Cookie Policy

1. General Provisions

1.1. This Cookie Policy (hereinafter — the "Policy") describes how Nearbyto.me Service (hereinafter — the Controller) uses cookies and similar technologies on the website nearbyto.me (hereinafter — the Website).

1.2. Cookies are small text files placed on the user's device (computer, smartphone, tablet) when visiting the Website. Cookies enable the Website to remember user actions and settings, as well as to collect information about Website usage.

1.3. Non-essential cookies are only set after the user gives active consent via the cookie consent banner. Essential cookies that are strictly necessary for the Website to function do not require separate consent.

1.4. This Policy is an integral part of the Privacy Policy and should be read together with it.

2. Categories of Cookies Used

2.1. Strictly Necessary Cookies (Essential)

Description: Cookies without which the Website cannot function properly. They provide basic functionality: page navigation, access to secure areas, session persistence. These cookies do not collect personal data for marketing purposes.

Specific cookies:

Name	Purpose	Retention
`session_id`	User session identification, maintaining authenticated state	Until browser close (session)
`csrf_token`	Protection against CSRF attacks (cross-site request forgery)	Until browser close (session)
`cookie_consent`	Storing the user's cookie preference selection	12 months
`lang`	Storing the selected interface language	12 months
`__cf_bm`	Bot and malicious traffic protection (Cloudflare)	30 minutes

Legal basis: These cookies are necessary for the provision of the service requested by the user and do not require separate consent (legitimate interest of the Controller in ensuring Website functionality and security).

Disabling: Disabling strictly necessary cookies may prevent the Website from functioning or significantly limit its functionality.

2.2. Analytics Cookies (Performance)

Description: Cookies used to collect aggregated and anonymized statistics about Website visits and usage. They allow the Controller to understand which pages are most visited, how users navigate the Website, and which features are used most frequently. Data is used exclusively to improve Website quality and usability.

Specific cookies:

Name	Purpose	Retention	Provider
`_ga`	Google Analytics — distinguishing unique users	2 years	Google
`_ga_*`	Google Analytics — session state persistence	2 years	Google
`_gid`	Google Analytics — distinguishing unique users (24h)	24 hours	Google

Legal basis: User consent (opt-in via cookie banner).

Data collected: pages visited, time on page, clicks, scroll depth, device type, browser type, screen resolution, referral source. All data is aggregated and anonymized — individual users cannot be identified. Analytics is provided by Google Analytics via Google Tag Manager.

Disabling: Disabling analytics cookies does not affect Website functionality. The Controller will simply receive less information about Website usage patterns.

2.3. Marketing Cookies

Description: As of the current version, the Website does not use marketing or advertising cookies. If marketing cookies are introduced in the future, this Policy will be updated accordingly, and separate consent will be requested.

3.1. When the user first visits the Website, a cookie consent banner is displayed with the following options:

Button	Effect
Accept All	All cookie categories are enabled
Essential Only	Only strictly necessary cookies are enabled; analytics cookies are not set
Preferences	Opens a detailed settings panel where the user can enable/disable each cookie category individually

3.2. The banner is displayed until the user makes a selection. Essential cookies may be set before the user's selection, as they are necessary for the Website to function.

3.3. The user's selection is stored in the cookie_consent cookie for 12 months. After this period, the consent banner is displayed again.

4. Third-Party Cookies

4.1. The Website may set cookies from the following third parties:

Third Party	Purpose	Cookie Category	Privacy Policy
Cloudflare	DDoS protection, bot detection	Essential	cloudflare.com/privacypolicy
Google	Web analytics (via Google Tag Manager)	Analytics	policies.google.com/privacy
Lava.top	Payment processing (on checkout pages only)	Essential (for payment flow)	lava.top/privacy

4.2. Third-party cookies are subject to the privacy policies of the respective third parties. The Controller is not responsible for the content of third-party privacy policies.

5. Managing Cookies

5.1. Via the Website

The user may change cookie preferences at any time by:

Clicking the "Cookie Settings" link in the Website footer;
This reopens the cookie consent panel where preferences can be adjusted.

5.2. Via Browser Settings

Most web browsers allow users to control cookies through their settings. The user may:

View cookies stored on their device;
Delete individual or all cookies;
Block cookies from specific websites or all websites;
Configure the browser to notify the user when cookies are being set.

How to manage cookies in common browsers:

Browser	Instructions
Google Chrome	Settings → Privacy and Security → Cookies and other site data
Mozilla Firefox	Settings → Privacy & Security → Cookies and Site Data
Safari	Preferences → Privacy → Manage Website Data
Microsoft Edge	Settings → Cookies and site permissions → Cookies and site data

Note: Blocking all cookies (including essential ones) may result in the Website not functioning properly.

5.3. Do Not Track (DNT)

The Website currently does not respond to "Do Not Track" browser signals, as there is no universally accepted standard for DNT. The user may use the cookie consent banner to control tracking preferences.

6. Similar Technologies

6.1. In addition to cookies, the Website may use the following similar technologies:

Technology	Purpose
Local Storage	Storing user preferences and session data locally in the browser (similar to cookies but with larger capacity)
Session Storage	Temporary storage of data for the duration of the browser session

6.2. These technologies are used exclusively for the same purposes as the corresponding cookie categories (essential functionality and analytics) and are subject to the same consent requirements.

7. Data Retention

7.1. Data collected through cookies is retained for the following periods:

Cookie Category	Retention Period
Essential cookies	Duration of session or up to 12 months (for preference cookies)
Analytics cookies	12 months from collection; aggregated analytics data retained indefinitely

7.2. When a cookie expires, it is automatically deleted from the user's device. Server-side data associated with expired cookies is deleted in accordance with the periods specified above.

Channel	Contact
General inquiries	[email protected]
Data protection inquiries	[email protected]