Cookie Policy — Flatren

1. What we mean by "cookies"

A cookie is a small text file stored by your browser when you visit a website. We also use the term "cookies" loosely in this policy to cover other client-side storage the browser provides — primarily localStorage. The European ePrivacy Directive treats these technologies the same way: anything non-essential needs your consent before it's set.

Cookies on the Flatren site fall into three categories — strictly necessary, analytics, and advertising. The analytics and advertising categories are off by defaultand set only after you grant them in the banner. Separately, the mobile app's in-app ads (Google AdMob in the free tier) are governed by the in-app consent screens described in our Privacy Policy.

2. Categories we use

Strictly necessary

No consent required (ePrivacy Directive Art. 5(3) exemption)

Make the site work and remember your cookie choice. These are set whether or not you accept the banner.

Analytics (consent-gated)

Consent — Art. 6(1)(a) GDPR + Art. 5(3) ePrivacy

Google Analytics 4 records pseudonymous page-view events so we can see which pages help and which to fix. These cookies are set only after you tap Accept all in the banner.

Advertising (consent-gated)

Consent — Art. 6(1)(a) GDPR + Art. 5(3) ePrivacy

The TikTok Pixel measures whether visitors who arrive from our TikTok ad campaigns go on to download the app, so we don't waste budget on ads that don't work. The pixel script is not loaded at all until you tap Accept all — or enable Advertising under Customize — in the banner.

3. The complete list

The table below covers every cookie and storage item the Flatren website may set. We update it in lockstep with the code; if you spot anything in your browser's DevTools that isn't listed here, please tell us at contact@fines-software-consulting.ro.

3.1 Strictly necessary

flatren.cookieConsent.v2
Flatren (first-party) · localStorage · Until you clear site data
Records your per-category cookie choices (analytics on/off, advertising on/off) plus the timestamp and schema version. Without this we'd show the banner on every page load.
flatren-motion
Flatren (first-party) · localStorage · Until you clear site data
Records whether you used the floating motion-toggle button to pause on-page animations (an accessibility setting). No personal data.

3.2 Analytics — set only with your consent

_ga
Google Analytics (Google Ireland Limited) · HTTP cookie · first-party domain · 2 years
Distinguishes unique browsers in pseudonymous form. Used by Google Analytics 4 to count distinct visitors.
_ga_EMVJEB97J8
Google Analytics (Google Ireland Limited) · HTTP cookie · first-party domain · 2 years
Maintains GA4 session state for our specific property (measurement ID G-EMVJEB97J8). Page views, session duration, basic engagement signals.

Google Analytics 4 is configured with IP anonymisation enabled, ad-personalisation signals disabled, and Google Consent Mode v2. While your consent is "denied" (the default until you choose), GA4 sends only cookieless ping signals — no cookies are written to your device.

3.3 Advertising — set only with your consent

_ttp
TikTok (TikTok Technology Limited, Ireland) · HTTP cookie · first-party domain · 13 months
Set by the TikTok Pixel to assign a pseudonymous identifier used to attribute a download to a TikTok ad and to deduplicate events. Written only after you grant the Advertising category.
_tt_enable_cookie
TikTok (TikTok Technology Limited, Ireland) · HTTP cookie · first-party domain · 13 months
Flag the TikTok Pixel sets to record that cookie-based measurement is enabled for your session. Written only after you grant the Advertising category.

The TikTok Pixel script (analytics.tiktok.com) is not loaded until you grant the Advertising category — so until then, neither cookie above is written and no request is made to TikTok. When enabled, it shares pseudonymous event data with TikTok: the page views and download-button clicks we fire explicitly, plus events TikTok's pixel collects automatically — a landing-page view and a page-engagement signal (e.g. time spent on the page). TikTok may transfer this data outside the EEA under Standard Contractual Clauses. See the TikTok Privacy Policy and our Privacy Policy (Sections 5, 6, and 11) for detail.

3.4 Third-party requests that do not set cookies on flatren.app

For completeness — these are network requests we make to third parties to render the site, but they do not drop cookies on the flatren.app domain:

Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — serves the Inter typeface used across the site. Google may log the request server-side; no cookies are stored in your browser as a result.
Firebase Hosting CDN — serves the static site. Standard request logs only.

4. How we ask for and remember consent

On your first visit you'll see a banner at the bottom of the page with three equal-weight options: Essential only, Customize, and Accept all. We deliberately weight them equally — refusing must be as visually easy as accepting. Customize opens a per-category switch for Analytics and Advertising; both start off, because consent has to be a deliberate opt-in. Until you choose, Google Consent Mode v2 keeps every consent signal at its default denied state and the TikTok Pixel is never loaded.

Your per-category decision is stored in the flatren.cookieConsent.v2 localStorage key listed above. We never ask again unless we change the categories — and because adding the advertising category changed the scope, the version suffix moved from v1 to v2, which re-prompts everyone who had decided under the old banner.

You can change your mind at any time:

Click the "Cookie preferences" button in the page footer — or .
Withdrawing analytics consent triggers a gtag('consent', 'update', …) call that flips the signal to denied; existing GA4 cookies are deleted by your browser the next time it processes the response. You can also delete them manually via DevTools.
Withdrawing advertising consent stops the TikTok Pixel from firing any further events for the rest of your session. The pixel does not load again on later visits unless you grant the category once more; you can remove the _ttp / _tt_enable_cookie cookies it already set via your browser's site-data controls below.

5. Controlling cookies in your browser

You can block or delete cookies directly from your browser. Doing so for the strictly-necessary cookies will mean we re-show the banner on every visit, but the site will still function. Help pages from major browsers:

You can also opt out of Google Analytics across all sites with the Google Analytics opt-out browser add-on.

6. Changes to this policy

We update this Cookie Policy whenever we add, remove, or change the categories or specific items above. The "Last updated" date at the top of the page reflects the latest version. Material changes — for example a new category, a new third party — re-prompt the banner so you get a fresh choice.

Questions? Write to contact@fines-software-consulting.ro.