Cookie Policy
Controller: Purgingelbowpoli, Sveavägen 94, 113 50 Stockholm, Sweden
Contact: support@purgingelbowpoli.world
Effective date: 19 March 2026
1. Why this Policy exists
The ePrivacy Directive 2002/58/EC, as implemented in Swedish law through the Electronic Communications Act (2022:482) and associated regulations, requires transparency about storage and access to information on a user’s device when it is not strictly necessary to provide a service explicitly requested by the user. The GDPR applies when cookie identifiers relate to an identifiable individual. This Cookie Policy supplements our Privacy Policy.
2. What cookies and similar technologies are
Cookies are small text files placed on your device. Similar technologies include local storage keys, session storage, pixels, tags, scripts that read advertising identifiers, and hashed identifiers derived from device characteristics. We refer to them collectively as “cookies” where the legal analysis is comparable.
3. How we obtain consent
On your first visit, a banner offers “Accept all”, “Reject”, and “Cookie settings”. Strictly necessary cookies load without consent. Analytics and marketing cookies load only after you opt in, either globally through “Accept all” or granularly through toggles saved in the settings panel. Your choice is stored in localStorage under the key omnipentar_cookie_prefs to prevent repeated prompts and to document consent. You may reopen settings by clearing site data or when we expose a future footer link labelled “Cookie settings”.
4. Cookie categories
4.1 Strictly necessary
These cookies are essential to deliver the service you request: security hardening, load balancing, remembering your cookie decision, and maintaining session integrity during multi-step flows. They are processed under the ePrivacy exemption for strictly necessary storage and under Article 6(1)(f) GDPR for any related personal data.
4.2 Analytics
If enabled, analytics cookies help us measure aggregate traffic, referral sources, scroll depth, and conversion funnels. IP addresses may be truncated before storage. Legal basis: consent (Article 6(1)(a) GDPR).
4.3 Marketing
If enabled, marketing cookies may build audience segments, attribute ad clicks, or cap how often you see a creative. Legal basis: consent (Article 6(1)(a) GDPR). You may withdraw consent at any time without affecting prior lawful processing.
5. Detailed cookie inventory
The table lists representative cookies. Exact names may vary after vendor updates; we review this table quarterly.
| Name / pattern | Category | Provider | Purpose | Duration |
|---|---|---|---|---|
| omnipentar_cookie_prefs | Strictly necessary | Purgingelbowpoli | Stores JSON consent object | 12 months, refreshed on change |
| TLS session identifiers | Strictly necessary | Hosting provider | Encrypted transport | Session |
| csrf_token (if deployed) | Strictly necessary | Purgingelbowpoli | Form forgery protection | Session |
| _ga (if analytics enabled) | Analytics | Google LLC / configured GA4 | Distinguishes users | 24 months typical |
| _gid (if analytics enabled) | Analytics | Google LLC | Distinguishes users | 24 hours typical |
| Meta Pixel (_fbp) (if marketing enabled) | Marketing | Meta Platforms Ireland Ltd. | Browser identifier for attribution | 90 days typical |
If a category is disabled, the related row may not apply because the script never loads.
6. Browser controls
Major browsers let you block third-party cookies, delete existing cookies, or alert you before storage. Be aware that blocking strictly necessary cookies may break checkout or consent storage. Refer to documentation for Chrome, Firefox, Safari, or Edge.
7. Do Not Track
There is no uniform legal standard for DNT signals. We prioritise the granular choices you make in our banner over generic browser flags.
8. Updates
When we add new technologies, we will update this Policy and, where required, refresh consents. Continued use after a reasonable notice period constitutes acknowledgement of changes that do not reduce your rights.
8a. Relationship between technical logs and cookies
Server access logs may contain IP addresses even when marketing cookies are refused. Those logs support security under legitimate interests and are rotated on the schedule referenced in the Privacy Policy. They are not repurposed for profiling unless a separate consent pathway is implemented.
8b. Social plugins
We avoid social share buttons that contact third-party servers before interaction. If we embed a static screenshot linking to a social profile, no cookie is set until you follow the outbound link.
8c. Consent withdrawal mechanics
Withdrawing consent is as easy as giving it: open Cookie settings, disable optional categories, and save. You may also delete site data through your browser, which resets the banner on the next visit. Withdrawing consent does not affect the lawfulness of earlier processing.
9. Contact
Questions about cookies: support@purgingelbowpoli.world