Cookies
Cookie Policy
This Cookie Policy explains the cookies and browser storage used by the current Pollák Šaľa website, including necessary authentication and consent cookies, reCAPTCHA security checks, and optional analytics after consent.
Necessary cookies and storage
- Necessary cookies and storage are used to run the site, keep authenticated areas secure, remember analytics consent, and protect the contact form from abuse.
- Declining analytics does not disable necessary cookies or the visible reCAPTCHA checkbox on the contact form.
Analytics consent
- Google Analytics, Vercel Analytics, and Hotjar/Contentsquare are blocked until analytics consent is accepted.
- You can decline analytics in the banner or reopen settings from the public footer. Withdrawing consent removes known Google Analytics and _hj Hotjar cookies/storage where the browser allows it and may reload the page so tracking stops consistently.
Public and private areas
- Analytics is limited to eligible public pages. Analytics tools are not active in admin, authentication, invite, API, or Client Zone routes.
- The contact form and confirmation areas are marked for Hotjar suppression in the current implementation.
reCAPTCHA and anti-abuse storage
- The public contact form uses the visible Google reCAPTCHA checkbox. Google may use cookies, browser storage, and technical request data needed to provide the challenge and verify the response.
- These checks are treated as necessary security processing for the contact form, not optional analytics.
Cookie and service table
Exact cookies can vary by provider, browser, domain, and production configuration. This table lists the current categories and known names used by this implementation.
| Category | Service / storage | Purpose | Typical duration | When used |
|---|---|---|---|---|
| Necessary / preference | ps_analytics_consent | Stores accepted or declined analytics preference. | Up to 180 days. | After you accept or decline analytics. |
| Necessary / authentication | NextAuth session and security cookies, with secure prefixes in production where applicable. | Keeps authenticated Client Zone/admin sessions and supports secure sign-in. | Session/application configured lifetime. | Only for authentication and protected areas. |
| Necessary / anti-abuse | Google reCAPTCHA cookies and browser storage managed by Google. | Loads the visible challenge and verifies that the contact submission is not abusive. | Managed by Google and browser settings. | When the public contact form/reCAPTCHA widget is used. |
| Analytics | Google Analytics cookies such as _ga, _ga_*, _gid, or _gat where set. | Measures public-site visits and interactions after consent. | Managed by Google Analytics configuration and browser settings. | Only after analytics consent on eligible public pages. |
| Analytics | Hotjar / Contentsquare cookies and storage such as _hj*. | Measures eligible public-page behavior after consent; sensitive areas are suppressed where implemented. | Managed by Hotjar/Contentsquare and browser settings. | Only after analytics consent on eligible public pages. |
| Analytics | Vercel Analytics script/browser request. | Provides privacy-oriented aggregate public-site analytics after consent. No analytics cookie is expected in this setup. | No application analytics cookie expected. | Only after analytics consent on eligible public pages. |
| Necessary / language | URL language prefix and framework routing state. | Shows the requested language version. The application primarily uses the URL path instead of a separate language-choice cookie. | URL-based unless framework/provider state is present. | When navigating localized pages. |
Browser storage used by consent and analytics code
The application also uses limited browser storage outside traditional cookies.
| Category | Storage | Purpose | Typical duration |
|---|---|---|---|
| Necessary / consent behavior | sessionStorage: ps_analytics_reload | Prevents repeated reloads when analytics consent is withdrawn and the page must reload once to stop loaded providers. | Current browser session. |
| Analytics | Hotjar localStorage/sessionStorage keys starting with _hj | Supports Hotjar analytics after consent. | Managed by Hotjar/Contentsquare; removed where practical when analytics is declined or withdrawn. |
| Analytics | Google Analytics browser cookies/storage where set by Google scripts | Supports GA measurement after analytics consent. | Managed by Google Analytics and browser settings; known GA cookies are cleared where practical on decline/withdrawal. |
More information
For how these cookies and services relate to personal data processing, see the Privacy Policy.
