper.rb index b1d9db3..c0b8857 100644 --- a/backend/app/helpers/legal_helper.rb +++ b/backend/app/helpers/legal_helper.rb @@ -1,5 +1,9 @@ module LegalHelper def legal_last_updated - "26 maggio 2026" + "3 giugno 2026" + end + + def cookie_policy_last_updated + "3 giugno 2026" end end diff --git a/backend/app/views/layouts/marketing.html.erb b/backend/app/views/layouts/marketing.html.erb index f0963ec..88e6de9 100644 --- a/backend/app/views/layouts/marketing.html.erb +++ b/backend/app/views/layouts/marketing.html.erb @@ -8,9 +8,10 @@ <%= render "shared/meta_tags" %> <%= yield :head %> - + - + data-ga-id="<%= MatchLiveTv.google_analytics_measurement_id %>"<% end %>> + <%= render "shared/cookie_banner" %> <%= render "shared/marketing_nav" %>
<% if flash[:notice] %>
<%= flash[:notice] %>
<% end %> @@ -21,5 +22,6 @@ + diff --git a/backend/app/views/layouts/marketing_live.html.erb b/backend/app/views/layouts/marketing_live.html.erb index e17ce62..884df17 100644 --- a/backend/app/views/layouts/marketing_live.html.erb +++ b/backend/app/views/layouts/marketing_live.html.erb @@ -6,15 +6,17 @@ <%= content_for?(:title) ? yield(:title) : "Match Live TV" %> <%= render "shared/meta_tags" %> - + <%= yield :head %> - + data-ga-id="<%= MatchLiveTv.google_analytics_measurement_id %>"<% end %>> + <%= render "shared/cookie_banner" %> <%= render "shared/marketing_nav" %>
<%= yield %>
<%= render "shared/marketing_footer" %> + diff --git a/backend/app/views/public/pages/cookies.html.erb b/backend/app/views/public/pages/cookies.html.erb new file mode 100644 index 0000000..680374c --- /dev/null +++ b/backend/app/views/public/pages/cookies.html.erb @@ -0,0 +1,150 @@ +<% content_for :title, "Cookie policy — Match Live TV" %> +<% content_for :meta_description, "Cookie policy di Match Live TV: cookie tecnici, sessione, Google Analytics e gestione del consenso." %> +<% content_for :canonical_url, seo_absolute_url(public_cookies_path) %> + +
+

Cookie policy

+

+ Ultimo aggiornamento: <%= cookie_policy_last_updated %> + · Vedi anche <%= link_to "informativa privacy", public_privacy_path %> +

+ +
+

1. Cosa sono i cookie

+

+ I cookie sono piccoli file di testo che i siti salvano sul dispositivo del visitatore. + Servono a far funzionare il sito, ricordare preferenze o, previo consenso, analizzare l’uso del servizio. +

+
+ +
+

2. Titolare

+

+ <%= MatchLiveTv.privacy_controller_name %> — + <%= MatchLiveTv.privacy_controller_address %> — + <%= MatchLiveTv.privacy_controller_email %> + <% if MatchLiveTv.privacy_controller_vat.present? %> + · P. IVA <%= MatchLiveTv.privacy_controller_vat %> + <% end %> +

+
+ +
+

3. Come gestiamo il consenso

+

+ Al primo accesso mostriamo un banner che ti permette di accettare tutti i cookie, + usare solo quelli necessari o aprire questa pagina per maggiori dettagli. + Puoi modificare la scelta in qualsiasi momento con il link + «Gestisci cookie» nel footer. +

+

+ La preferenza viene memorizzata in un cookie tecnico di prima parte + (mltv_cookie_consent) e in localStorage del browser. +

+
+ +
+

4. Cookie e tecnologie che utilizziamo

+ +

4.1 Strettamente necessari (sempre attivi)

+

Non richiedono consenso perché indispensabili al funzionamento del sito e dell’area riservata.

