COOKIE AND SIMILAR TECHNOLOGIES POLICY
Last updated: 16 September 2026 · V.2.0
SPOT CC S.R.L. (hereinafter “SPOT” or the “Company”) is a Romanian company registered with the Trade Register attached to the Timiș Tribunal under no. J2026036556009, having unique registration code 54824915, and owns and operates the SPOT CC platform.
Depending on the functionality used, the SPOT CC platform enables users to view services, create and manage an account, authenticate, verify the account, book and manage storage services, complete contractual and payment flows, and contact the SPOT team.
This policy explains how SPOT uses cookies and similar technologies on the Platform, which categories exist, the purposes for which they are used, when consent is required, and how users may manage or withdraw their choices.
This policy supplements SPOT’s Privacy Policy. Where a technology involves the processing of personal data, information about purposes, legal bases, and data-subject rights is also provided in the Privacy Policy.
1. What are cookies and similar technologies
Cookies are small files stored by the browser on the user’s device. They may be used for the technical operation of the website, maintaining authentication, remembering preferences or, where applicable, measuring use of the Platform.
In addition to cookies, the Platform may use similar technologies, such as measurement scripts, temporary technical identifiers, or mechanisms for collecting performance metrics. Some of these technologies do not store cookies in the browser.
2. Categories of cookies and technologies
- Strictly necessary and security – required for the Platform to function, for authentication, session protection, prevention of unauthorized requests, and provision of functionality requested by the user. They cannot be disabled through SPOT’s preference tool where doing so would prevent the service from functioning.
- Functionality and preferences – remember choices requested by the user, such as the selected language. They are not used for advertising.
- Analytics – used to understand how the Platform is used and to improve the services. Google Analytics is activated only after consent has been given for the relevant category.
- Technical performance without individual profiling – SPOT uses Vercel tools to measure aggregated traffic and real-world page performance. These tools are described separately below.
- Marketing and advertising – may be used only if SPOT actually introduces such technologies and, where required by law, only after consent. As of this version, Meta/Facebook domain verification alone does not activate Meta Pixel and does not itself constitute tracking technology.
3. Strictly necessary and functionality technologies
| Identifier / service | Category | Purpose | Duration / notes |
|---|---|---|---|
| NextAuth authentication session cookie (the technical name may receive security prefixes under HTTPS) | Strictly necessary / security | Maintains the authenticated user session and enables access to account functionality. | The normal target is up to 24 hours. If the user selects “Remember me”, the session may be retained for up to 30 days, subject to security and revocation mechanisms. |
| NextAuth technical cookies for authentication protection and redirects | Strictly necessary / security | CSRF protection, completion of the authentication flow, and return to the requested destination. | Temporary, for the period required by the technical authentication flow or according to the Platform’s security configuration. |
| spotcc_locale | Functionality / requested preference | Remembers the selected language so the Platform can display the interface in the preferred language. | Persistent cookie; remains until its configured expiry, the preference is changed, or cookies are deleted from the browser. |
| spotcc_cookie_consent | Strictly necessary for privacy-preference management | Remembers the user’s choice regarding optional cookies so the same choice does not need to be requested on every visit. | Up to 12 months, with the option to change or withdraw the choice at any time through cookie settings. |
4. Google Analytics and Google tag
SPOT uses Google Analytics 4, through Google tag, to obtain statistics about use of the Platform, such as the number of users and sessions, pages accessed, approximate location information, and browser and device data.
Google Analytics is an optional technology. The Google Analytics tag is not loaded and does not transmit data before the user gives consent for the analytics category. If the user rejects optional cookies, Google Analytics remains disabled.
After consent is given, Google Analytics may set first-party cookies, including:
| Cookie | Provider | Purpose | Default duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes users for statistical measurement. | 2 years |
| _ga_<container-id> | Google Analytics | Maintains session state for statistical measurement. | 2 years |
The effective duration may be limited by the browser or applicable technical settings. The user may later withdraw consent through the Platform’s cookie settings; withdrawal takes effect for the future.
5. Vercel Web Analytics and Vercel Speed Insights
In the production environment, SPOT uses Vercel Web Analytics and Vercel Speed Insights to measure aggregated traffic and the technical performance of the Platform.
Vercel Web Analytics is designed as a cookie-free analytics tool. Instead of a persistent identification cookie, Vercel may use a hash identifier derived from the received request, which does not allow the user to be tracked across websites and is deleted after 24 hours.
Vercel Speed Insights collects technical performance metrics and Web Vitals from user devices. The data is designed to be anonymous and is not used to reconstruct an individual browsing session across pages or to identify a person.
These tools are used to observe the quality and performance of the Platform and are not used by SPOT for behavioral advertising. They do not replace the consent mechanism applicable to Google Analytics and other optional technologies that store or read analytics identifiers.
6. Meta / Facebook – domain verification
The Platform may include a technical domain-verification element for Meta/Facebook. This element confirms control over the domain and does not, by itself, constitute Meta Pixel, set Meta cookies, or activate advertising tracking.
If SPOT later introduces Meta Pixel or other marketing or advertising technologies, this policy and the consent tool will be updated before they are activated, and those technologies will be subject to the applicable consent choices.
7. How we manage consent
On the first relevant visit to the Platform, the user is offered a tool for managing optional cookies. Depending on the available configuration, it allows:
- accepting optional analytics cookies;
- rejecting optional cookies;
- viewing and changing preferences.
Rejecting optional cookies does not prevent use of the Platform’s core functionality. Strictly necessary cookies and technical mechanisms essential to operation and security remain active.
Consent may later be withdrawn or changed through the Platform’s cookie settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
8. Browser controls
Most browsers allow cookies to be viewed, deleted, or blocked. Users may use browser settings to delete existing cookies or limit future storage. Blocking all cookies may affect authentication, retention of the language preference, or other functions that depend on strictly necessary storage.
9. Transfers and third-party providers
When services supplied by third parties are used, such as Google Analytics or Vercel infrastructure, technical data may be processed by those providers according to their applicable roles and terms. For details concerning personal-data processing, including possible international transfers, please consult SPOT’s Privacy Policy and the relevant providers’ information.
10. Updates to this policy
SPOT may update this policy when the Platform’s functionality, technologies, providers, or applicable legal requirements change. The current version will be published on the Platform and will indicate the date of the latest update.
If a change materially affects the user’s consent choices, SPOT may request renewal or reconfirmation of preferences.
11. Contact
For questions, reports, or requests concerning cookies and similar technologies used by SPOT, you can contact us at: support@spotcc.ro