Cookie Policy

A cookie is a small text file (usually under 1 KB) a website writes to your browser. Next time you visit, your browser hands the file back, and the site recognizes you.

Sounds creepy, but most of the time it's harmless. Without cookies, a site couldn't remember you picked English, that you already closed the banner, or that you're signed in.

There are a few cousins of cookies you'll hear about: localStorage and sessionStorage (also kept in the browser but not auto-sent to the server), plus web beacons and pixel tags (tiny invisible images used for tracking). KVOKA uses only cookies and localStorage. No pixels. No third-party trackers from Facebook, TikTok, or anywhere else.

These don't require consent under GDPR or CCPA because the site genuinely can't function without them.

• kvoka_lang — stores the language you picked (ru, en, or uk). Lifetime: 1 year. Without it, every visit would default back to Russian.
• kvoka_visitor — an anonymous visitor ID (random hash). Used for form rate-limiting (max 5 submissions per device per minute) and for telling new vs returning. Lifetime: 30 days. No personal data inside.
• PHPSESSID — standard PHP session cookie. Only created if you submit the form. Lifetime: until you close the browser.

These are set automatically. You can turn them off only in your browser settings, but then the site will misbehave — your language will reset, the form may not submit.

Technically these are localStorage entries, not cookies, but they do the same job — remember your preferences.

• kvoka_cookie_consent — your choice in the cookie banner (accepted, rejected, or partial). Lifetime: 12 months. Without it, we'd show you the banner on every page.
• kvoka_consent_date — when you accepted or rejected. Needed for audit logs and to re-prompt after 12 months, which GDPR requires.
• kvoka_theme — if a dark-mode toggle is enabled (we'll wire one up eventually). Lifetime: 1 year.

These live only in your browser and are never sent to KVOKA's servers. To wipe them: DevTools → Application → Local Storage → kvoka.com, or just clear your browser history.

We use Google Analytics 4 to see which pages work, where traffic comes from, and where people bail without filling the form. Without it, we're guessing at improvements.

Property ID: G-Z66BLDX96H.

Cookies Google Analytics (GA4) sets:

• _ga — anonymous unique user ID. Lifetime: 13 months.
• _ga_Z66BLDX96H — session state for our specific property. Lifetime: 13 months.
• _gid — visitor differentiator. Lifetime: 24 hours.

Important:

• Google Analytics (GA4) loads only after you click "Accept Analytics" in the cookie banner. Off by default (opt-in, as GDPR and Quebec Law 25 require).
• IP anonymization is enabled (last octet zeroed) and data retention is set to 14 months (Google's minimum).
• We do not share Google Analytics (GA4) data with Google's ad networks (Google Ads remarketing is off).
• We do not use Google Signals (cross-device tracking is off).

Withdraw consent any time — see "How to opt out" below.

As of the last update of this page, we run zero marketing or advertising cookies. That means:

• No Meta / Facebook Pixel.
• No TikTok Pixel.
• No Pinterest Tag.
• No Google Ads remarketing or Google Signals.
• No LinkedIn Insight Tag.
• No Microsoft (Bing) UET.
• No affiliate or partner cookies.

If we ever decide to add retargeting (for example, to run paid campaigns to past visitors), we will:

1. Update this page with the full description first.
2. Add a separate "Marketing cookies" checkbox to the banner.
3. Leave that checkbox off by default (opt-in).
4. Post an entry in the Policy Changelog with the date.

Beyond our own cookies, your browser makes a handful of requests to third parties that can set their own cookies:

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — we load the Inter and Space Grotesk typefaces. Google states they don't set cookies when serving fonts and don't use those requests for ads, though request logs may be retained. More info.
• Cloudflare — if DDoS protection is on, Cloudflare may set a __cf_bm Bot Management cookie for 30 minutes. It distinguishes humans from bots, no personal identifier.
• Telegram / WhatsApp — if you click our links to t.me/maks_kvoka or wa.me/37120469306, those services set their own cookies on their own domains. That's outside kvoka.com and governed by their policies.

Full list of third-party services and where they're based lives at Subprocessor List.

A few ways, from easy to nuclear:

7.1. Use the cookie banner

At the bottom of every page there's a "Cookie settings" link. Open it and hit "Reject analytics." Google Analytics (GA4) won't load, and if it already loaded we send gtag('consent', 'update', { analytics_storage: 'denied' }) so existing cookies stop sending data.

7.2. Browser settings

• Chrome: Settings → Privacy and security → Cookies and other site data → Block third-party / Clear browsing data.
• Firefox: Settings → Privacy & Security → Clear Data → Cookies.
• Safari (macOS): Settings → Privacy → Manage Website Data.
• Safari (iOS): iPhone Settings → Safari → Clear History and Website Data.
• Edge: Settings → Cookies and site permissions → Manage and delete cookies.

7.3. Extensions

uBlock Origin, Privacy Badger, Ghostery — they'll block most trackers. We're fine with that: if you don't want GA, the site still works end-to-end.

7.4. Do Not Track / Global Privacy Control

If your browser sends the DNT header or Global Privacy Control (GPC) signal, we treat that as "do not load analytics." We still have to show the cookie banner (GDPR requirement), but the default button will be "Reject."

The consent you give through the cookie banner lasts 12 months. After that the banner reappears and you re-confirm your choice. That's a GDPR requirement (recital 32 + the ePrivacy Directive) and matches what the French CNIL regulator expects.

You can withdraw consent any time through the "Cookie settings" link in the footer. The withdrawal takes effect immediately: Google Analytics (GA4) stops receiving data from that moment (data already sent stays with Google and is dropped per their retention policy — 14 months).

If you consented on one device (phone) and visit on another (desktop), you'll see the banner again. That's because consent lives in localStorage on each specific browser, not on our server.

This page updates whenever we:

• Add a new cookie or third-party service.
• Change the lifetime of an existing cookie.
• Change the purpose.

The "last updated" date sits at the top of the page. For material changes (say, adding a marketing pixel) we will:

1. Reset existing consents.
2. Re-show the cookie banner to every visitor.
3. Log the change in the Policy Changelog with date and a one-line summary.

For a deeper view, check the Cookies Inventory — the full table with TTLs and domains.

If you spot a cookie on kvoka.com that isn't listed here, or have any question about what we're storing, write us:

• 📱 WhatsApp: wa.me/37120469306
• 💬 Telegram: @maks_kvoka
• ✉️ Email: hi@kvoka.com

It's not a "formal channel" — it's Maks's direct line. During business hours (9 AM – 10 PM ET) the typical reply is within ~15 min.