+ + + + + + + + + + + + + + + + + + +
Nome / tipoFinalitàDurataFornitore
_app_session (cookie di sessione)Mantiene l’accesso dell’utente registrato, protezione CSRF, preferenze di navigazione sicuraSessione / fino a chiusura browserMatch Live TV (prima parte)
mltv_cookie_consentMemorizza le scelte sul banner cookie (necessari / analytics)12 mesiMatch Live TV (prima parte)
+ +

4.2 Analytics (solo con il tuo consenso)

+

+ Se accetti «Tutti i cookie» o abiliti le statistiche nel banner, carichiamo + Google Analytics 4 per capire come viene usato il sito (pagine visitate, provenienza aggregata, dispositivo). + I dati sono trattati da Google Ireland Limited / Google LLC secondo le loro policy. +

+ <% if MatchLiveTv.google_analytics_configured? %> +

ID misurazione attivo sul sito: <%= MatchLiveTv.google_analytics_measurement_id %>

+ <% else %> +

Google Analytics è configurato solo quando il titolare imposta l’ID misurazione sul server.

+ <% end %> + + + + + + + + + + + + + + + + + + + + + + + + +
NomeFinalitàDurataFornitore
_gaDistingue gli utenti (statistiche)2 anniGoogle
_ga_*Mantiene lo stato della sessione Analytics2 anniGoogle
_gidDistingue gli utenti (statistiche)24 oreGoogle
+

+ Puoi revocare il consenso dal banner o dalle impostazioni del browser. + Informazioni Google: + Privacy Policy Google, + componente opt-out Analytics. +

+ +

4.3 Cookie di terze parti durante il pagamento

+

+ Se acquisti un piano Premium, vieni reindirizzato a Stripe (checkout sicuro). + Stripe può impostare cookie propri sul dominio stripe.com per prevenire frodi e completare il pagamento. + Non controlliamo direttamente tali cookie: consulta la + privacy policy di Stripe. +

+ +

4.4 YouTube e servizi collegati

+

+ L’integrazione YouTube per le dirette avviene tramite API lato server; il sito pubblico non incorpora + player YouTube con cookie di profilazione. I visitatori che aprono un link YouTube esterno + sono soggetti alle policy di Google/YouTube su quel dominio. +

+
+ +
+

5. Come disabilitare i cookie dal browser

+

+ Puoi bloccare o cancellare i cookie dalle impostazioni del browser (Chrome, Firefox, Safari, Edge). + Disabilitando i cookie necessari alcune funzioni (es. login) potrebbero non funzionare. +

+
+ +
+

6. Diritti e contatti

+

+ Per esercitare i diritti previsti dal GDPR (accesso, cancellazione, opposizione, revoca consenso) + scrivi a <%= MatchLiveTv.privacy_controller_email %>. + Dettagli nel <%= link_to "documento privacy", public_privacy_path %>. +

+
+ +

+ +

+
diff --git a/backend/app/views/public/pages/privacy.html.erb b/backend/app/views/public/pages/privacy.html.erb index 1c61be3..9863a9f 100644 --- a/backend/app/views/public/pages/privacy.html.erb +++ b/backend/app/views/public/pages/privacy.html.erb @@ -171,8 +171,12 @@

11. Cookie e tecnologie simili

- Il sito utilizza cookie tecnici necessari al funzionamento (es. sessione di login) e, in futuro, - eventuali strumenti di analisi solo previo consenso ove richiesto. Per dettagli aggiornati contatta il titolare. + Il sito utilizza cookie tecnici necessari (sessione di login, sicurezza, memorizzazione delle preferenze cookie) + e, previo consenso tramite il banner, Google Analytics per statistiche aggregate. +

+

+ Puoi gestire le preferenze in qualsiasi momento dal link «Gestisci cookie» nel footer + o consultare la <%= link_to "Cookie policy", public_cookies_path %>.

