Cookie policy
Which cookies we use, why, and how to manage your preferences.
Last updated: Working draft
This document is a working draft prepared for review by a lawyer before the website's public launch. It does not constitute legal advice.
Contents
1. What cookies are
Cookies are small text files that a website saves in your browser. Similar technologies, such as the browser's local or session storage, work in a similar way; in this policy we call them all “cookies”.
2. The rules we follow
Under Art. 4(5) and (6) of Romanian Law no. 506/2004, we may store or access information on your device only with your agreement, after giving you clear and complete information, except for cookies that are strictly necessary to provide a service you have expressly requested. This means:
- strictly necessary cookies work without consent;
- analytics cookies (Google Analytics) are set only after you agree;
- we do not use advertising or marketing cookies;
- rejecting is as easy as accepting: both options are available directly in the cookie banner.
Where a cookie involves personal data, our Privacy policy also applies.
3. The cookies we use
3.1. Strictly necessary cookies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
NEXT_LOCALE | The Association (first-party) | Remembers your chosen language (Romanian or English) | 1 year |
site_consent | The Association (first-party) | Stores your cookie choices | 6 months |
admin_session, admin_oauth | The Association (first-party) | Authenticates the Association's administrators in the admin area; not set for visitors. The Amazon Cognito sign-in page (amazoncognito.com) sets its own technical cookies, also only for administrators | Session: up to 8 hours; admin_oauth: 10 minutes |
3.2. Analytics cookies (only with your consent)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google (Google Analytics 4) | Distinguishes visitors for statistical purposes | Up to 2 years (to be confirmed) |
_ga_<ID> | Google (Google Analytics 4) | Maintains session state for statistical purposes | Up to 2 years (to be confirmed) |
utm_attribution (session storage) | The Association | Remembers the campaign (UTM) parameters that brought you to the site, to associate them with a form sent in the same session | Until you close the tab or browser |
Google Analytics 4 is configured with IP anonymisation, and Google Signals and ad personalisation are disabled. We use only aggregated statistics (for example, pages visited or clicks on the donate button); the events we measure contain no names, email addresses or other identifying data. Google may process data outside the European Economic Area on the basis of the EU-U.S. Data Privacy Framework or standard contractual clauses. Details: https://policies.google.com/privacy (opens in a new tab).
3.3. Third-party services
- Stripe. When you choose to donate by card, you are redirected to the payment page at checkout.stripe.com. Stripe sets its own cookies on its domain, which are needed for the payment and for fraud prevention, under its own policy (https://stripe.com/privacy (opens in a new tab)). The Association does not control these cookies.
- Cloudflare Turnstile (if enabled). To protect our forms against spam, this service may process technical data about your browser and device to tell humans from automated programs, under Cloudflare's policies.
- External links. When you leave the website (for example, to Bursa Binelui or to scientific publications), the policies of those websites apply.
4. Managing your preferences
- On your first visit, the cookie banner lets you accept or reject analytics cookies. Until you choose, no analytics cookies are set.
- You can change your choice at any time using the “Cookie settings” link in the footer of every page. Withdrawing consent does not affect the lawfulness of processing carried out before.
- Your choice is remembered for 6 months; after that we ask you again.
- You can delete or block cookies at any time in your browser settings. If you delete the
site_consentcookie, the banner will be shown again. Blocking strictly necessary cookies may affect how the website works.
5. Changes and contact
We may update this policy, for example if we add or remove a service. The date of the last update is shown on this page. Questions: privacy@ivacaterina.org.