1. Introduction

This document describes the use of cookies and similar technologies on the website www.leaudespa.com operated by Daniela Křivanová, ID No.: 73407925. We classify cookies as necessary, preferences, analytics, and marketing. We set analytics and marketing cookies only after your consent.

2. What cookies are

Cookies are small files stored on your device. They enable website functionality, remember choices, and measure traffic. Some are set by us (first party), others by our partners (third party).

3. Technologies used

• Google Tag Manager (GTM) – tag management. GTM itself typically does not create cookies but loads other scripts according to your consent.
• Google Analytics 4 (GA4) – traffic and user behavior measurement; active only after consent.
• Google Ads – conversion measurement and remarketing; active only after consent.
• Meta Pixel (Facebook/Instagram) – ad measurement and personalization; active only after consent.
• Stripe and Google Pay – payments and fraud prevention; necessary technical cookies.
• hCaptcha – bot protection; necessary technical cookies.
• Google Maps – map display; Google technical and security cookies.

4. Types of cookies we use

• Necessary – provide core site functions, security, cart, and payments. The site will not work properly without them.
• Preferences – store your choices such as language.
• Analytics – help us understand site usage (GA4). Active only after consent.
• Marketing – measure ad effectiveness and enable personalization (Google Ads, Meta Pixel). Active only after consent.

5. List of cookies

Names and lifetimes may change at partners. The most common are listed.

First-party cookies (leaudespa.com)

• cookies_accepted – stores your cookie choice; validity: 1 year; category: necessary.
• pll_language – selected language; validity: 1 year; category: preferences.
• woocommerce_cart_hash, woocommerce_items_in_cart – cart state; validity: session; category: necessary.
• wp_woocommerce_session_* – customer session ID; validity: up to 48 hours; category: necessary.

Payments and fraud prevention

• _stripe_mid (stripe.com) – device identifier; 1 year; necessary.
• _stripe_sid (stripe.com) – session; 30 minutes; necessary.
• m (m.stripe.com) – fraud prevention; approx. 1–2 years; necessary.
• ONID (pay.google.com / .google.com) – payment security; up to 2 years; necessary.

Bot protection

• __cf_bm, hmt_id (hcaptcha.com) – bot differentiation; approx. 30 minutes to 1 year; necessary.

Maps

• SID, HSID etc. (.google.com) – security and map functionality; 30 minutes – 6 months; necessary.

Analytics (active only after consent)

• _ga, _ga_* (.leaudespa.com / Google) – user measurement; 2 years; analytics.
• _gid – daily statistics; 24 hours; analytics.

Marketing (active only after consent)

• _gcl_au (.leaudespa.com / Google) – conversion measurement; 90 days; marketing.
• _fbp (.leaudespa.com / Meta) – advertising identifier; 3 months; marketing.
• fr (.facebook.com / Meta) – ad personalization; 3 months; marketing.

6. Managing consent and disabling cookies

You can change or withdraw consent to analytics and marketing cookies at any time in the cookie settings on our website (the “Cookie settings” link in the footer) or in your browser. Disabling necessary cookies is not possible and may limit site functionality.

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

7. Transfers to third countries

Some cookies and scripts may result in processing in the USA (Google, Meta, Stripe, hCaptcha). Transfers take place under Standard Contractual Clauses (SCC). Risks of a lower level of protection cannot be excluded.

8. Changes to this document

We may update this Policy when technologies or legal requirements change. The current version is always published on this page.