diff --git a/backend/app/views/shared/_cookie_banner.html.erb b/backend/app/views/shared/_cookie_banner.html.erb new file mode 100644 index 0000000..f0fb32d --- /dev/null +++ b/backend/app/views/shared/_cookie_banner.html.erb @@ -0,0 +1,21 @@ + diff --git a/backend/app/views/shared/_marketing_footer.html.erb b/backend/app/views/shared/_marketing_footer.html.erb index 04fe1a6..7c30f2f 100644 --- a/backend/app/views/shared/_marketing_footer.html.erb +++ b/backend/app/views/shared/_marketing_footer.html.erb @@ -8,7 +8,9 @@ <%= link_to "Dirette", public_live_index_path %> · <%= link_to "FAQ", public_faq_path %> · <%= link_to "Privacy", public_privacy_path %> · + <%= link_to "Cookie", public_cookies_path %> · <%= link_to "Termini", public_termini_path %> + ·

© 2026 Emiliano Frascaro – P. IVA 14230270960

diff --git a/backend/config/initializers/match_live_tv.rb b/backend/config/initializers/match_live_tv.rb index 7333f0d..2e7ebde 100644 --- a/backend/config/initializers/match_live_tv.rb +++ b/backend/config/initializers/match_live_tv.rb @@ -140,5 +140,13 @@ module MatchLiveTv def replay_download_url_ttl_seconds ENV.fetch("REPLAY_DOWNLOAD_URL_TTL_SECONDS", "900").to_i end + + def google_analytics_measurement_id + ENV["GOOGLE_ANALYTICS_MEASUREMENT_ID"].presence + end + + def google_analytics_configured? + google_analytics_measurement_id.present? + end end end diff --git a/backend/config/routes.rb b/backend/config/routes.rb index 9c8c89d..f1ebd1a 100644 --- a/backend/config/routes.rb +++ b/backend/config/routes.rb @@ -116,6 +116,8 @@ Rails.application.routes.draw do get "prezzi", to: "pages#pricing", as: :prezzi get "pricing", to: redirect("/prezzi") get "privacy", to: "pages#privacy", as: :privacy + get "cookie", to: "pages#cookies", as: :cookies + get "cookies", to: redirect("/cookie") get "termini", to: "pages#terms", as: :termini get "signup", to: "registrations#new" post "signup", to: "registrations#create" diff --git a/backend/public/cookie-consent.js b/backend/public/cookie-consent.js new file mode 100644 index 0000000..22c76c1 --- /dev/null +++ b/backend/public/cookie-consent.js @@ -0,0 +1,134 @@ +(function () { + "use strict"; + + var STORAGE_KEY = "mltv_cookie_consent"; + var COOKIE_NAME = "mltv_cookie_consent"; + var COOKIE_MAX_AGE = 365 * 24 * 60 * 60; + + function readConsent() { + try { + var raw = localStorage.getItem(STORAGE_KEY); + if (!raw) return null; + return JSON.parse(raw); + } catch (e) { + return null; + } + } + + function writeConsent(consent) { + var payload = { + necessary: true, + analytics: !!consent.analytics, + ts: Date.now() + }; + try { + localStorage.setItem(STORAGE_KEY, JSON.stringify(payload)); + } catch (e) { /* ignore */ } + var value = payload.analytics ? "all" : "necessary"; + document.cookie = + COOKIE_NAME + "=" + value + + "; path=/; max-age=" + COOKIE_MAX_AGE + + "; SameSite=Lax" + + (location.protocol === "https:" ? "; Secure" : ""); + return payload; + } + + function measurementId() { + return document.body && document.body.getAttribute("data-ga-id"); + } + + function loadGoogleAnalytics() { + var id = measurementId(); + if (!id || window.