Cookie Policy
Last updated: 2026-10-03
1. What are cookies?
Cookies are small text files stored in your browser when you visit a site. This policy also covers similar technologies we use: a browser fingerprint (section 5) and anonymous visit counting on our own server (section 4).
2. Your choice
On your first visit a banner asks for your consent. Accept turns on the analytics and advertising measurement cookies in section 3.2. Decline keeps them off; we then only count your visit anonymously (section 4). You can change your choice at any time with the "Cookie Preferences" link in the footer; declining removes the analytics cookies set earlier.
3. Cookies we use
3.1 Strictly necessary (always on)
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
panelica-central-session | Panelica | Keeps you signed in during your visit | 120 minutes after your last request |
XSRF-TOKEN | Panelica | Protects forms against cross-site request forgery | 120 minutes after your last request |
pn_cookie_consent | Panelica | Remembers your choice in the cookie banner | 1 year |
cf_clearance | Cloudflare | Security: set only when Cloudflare has checked that your browser is not a bot | Up to 1 year |
3.2 Analytics and advertising measurement (only after "Accept")
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_pn_vid | Panelica (our own analytics) | Recognises a returning browser | 1 year |
_ga, _ga_* | Google Analytics | Measures site usage | Up to 2 years |
_gcl_au | Google Ads | Measures conversions from our ads and builds advertising audiences (remarketing) | 90 days |
_pk_id.*, _pk_ses.* | Matomo, run on our own server (analytic.panelica.com) | Measures site usage | 13 months / 30 minutes |
_clck, _clsk | Microsoft Clarity | Shows how pages are used (clicks, scrolling, session replays) | 1 year / 1 day |
MUID, CLID and others on clarity.ms / bing.com | Microsoft | Set by Microsoft for Clarity | Up to 13 months |
4. Without consent
Even if you decline, our own server records the visit so we can count traffic and keep bots out of the numbers: the pages you view, time on page and scroll depth, the referring site, device type and browser, your IP address and approximate location. The visit gets a daily anonymous identifier (a one-way hash of the date, IP address and browser that changes every day); nothing is stored on your device and no fingerprint is taken. Google Analytics, Google Ads and Microsoft Clarity are not loaded at all, so nothing is sent to Google or Microsoft for measurement. Matomo, which runs on our own server, counts without cookies.
5. Browser fingerprint (only with consent)
With your consent our script also computes a one-way hash of browser characteristics (screen, time zone, language, graphics and audio rendering, installed fonts). It is used only to recognise a returning browser whose _pn_vid cookie was deleted, and only when exactly one known browser on the same network matches. It is not used for advertising and not shared with anyone.
6. Approximate location
Country and city are looked up from your IP address with the ip-api.com service when a visit starts.
7. Data retention
- Visits of real visitors and the pages they viewed: 12 months
- Browser profiles (the record behind
_pn_vid): 12 months after the last visit - Visits recognised as bots, and visits in which our script did not run: 30 days
- Conversion events (sign-ups, trials, purchases): 12 months
- Daily totals: kept (counts only, no personal data)
Data held by Google, Microsoft and Cloudflare follows their own retention settings and policies.
8. Third parties
- Google: Google Analytics and Google Ads (only with consent), Google Fonts
- Microsoft: Clarity (only with consent)
- Cloudflare: content delivery and security; cookieless web analytics
- ip-api.com: approximate location from the IP address
Matomo runs on our own server. See also our Privacy Policy.