Cookie Policy
Last updated: July 2026
This page explains, in full and in plain language, which cookies and similar technologies the fortesonic.com website uses, who sets them, what they are for, how long they last, and how you stay in control. It complements our Privacy Policy and Terms & License — read together, they describe everything we do with data. The website is operated by, and the data controller is, Weboperater PR, Mileševska 14, 11000 Belgrade, Serbia.
1. What cookies and similar technologies are
A cookie is a small text file a website stores in your browser so it can be read back
on later requests. Similar technologies covered by the same rules include browser
localStorage, pixels and device fingerprinting. This policy uses “cookies” as
shorthand for all of them.
Cookies are either first-party (set by fortesonic.com) or third-party (set by another domain, e.g. Google or PayPal), and either session (deleted when you close the browser) or persistent (kept for a defined period).
2. Our privacy-first approach
We deliberately do not use a third-party cookie-consent platform. The consent banner is a small piece of our own code — no external script, no extra vendor cookies, nothing loaded from someone else's server. Because of that:
- On your first visit, only strictly necessary technologies are active. Every analytics and advertising cookie is blocked by default until you accept.
- We run Google Consent Mode v2: Google's tags load in a consent-aware state and store nothing until you grant permission. Decline — the default — and they set no cookies and no identifiers.
- You can change your mind at any time (see section 6).
3. Strictly necessary — always on, no consent needed
These make the site work and keep it secure. They cannot be switched off, because without them the pages, order form and payment could not function. They are not used for analytics, profiling or advertising.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
fortesonic-consent |
fortesonic.com (localStorage) | Remembers your cookie choice so we don't ask again on every page. | First-party | Until you clear it |
fortesonic-theme |
fortesonic.com (localStorage) | Remembers your light / dark appearance preference. | First-party | Until you clear it |
PHPSESSID |
fortesonic.com | Server session used only during the order flow (keeps your form step and anti-fraud state). | First-party | Session |
_GRECAPTCHA |
Google (reCAPTCHA) | Bot and abuse protection on the order form only. Loads when you reach the order page. | Third-party | ~6 months |
| PayPal payment cookies | PayPal | Set only when you open PayPal checkout, to process the payment securely and prevent fraud. | Third-party | Session / persistent |
4. Analytics — only if you accept
These help us understand, in aggregate, how the site is used — which pages are visited, roughly where visitors come from, what device they use — so we can improve it. They set nothing unless you accept.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
_ga |
Google Analytics 4 (via Google Tag Manager) | Distinguishes one visitor from another to count unique visits. | First-party | 2 years |
_ga_<id> |
Google Analytics 4 (via Google Tag Manager) | Keeps session state for the GA4 property. | First-party | 2 years |
5. Advertising — only if you accept
If you accept, we use Google Ads (through Google Tag Manager) to measure whether a visit that came from one of our ads led to a purchase. This may set advertising cookies and share conversion data with Google. If you decline, no advertising cookies are set. We never sell your data.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
_gcl_au |
Google Ads (Conversion Linker) | Attributes a purchase to the ad click that brought you here. | First-party | 90 days |
| Google Ads / conversion cookies | Google (google.com / doubleclick.net) | Conversion measurement and, where applicable, remarketing, under Google's own policy. | Third-party | Up to ~13 months |
6. How you give and change consent
When you first arrive, a banner asks whether to allow analytics and advertising cookies. Accept and Decline are offered with equal prominence; declining is the default state until you choose. Your choice is stored locally and applied through Google Consent Mode v2.
- Change it any time using the Cookie settings link in the footer of every page, or the button below.
- Browser controls. You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may break the order form or checkout.
7. Legal bases (EU / EEA / UK)
Under the ePrivacy Directive and the GDPR (and, for the UK, PECR and the UK GDPR), storing or reading non-essential cookies requires your consent — freely given, specific, informed and unambiguous, and as easy to withdraw as to give. We rely on:
- Consent for all analytics and advertising cookies (sections 4–5).
- Legitimate interest / necessity for strictly necessary technologies (section 3), which are exempt from the consent requirement.
8. Canada — PIPEDA and Quebec's Law 25
For visitors in Canada, our approach already meets the stricter standard:
- PIPEDA (federal). We obtain meaningful consent before using non-essential cookies and tell you, in this policy, what is collected and why.
- Quebec Law 25. Technologies that could identify, locate or profile you must be deactivated by default and require opt-in consent. Our analytics and advertising cookies are exactly that — off until you accept — so no profiling, identifying or locating cookie runs without your explicit consent.
9. Third-party providers
When you consent, or when a strictly necessary service runs, data is processed by these providers under their own policies:
- Google (Analytics, Ads, Tag Manager, reCAPTCHA) — Privacy Policy, how Google uses cookies.
- PayPal (payment) — Privacy Statement.
10. Changes to this policy
If we add, remove or change a cookie, we update this page and the “Last updated” date above. Material changes that require fresh consent will re-prompt you through the banner.
11. Contact
Questions about cookies or your data: maestro@fortesonic.com. See also our Privacy Policy and Terms & License.