POSPal · Legal
Cookie and Tracker Policy
The Greek text controls. This English version is provided for convenience only.
This policy covers pospal.gr. App data is separately described in the Privacy Notice.
1. Choices and withdrawal
Necessary storage remembers your choice. Analytics, marketing, and external media controlled by POSPal activate only after the matching positive choice. Accept all and reject all are presented with equal prominence. Select “Cookie settings” in the footer or floating button to change or withdraw. You can also clear cookies/local storage in your browser.
2. Inventory
| Provider / storage | Purpose and category | Data | Duration / basis |
|---|---|---|---|
POSPal · localStorage pospal-consent-v1 | Consent preferences · necessary | necessary/measurement/marketing/externalMedia choices and time | 6 months; then expires locally and a new choice is requested · service necessity |
Google Analytics 4 · G-F851JG8PL6 | Usage measurement · analytics | Online identifiers, approximate location, device, referrer, pages/events | Google cookies such as _ga and _ga_* (typically up to 2 years) · consent |
Google Ads · AW-17981190399 | Advertising attribution · marketing | Online identifiers, interactions, conversions, device, referrer | Depending on the feature: _gcl_au (90 days), _gac_* (90 days), test_cookie (15 minutes), or IDE (up to 13 months in the EEA) · consent |
Microsoft Clarity · vnzrn7y23s | Heatmaps/session interaction · analytics | Clicks, scrolls, screen, device/browser, IP, session IDs | _clck up to 1 year, _clsk up to 1 day, CLID up to 1 year, ANONCHK up to 10 minutes, MR up to 7 days, MUID up to 390 days, and SM for the session · consent |
YouTube / Google · youtube-nocookie.com | Embedded guide videos · external media | IP, device/browser, URL, identifiers, player interaction | No request before consent. After activation, depending on Google/device, storage may include YSC (session), PREF (8 months), __Secure-YNID or legacy VISITOR_INFO1_LIVE (6 months), __Secure-YENID or legacy __Secure-YEC (13 months), and __Secure-ROLLOUT_TOKEN (6 months) · consent. Inspection of the embedded player also found yt-icons-last-purged (icon cleanup timestamp) and ytidb::LAST_RESULT_ENTRY_KEY (player storage availability status) in YouTube localStorage. The latter entry contained a 30-day expiry timestamp. Cleanup depends on the player and browser; you can clear site data in your browser. These entries are also created only after external media is enabled. |
| GitHub Pages | Hosting, delivery, and security of pospal.gr · necessary | IP, URL, referrer, user agent, timestamps, and GitHub-controlled technical/security logs | Under GitHub's current retention policy · legitimate interests in delivery/security |
| Cloudflare · pospal.gr | Site delivery/security, protection of email addresses against automated harvesting, and technical network-error reporting · necessary | IP, URL, user agent, timestamps, and technical/security logs. The same-origin email-decode.min.js displays protected email addresses. Network headers specify a Cloudflare error-reporting destination. | Under Cloudflare settings and terms · legitimate interests in delivery/security. No cookies or localStorage entries from email decoding were observed during the audit. |
| Cloudflare Pages · menu.pospal.gr | Delivery/security of public Customer Menus · necessary when a public menu is opened | IP, URL, user agent, timestamps, technical/security logs | Under Cloudflare settings and terms · legitimate interests in delivery/security |
3. Technical enforcement
4. Updates
Third-party names and durations may change by provider, geography, device, and configuration. The inventory is checked for each legal release and through a browser test of the build intended for publication. Questions: [email protected].