This Cookie Policy explains how MB Firmavis (“Firmavis”, “we”, “us”) uses cookies and similar technologies when you visit our website. It should be read together with our Privacy Policy, which describes how we handle personal data more broadly.
A cookie is a small text file placed on your device by a website. We also use closely related technologies, such as data stored in your browser (for example, in local storage). Throughout this policy we refer to all of these simply as “cookies”.
We distinguish between cookies that are strictly necessary to run the site — which do not require your consent — and everything else, which we set only after you have given consent. National implementations of the ePrivacy Directive apply, including the CNIL guidelines in France, the TDDDG in Germany, the Garante guidance in Italy and the AEPD guidance in Spain.
1. Cookies we use
Strictly necessary (no consent required)
These are required for core functions such as signing in, keeping your session secure, and remembering your cookie choice. They do not track you for advertising and cannot be switched off through the consent banner.
| Name | Provider | Purpose | Storage / lifetime |
|---|---|---|---|
__session, __client_uat, __clerk* | Clerk (authentication) | Keep you signed in and maintain a secure authenticated session. | Session and persistent cookies, up to ~7 days. |
firmavis_cookie_consent | Firmavis | Records your cookie choice (accept or reject) and the time it was made, so we do not ask again on every visit. | Stored in your browser’s local storage. Your choice is valid for 12 months — after that we ask again — and you can change or clear it at any time before then. |
__cf_bm, cf_clearance | Cloudflare (network security) | Our site is delivered through Cloudflare’s network, which may set these cookies to distinguish legitimate visitors from automated traffic and to remember that a security check has been passed. They are set only when Cloudflare’s bot-protection measures are active. | __cf_bm up to 30 minutes; cf_clearance up to 30 days. |
NEXT_LOCALE | Firmavis | Carries the language of the page you asked for into the parts of the site that have no language in their address — sign-in and sign-up, your account area, and export emails. It is written from the address you visit (including when the home page sends a browser set to another language to that language's version), where it lasts only for your browser session, and when you pick a language yourself, where it is remembered for longer. It holds nothing but a language code, never an identifier. Strictly necessary to deliver the site in the language you requested (a service you have asked for — exempt from consent under the ePrivacy rules). | Until you close your browser when set from the address you visit; up to 12 months when you choose a language. |
Analytics (consent-based)
We use Google Analytics 4 to understand, in aggregate, how visitors use the site so we can improve it. These cookies are set only after you accept — see section 2 below.
| Name | Provider | Purpose | Storage / lifetime |
|---|---|---|---|
_ga | Google Analytics | Distinguishes visitors for aggregate usage measurement. | Up to 2 years. |
_ga_* | Google Analytics | Maintains analytics session state for the property. | Up to 2 years. |
Marketing
We do not currently use marketing or advertising cookies.
2. Analytics and Google Consent Mode v2
The Google Analytics script is not loaded at all until you accept: before you make a choice — and if you reject — no request of any kind is made to Google from our pages. When the script loads after your acceptance, it runs through Google Consent Mode v2 with the following signals:
analytics_storage— granted by your acceptance; set back to denied if you withdraw consent.ad_storage,ad_user_data,ad_personalization— denied at all times, including after you accept. We do not use advertising cookies or advertising signals.
We configure Google Analytics data retention to a maximum of 14 months — this is how long Google retains collected event data on its servers, and is separate from the browser-cookie lifetimes listed in section 1. The analytics service is provided by Google Ireland Limited as the provider established in the European Economic Area, with Google LLC in the United States acting as a sub-processor under the EU-US Data Privacy Framework. Our full list of sub-processors is available on our Sub-processors page.
3. How we ask for consent
- A consent banner appears on your first visit and stays until you make a choice.
- Accept and Reject are offered with equal prominence. We do not use pre-ticked toggles, a deceptive close control that defaults to acceptance, or any other deceptive design pattern, consistent with EDPB Guidelines 05/2020 on consent and applicable national guidance.
- You can change your mind at any time. The cookie-settings link in the site footer reopens the banner so you can update or withdraw your choice.
- Your choice is stored in your browser together with a timestamp so that it is honoured on every visit and applied before any non-essential cookie is set.
4. Third-party cookies
Some cookies are set by the providers listed above. You can read how they handle data in their own policies:
- Clerk — clerk.com/legal/privacy
- Google — policies.google.com/technologies/cookies
- Cloudflare — cloudflare.com/cookie-policy
5. Your choices and rights
Withdrawing consent is free and as easy as giving it. Use the cookie-settings link in the footer at any time, or adjust your browser settings to block or delete cookies. If you withdraw consent, analytics stops immediately for the rest of your visit and on every future page load; you can also delete the _ga cookies via your browser settings. Strictly necessary cookies cannot be switched off through the banner because the functions they support — signing in, security checks, remembering your choice — cannot work without them; they are set only in connection with those functions and are not used for tracking or advertising.
6. Changes to this policy
We may update this Cookie Policy from time to time. The current version is always published at this page, with the effective and last-updated dates shown at the top.
7. Contact
For any question about this policy, contact us at [email protected].
MB Firmavis
Lithuanian company code: 307941710
Registered in the Register of Legal Entities of the Republic of Lithuania (administrator: State Enterprise Centre of Registers)
Registered office: Laisvės al. 85E-5, LT-44297 Kaunas, Lithuania
VAT number: LT100020426112
Privacy matters: [email protected]
General contact: [email protected]
This document is published in English. Translations into other supported languages may be published at a corresponding translated URL under /legal. In the event of any discrepancy between the English version and any translation, the English version prevails to the extent permitted by applicable law.