Legal document
Cookie Policy
This policy explains how the sarghy.com platform uses cookies and similar technologies for functionality, security, analytics, and, where applicable, advertising. This policy applies to all visitors and users of the platform.
Data protection notice
Unauthorized automated data collection, vulnerability scanning, or penetration testing without prior written consent is prohibited. Technical data may be analyzed to protect platform integrity. Security events may be documented and reported to competent authorities.
1. What cookies are
2. Categories of cookies used
- Strictly necessary cookies — essential for platform operation: authentication, session management, CSRF security, consent preferences (
sarghy_cookie_consent_v2) and language preference (preferred-lang, classified as functional per ePrivacy art. 5(3)). They cannot be disabled without affecting core functionality. Legal basis: legitimate interest / contract performance. Retention: session duration or up to 12 months. - Analytics cookies — collect aggregated statistical data (pages visited, session duration, traffic source) to improve the platform, for example through Google Analytics loaded conditionally via Google Tag Manager. Set only after you explicitly opt in to the Analytics category. Legal basis: consent (GDPR Art. 6(1)(a)). Retention: up to 26 months.
- Marketing cookies — may be set by third parties (e.g. Google Ads / AdSense) to display relevant ads and measure campaign performance, if this service is enabled. Set only after you explicitly opt in to the Marketing category. Legal basis: consent. Retention: per the third-party provider's policy (typically up to 13 months).
3. Third-party cookies
- Google Analytics / Google Tag Manager — traffic and user behavior analysis. Google's policy: policies.google.com/privacy.
- Google AdSense — interest-based advertising, if the service is enabled. Ads policy: policies.google.com/technologies/ads.
- Stripe — cookies required for payment processing and fraud prevention. Stripe's policy: stripe.com/privacy.
4. Managing consent
sarghy_cookie_consent_v2 (valid for 6 months), mirrored to localStorage.- Reject all — only strictly necessary cookies are set. No Google analytics or marketing scripts are loaded.
- Customize — toggle Analytics and Marketing individually. The Strictly necessary category is permanently on (cannot be disabled).
- Accept all — enables every category, including analytics and marketing.
Google Consent Mode v2. Before any Google tag loads, we forward consent signals (`ad_storage`, `analytics_storage`, `ad_user_data`, `ad_personalization`) to Google. As a result, no analytics or advertising cookie is set before your explicit consent.
Language detection. The language preference (preferred-lang) is treated as functional (strictly necessary under ePrivacy art. 5(3)) and does not depend on tracking consent. On the first visit, the default language may be suggested based on the country of origin (HTTP header x-vercel-ip-country provided by Vercel) — your IP address is not stored for this purpose.
You may withdraw your consent at any time by pressing the Cookie settings button in the site footer, which reopens the banner with your current preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
5. Browser settings
Technical notice
All session data may be protected through technical security mechanisms. Injection attempts, path traversal, abusive scanning, or malicious use of resources may be blocked and documented in accordance with applicable law.