Which cookies we use, why, and how you can manage or disable them.
Updated: 1 January 2025
Cookies are small text files that your browser stores on your device when you visit a website. They are used to ensure that the platform works properly, to remember your preferences and to help us understand how the service is used.
We comply with the ePrivacy Directive 2002/58/EC (transposed in Romania by Law no. 506/2004), the GDPR (Regulation (EU) 2016/679) and the guidelines of the ANSPDCP (the Romanian National Supervisory Authority for Personal Data Processing) and of the EDPB (European Data Protection Board) on consent for cookies.
Essential for the platform to function. They cannot be disabled without affecting the use of the service.
| Name | Purpose | Duration |
|---|---|---|
| next-auth.session-token | Authentication session | 30 days (remember me) / 24 hours (default) |
| next-auth.csrf-token | CSRF protection | Session |
| next-auth.callback-url | Redirect after login | Session |
| codat-remember-me | Remembers the “remember me” option during authentication | 5 minutes |
| codat_cookie_consent (localStorage, not a cookie) | Remembers your cookie choice | 12 months |
They improve the user experience and remember preferences.
| Name | Purpose | Duration |
|---|---|---|
| codat-theme (localStorage, not a cookie) | Dark/light mode preference | Permanent, until deleted |
| NEXT_LOCALE | Preferred language | 1 year |
They help us understand user behaviour and improve the platform. They are activated only if you accept statistics cookies.
| Provider | Purpose | Duration |
|---|---|---|
| Google Analytics 4 (_ga, _ga_*) | Traffic analysis and user behaviour (anonymised data, masked IP) | up to 2 years |
| Microsoft Clarity (_clck, _clsk) | Heatmaps and session recordings, to understand how users navigate the platform | 1 year / 1 day |
| Vercel Analytics | Page performance and Core Web Vitals, without cookies, using aggregated collection without persistent identifiers | – |
The “marketing” category is used for Google Ads: conversion measurement and remarketing (the _gcl_au and _gcl_aw cookies, kept for up to 90 days) and, with your consent, the email address entered at checkout, sent to Google only as a hash to match conversions (enhanced conversions). These cookies are set only if you accept marketing cookies. We do not use Meta Pixel or other advertising pixels.
Some cookies are placed by third parties, not by Codat.ro. These third parties have their own privacy policies:
Through the consent banner: On your first visit, you are shown a banner where you can accept all cookies, customise them or refuse the optional ones. Your preference is stored for 12 months and can be changed at any time.
Through your browser settings: You can block or delete cookies directly in your browser:
Analytics opt-out options: Google Analytics Opt-out: tools.google.com/dlpage/gaoptout
Disabling the necessary cookies may affect how the platform works (authentication, saving preferences).
Consent to optional cookies is freely given, specific, informed and unambiguous, in accordance with Article 7 GDPR and EDPB Guidelines 05/2020. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
We do not make access to the core services conditional on accepting optional cookies.
This policy may be updated periodically. The date of the last change is shown in the page header. Changes take effect upon publication; if they are substantial, we will notify you through a banner on your next visit.
Questions: contact@codat.ro
Contact: contact@codat.ro