Cookie policy
Last updated: 26 July 2026 · Exantur
This Cookie Policy explains how Exantur uses cookies and similar technologies. In short: we use strictly necessary cookies to run the service and cookieless analytics by default. With your consent we also use Google Analytics, which sets cookies. We set no advertising cookies and do no cross-site tracking.
1. What cookies are
Cookies are small text files stored on your device by a website. Similar technologies include local storage and session storage, which serve comparable purposes. Under GDPR and the ePrivacy rules, cookies that are strictly necessary to deliver a service you requested do not require consent; non-essential cookies (tracking, advertising, analytics) do.
2. Cookies we use
Exantur uses the following storage:
| Name / purpose | Type | Retention |
|---|---|---|
| Authentication session | Strictly necessary | Session / until sign-out |
| Security and CSRF protection | Strictly necessary | Session |
| Cloudflare bot / DDoS protection (__cf_bm, cf_clearance) | Strictly necessary | Session to ~30 minutes |
| Language preference (NEXT_LOCALE) | Functional (necessary) | Persistent (up to 1 year) |
| Analytics choice (records your consent decision) | Functional (necessary) | Persistent (until cleared) |
| Google Analytics (_ga, _ga_*) | Analytics (consent required) | Set only after you accept; up to 2 years |
The authentication and security cookies are set on the application (app.exantur.com) to keep you signed in. They are essential: without them the service cannot function, so no consent is required for them under GDPR. On this marketing site, before any consent, we set only a functional language cookie (NEXT_LOCALE) and strictly-necessary security cookies from our CDN (Cloudflare); your analytics choice is stored in your browser's local storage, not a cookie. The Google Analytics cookies are set only if you accept analytics in the consent banner.
3. Analytics
For aggregate website statistics we use Cloudflare Web Analytics by default. It is cookieless: it sets no cookies, stores no client-side identifiers, and does not track you across sites. Because it uses no cookies and no personal identifiers, it requires no consent.
With your consent we also use Google Analytics (GA4) to understand how visitors use the site. We use Google Consent Mode: the Google Analytics tag is present on every page, but until you accept it runs in a consent-denied state that sets no cookies and stores no identifiers. When you accept, it sets first-party cookies and processes usage data, with IP anonymization enabled. If you decline, it stays in the cookieless denied state.
4. What we do not use
- No advertising or marketing cookies.
- No cross-site tracking or fingerprinting.
- No social media tracking pixels.
5. Managing your consent
When you first visit the site you can accept or decline analytics cookies in the consent banner. You can change or withdraw your choice at any time via the "Cookie settings" link in the site footer. You can also clear or block cookies through your browser settings, but blocking the strictly necessary cookies will prevent you from signing in and using the Service.
6. Changes and contact
If we introduce further non-essential cookies, we will update this policy and request consent beforehand. For questions about this policy, contact support@exantur.com.