Cookie Policy

Last updated: 27 August 2026

1. Cookies we use

Strictly necessary cookies, always active: the authentication session (Auth.js) and your consent preference. Analytics cookies, only with your explicit consent given through the consent banner: Google Analytics. We do not use advertising cookies.

2. Cookie table

umblam_consent: first party, 6 months, stores your cookie choice. authjs.session-token: first party, session cookie, keeps you signed in. authjs.csrf-token: first party, session, protection against CSRF attacks. _ga and _ga_*: set by Google Analytics exclusively after your consent, lifetime up to 2 years, distinguish visitors for usage statistics, without cross-site tracking. Local storage: umblam_ab remembers the headline variant shown on the landing page and is used only after you accept analytics cookies. umblam_masq and umblam_masq_as: first party, 15 minutes maximum, set only in an umblăm operator's browser for the duration of a support access (see the Privacy Policy, section 7); they never reach an ordinary member's device. When you withdraw consent, analytics cookies and the related local storage are removed.

3. How to change your consent

Use the "Cookie settings" link in the footer of any page to reopen the banner and change your choice at any time. You can also delete cookies from your browser settings; deleting the session cookie will sign you out.