1. What are cookies?
Cookies are small text files stored on your device when you visit a website.
2. What cookies do we use?
Strictly necessary cookies
Essential for the website to function, cannot be disabled.
- Session management after login (
pv_session) - Cookie preferences (
cookie_consent) - Temporary security during sign-in via Google or Facebook (
google_state,facebook_state) — automatically deleted once sign-in completes
Legal basis: Art. 6(1)(f) GDPR — legitimate interest
Analytics and advertising-measurement cookies (Google)
We use the Google tag (gtag.js) for Google Analytics 4 (visit statistics) and for Google Ads conversion measurement. These scripts are only loaded after you click "Accept all" in the cookie banner (Consent Mode v2 — everything is denied by default). If you choose "Necessary only", no Google scripts are loaded and no Google cookies are set.
After full consent, Google may set cookies including _ga and _ga_* (analytics, up to 2 years) and _gcl_au (advertising measurement, approx. 90 days). In addition, we ourselves set the first-party cookie pv_gclid (90 days), which stores the Google Ads click ID so that a later purchase can be attributed to the ad click; for paid orders we also use this ID for a server-side conversion upload to Google Ads.
Legal basis: Art. 6(1)(a) GDPR — consent
3. Overview
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
pv_session | Necessary | Authentication session | 24 hours |
cookie_consent | Necessary | Stores cookie preferences | 12 months |
google_state, facebook_state | Necessary | Security (CSRF) during sign-in via Google/Facebook | 10 min — deleted after sign-in |
_ga, _ga_* | Analytics (only after consent) | Google Analytics 4 — visit statistics | Up to 2 years |
_gcl_au | Advertising measurement (only after consent) | Google Ads — conversion measurement | 90 days |
pv_gclid | Advertising measurement (only after consent) | First-party — stores the Google Ads click ID for conversion attribution | 90 days |
4. Local storage (localStorage)
In addition to cookies, we use your browser's localStorage to save your preferences:
| Key | Purpose | Duration |
|---|---|---|
pv_lang | Language preference (NL/FR/DE/EN) | Until deleted |
pv_font_size | Font size setting | Until deleted |
LocalStorage does not contain personal data and is not transmitted to our servers.
5. Third-party services
Stripe (payment processing) sets its own strictly necessary fraud-prevention cookies during the payment process (including __stripe_mid and __stripe_sid) — only on the page where you pay, never on an ordinary visit. See Stripe's privacy policy for more information.
OpenStreetMap (map display on the case page) sets no cookies. When you open a case whose address has been geolocated, your browser loads map tiles directly from tile.openstreetmap.org; only your IP address, user-agent and the requested map-viewport coordinates are transmitted to the OpenStreetMap Foundation. More details in our Privacy Policy.
Social sign-in (Google, Facebook): if you choose to sign in via one of these services, you are redirected to that provider, which may set its own cookies on its own domain under its own policy. On our own pages, Google only sets cookies after you have consented via the cookie banner (see section 2). See our Privacy Policy for the data we receive at sign-in.
6. Managing cookies & withdrawing consent
Your choice in the cookie banner is stored in the cookie_consent cookie. You can manage cookies via your browser settings. Disabling necessary cookies may affect the functioning of the website. To change your cookie preferences, delete the cookie_consent cookie via your browser settings and refresh the page.
7. Your rights
See our Privacy Policy for a full overview of your rights under the GDPR, including the right of access, rectification, erasure and objection.
8. Changes to this policy
We may update this cookie policy from time to time. The most recent version is always available at pvresponse.be/cookies.