Cookies, tags, and your choices

Scope

This policy covers technologies that store or access information on your device when you use https://phaltronshor.ddd. It complements the Privacy Policy and should be read together with the cookie banner toggles that appear on your first visit and whenever you clear site storage.

References to “we” or “us” mean the same operator responsible for the Nuvia storefront experience unless a separate processor agreement explicitly shifts accountability for a specific tag manager deployment.

What cookies and similar technologies are

Cookies are small text strings placed by a server on your browser. Pixels, SDKs, and HTML5 storage behave similarly by persisting identifiers or preferences. Some technologies are needed to remember your language, session security tokens, or consent state; others help us understand aggregate traffic or measure campaigns only when you opt in.

High-level taxonomy

We classify technologies into strictly necessary, analytics, and marketing groups. The banner’s “Reject” button leaves optional categories off while still allowing the site core to operate. “Cookie settings” exposes granular switches mirroring this taxonomy.

Strictly necessary

These technologies enable features you explicitly request, such as navigating secure pages, remembering cookie consent outcomes, preventing cross-site request forgery on forms, and balancing traffic. They do not require consent under ePrivacy implementations that recognise essential exemptions, but we still describe them transparently.

Analytics (optional)

If you enable analytics, we may process pseudonymous identifiers, coarse location inferred from IP truncated at the byte level where possible, device category, screen size buckets, and engagement events such as scroll depth thresholds. Reports are aggregated; we do not sell raw clickstreams.

Marketing (optional)

Marketing tags may help attribute visits to paid channels, cap impression frequency, measure conversions, or prepare audiences for future campaigns—including platforms such as Google Ads when you enable this category. They activate only when the marketing toggle and “Save choices” confirm your selection. Withdrawing consent takes effect on your next visit after we clear or ignore optional payloads; some browsers require you to delete third-party storage separately.

Google Ireland Limited (and, for certain products, other Google affiliates) may process limited identifiers when tags fire. See Google’s privacy materials for the regions you target. We configure tags to respect your consent state on this site and review settings when Google updates its EU policy tools.

Local storage and session storage

We may store JSON consent proofs under a dedicated key such as nuvia_cookie_prefs. Clearing site data removes these entries and will cause the banner to reappear. Session storage may hold ephemeral form guards that expire when the browser tab closes.

Retention on your device

Session cookies expire when you close the browser. Persistent cookies follow vendor defaults, often capped at twelve or twenty-four months, and we instruct partners to honour shorter periods where feasible. You may delete cookies anytime through browser settings.

Vendor diligence

We review subprocessors for GDPR Article 28 compliance, transfer safeguards, and security documentation. Contracts require deletion or return of data at termination. If a vendor materially changes practices, we reassess consent wording and banner disclosures.

Typical categories: hosting and CDN providers, email delivery, payment processors at checkout, logistics APIs, and—with your consent—analytics or advertising platforms (for example Google Ads / Google Analytics-style measurement). A current mapping is available on request for enterprise or regulator review.

How to control technologies

Use our banner buttons, browser cookie controls, OS-level tracking restrictions, or industry opt-out portals where applicable. Note that blocking strictly necessary cookies may degrade checkout or security features. For questions about legacy tags after vendor migrations, email us with screenshots and approximate visit times.

Demonstrating consent

We log timestamps and category selections locally on your device rather than silently fingerprinting you. Enterprise customers may request aggregated proof-of-consent metrics describing percentages of visitors who accept analytics, never the underlying personal identifiers unless law enforcement demands narrow disclosure.

Updates to this policy

Material changes—such as introducing a new high-risk tag—will be reflected here and, when warranted, summarised in a short site notice. Reloading the page refreshes the dynamic date shown above so you can compare versions during audits.

Contact

ask@phaltronshor.world · Favoritenstraße 86, 1100 Wien, Austria · Related: Privacy Policy.