__mltvGaLoaded) return; + + window.dataLayer = window.dataLayer || []; + function gtag() { window.dataLayer.push(arguments); } + window.gtag = gtag; + + gtag("consent", "default", { + analytics_storage: "denied", + ad_storage: "denied", + ad_user_data: "denied", + ad_personalization: "denied", + functionality_storage: "granted", + security_storage: "granted" + }); + + gtag("consent", "update", { analytics_storage: "granted" }); + + var script = document.createElement("script"); + script.async = true; + script.src = "https://www.googletagmanager.com/gtag/js?id=" + encodeURIComponent(id); + script.onload = function () { + gtag("js", new Date()); + gtag("config", id, { anonymize_ip: true, allow_google_signals: false }); + }; + document.head.appendChild(script); + window.__mltvGaLoaded = true; + } + + function applyConsent(consent) { + if (consent && consent.analytics) { + loadGoogleAnalytics(); + } + } + + function hideBanner(banner) { + if (!banner) return; + banner.hidden = true; + banner.setAttribute("aria-hidden", "true"); + } + + function showBanner(banner) { + if (!banner) return; + banner.hidden = false; + banner.removeAttribute("aria-hidden"); + } + + function bindBanner(banner) { + var acceptAll = banner.querySelector("[data-cookie-accept-all]"); + var reject = banner.querySelector("[data-cookie-reject]"); + + if (acceptAll) { + acceptAll.addEventListener("click", function () { + var c = writeConsent({ analytics: true }); + applyConsent(c); + hideBanner(banner); + }); + } + + if (reject) { + reject.addEventListener("click", function () { + writeConsent({ analytics: false }); + hideBanner(banner); + }); + } + } + + function init() { + var banner = document.getElementById("cookie-banner"); + var consent = readConsent(); + + if (consent) { + applyConsent(consent); + hideBanner(banner); + } else { + showBanner(banner); + } + + bindBanner(banner); + + document.querySelectorAll("[data-cookie-manage]").forEach(function (el) { + el.addEventListener("click", function (e) { + e.preventDefault(); + showBanner(banner); + }); + }); + } + + if (document.readyState === "loading") { + document.addEventListener("DOMContentLoaded", init); + } else { + init(); + } +})(); diff --git a/backend/public/marketing.css b/backend/public/marketing.css index 3305d6d..a0beda4 100644 --- a/backend/public/marketing.css +++ b/backend/public/marketing.css @@ -1060,6 +1060,7 @@ body.nav-menu-open { overflow: hidden; } .legal-doc { max-width: 760px; padding-top: 24px; padding-bottom: 48px; color: #bbb; line-height: 1.65; font-size: 0.95rem; } .legal-doc h1 { color: #fff; font-size: 1.6rem; margin-bottom: 8px; } .legal-doc h2 { color: #fff; font-size: 1.1rem; margin: 28px 0 10px; } +.legal-doc h3 { color: #ddd; font-size: 1rem; margin: 20px 0 8px; } .legal-doc p { margin: 0 0 12px; } .legal-doc ul { margin: 0 0 14px; padding-left: 1.25rem; } .legal-doc a { color: #e53935; } @@ -1272,3 +1273,84 @@ label { display: block; margin-bottom: 6px; font-size: 0.9rem; color: #c8c8d4; f .plan-change-info__box li + li { margin-top: 8px; } + +/* Cookie banner (GDPR / ePrivacy) */ +.cookie-banner { + position: fixed; + left: 0; + right: 0; + bottom: 0; + z-index: 9999; + padding: 16px; + background: rgba(10, 10, 14, 0.96); + border-top: 1px solid #2a2a36; + box-shadow: 0 -8px 32px rgba(0, 0, 0, 0.45); +} + +.cookie-banner[hidden] { + display: none !important; +} + +.cookie-banner__inner { + max-width: 1100px; + margin: 0 auto; + display: flex; + flex-wrap: wrap; + gap: 16px 24px; + align-items: center; + justify-content: space-between; +} + +.cookie-banner__text { + flex: 1 1 280px; + min-width: 0; +} + +.cookie-banner__title { + margin: 0 0 6px; + font-weight: 700; + color: #fff; + font-size: 1rem; +} + +.cookie-banner__desc { + margin: 0; + color: #aaa; + font-size: 0.88rem; + line-height: 1.5; +} + +.cookie-banner__link { + color: #e53935; + text-decoration: underline; +} + +.cookie-banner__actions { + display: flex; + flex-wrap: wrap; + gap: 10px; + flex-shrink: 0; +} + +.cookie-banner__btn { + white-space: nowrap; +} + +.footer-link-btn { + background: none; + border: none; + padding: 0; + font: inherit; + color: #ff6b6b; + cursor: pointer; + text-decoration: none; +} + +.footer-link-btn:hover { + color: #e53935; + text-decoration: underline; +} + +body.cookie-banner-visible { + padding-bottom: 120px; +} diff --git a/brand/CopertinaCanale.png b/brand/CopertinaCanale.png new file mode 100644 index 0000000..3453bcb Binary files /dev/null and b/brand/CopertinaCanale.png differ diff --git a/brand/CopertinaCanale_2.png b/brand/CopertinaCanale_2.png new file mode 100644 index 0000000..6e48671 Binary files /dev/null and b/brand/CopertinaCanale_2.png differ diff --git a/brand/CopertinaCanale_3.png b/brand/CopertinaCanale_3.png new file mode 100644 index 0000000..e61e88d Binary files /dev/null and b/brand/CopertinaCanale_3.png differ diff --git a/brand/CopertinaCanale_4.png b/brand/CopertinaCanale_4.png new file mode 100644 index 0000000..f59a048 Binary files /dev/null and b/brand/CopertinaCanale_4.png differ diff --git a/brand/CopertinaCanale_5.png b/brand/CopertinaCanale_5.png new file mode 100644 index 0000000..1ec8e95 Binary files /dev/null and b/brand/CopertinaCanale_5.png differ diff --git a/brand/CopertinaCanale_6.png b/brand/CopertinaCanale_6.png new file mode 100644 index 0000000..5896113 Binary files /dev/null and b/brand/CopertinaCanale_6.png differ diff --git a/infra/.env.example b/infra/.env.example index 7cbb4c5..5178d01 100644 --- a/infra/.env.example +++ b/infra/.env.example @@ -15,6 +15,9 @@ PRIVACY_CONTACT_EMAIL=privacy@matchlive.it MAILER_FROM=Match Live TV PASSWORD_RESET_EXPIRY_HOURS=2 +# Google Analytics 4 (opzionale — caricato solo dopo consenso cookie «Accetta tutti») +# GOOGLE_ANALYTICS_MEASUREMENT_ID=G-XXXXXXXXXX + # Stripe (test: sk_test_... / price_... da Dashboard modalità Test) STRIPE_SECRET_KEY= STRIPE_WEBHOOK_SECRET= diff --git a/infra/docker-compose.prod.yml b/infra/docker-compose.prod.yml index 2b32e0f..aaf792f 100644 --- a/infra/docker-compose.prod.yml +++ b/infra/docker-compose.prod.yml @@ -101,6 +101,7 @@ services: REPLAY_STORAGE_ACCESS_KEY_ID: ${REPLAY_STORAGE_ACCESS_KEY_ID:-} REPLAY_STORAGE_SECRET_ACCESS_KEY: ${REPLAY_STORAGE_SECRET_ACCESS_KEY:-} REPLAY_STORAGE_FORCE_PATH_STYLE: ${REPLAY_STORAGE_FORCE_PATH_STYLE:-true} + GOOGLE_ANALYTICS_MEASUREMENT_ID: ${GOOGLE_ANALYTICS_MEASUREMENT_ID:-} ports: - "3000:3000" # Solo LAN — NPM proxy HTTPS depends_on: