Cookie policy

This English version is a translation provided for convenience. In case of any discrepancy, the Romanian version prevails. The original: Politica de cookie-uri.

In short: without your consent, the website sets only the cookies strictly necessary for it to work. Statistics cookies (Google Analytics) and advertising cookies (Google Ads, Meta, TikTok, LinkedIn, OpenAI) are set only if you accept them. Google tags load on every page, but without consent they send only cookieless signals; the Meta, TikTok, LinkedIn, and OpenAI pixels do not load at all without consent (section 6). Change your choice now or at any time, from “Cookie settings” at the bottom of any page.

1. What cookies are

A cookie is a small file that a website leaves in your browser so it can recognize you on the next page or on your next visit. The same rules apply to other forms of browser storage (localStorage, sessionStorage) and to pixels—below we call them all “cookies.” The controller is BIZEPIC SRL (EpicAds), Piața 1 Decembrie nr. 9, Palatul Ullmann, Oradea, Romania, contact@epicads.ro. Legal basis: Art. 4(5) of Romanian Law 506/2004 and Art. 6(1)(a) GDPR for the cookies you accept; the necessary cookies do not require consent.

2. How you choose

• On your first visit, you see a bar at the bottom of the page, with two equal buttons: Accept and Reject. The bar does not cover the page: you can read and use the website without choosing. As long as you do not choose, it is as if you had refused.
• Under Settings, you choose by category. Statistics and marketing stay unchecked until you check them.
• Your choice is kept for 6 months, after which we ask again. We also ask again when we change what we use.
• You can change it at any time from “Cookie settings” at the bottom of any page. If you withdraw your consent, we delete the statistics and advertising cookies set on our domain; you can delete those set directly by other domains (facebook.com, linkedin.com, etc.) from your browser settings.

Your choice is kept as proof, with a random identifier and a truncated IP address, for 3 years—details in the Privacy policy.

3. Necessary—always on

Without them, the forms cannot be submitted and your choice cannot be remembered. We do not use them for statistics or advertising.

• ea_consent—Remembers what you chose in the banner. Set by: epicads.ro. Duration: 6 months.
• epicads_session—The session: links the form submission to the thank-you page. Set by: epicads.ro. Duration: 2 hours.
• XSRF-TOKEN—Protects the forms against forged submissions from other websites. Set by: epicads.ro. Duration: 2 hours.
• eajs_gclid, eajs_utm_* and the other eajs_* (in sessionStorage, not in a cookie)—If you came from an ad, they keep the source (the click identifier and the campaign parameters) until you submit the form, so your request reaches us with it. They are not sent anywhere on their own and disappear when you close the tab. Set by: epicads.ro. Duration: until you close the tab.

4. Statistics—only with your consent

The cookies below are set only after you accept statistics. Without consent, Google Analytics sends only cookieless signals (section 6).

• _ga, _ga_KFFT4ZDGXL—Count visits and pages read, without learning who you are. Set by: Google Analytics 4 (Google Ireland Ltd.). Duration: 2 years.
• ea_seen (localStorage), ea_pv (sessionStorage)—Whether you have been on the website before and which page you are reading—for our reports. Set by: epicads.ro. Duration: until you delete them / until you close the tab.

5. Marketing—only with your consent

They show us which ads bring in quote requests and let us show you our ads on other websites and in apps. They are set only after you accept marketing. Some data is transferred outside the European Economic Area, mainly to the US—see transfers.

• _gcl_au, _gcl_aw—Link the submitted request to the ad click. Set by: Google Ads (Google Ireland Ltd.). Duration: 90 days.
• IDE, GCL_AW_P (on doubleclick.net, google.com)—Remarketing and conversion measurement. Set by: Google. Duration: 13 months / 90 days.
• _fbp, _fbc—Measure conversions from Facebook and Instagram ads; remarketing audiences. Set by: Meta Pixel (Meta Platforms Ireland Ltd.). Duration: 90 days.
• _ttp, _tt_enable_cookie, ttcsid*—Measure conversions from TikTok ads; audiences. Set by: TikTok Pixel (TikTok Technology Ltd.). Duration: 13 months (ttcsid: the session).
• li_sugr, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory (on linkedin.com)—Measure conversions from LinkedIn ads; audiences. Set by: LinkedIn Insight Tag (LinkedIn Ireland). Duration: from 1 day to 1 year.
• __obref, __oppref (on epicads.ro), __cf_bm, _cfuvid (on openai.com)—Measure conversions from ads in ChatGPT: __obref is a random browser identifier, __oppref keeps the ad click identifier. Set by: the OpenAI Ads pixel (OpenAI Ireland Ltd.). Duration: __obref 365 days, __oppref 30 days (according to the OpenAI Ads documentation); __cf_bm 30 minutes; _cfuvid the session.
• eajs_gclid, eajs_utm_* (cookie), ea_gclid, ea_utm_*, ea_landing—Keep the campaign source after you close the tab, so a request sent a few days later is attributed to the ad you came from. Set by: epicads.ro. Duration: 90 days.
• ea_conv_* (localStorage)—Prevents the same request from being counted twice. Set by: epicads.ro. Duration: until you delete them.

The names and durations of cookies set by other companies are those they declared at the date of this version; they may change them without notifying us.

6. What happens if you refuse

The Meta, TikTok, LinkedIn, and OpenAI pixels do not load at all.

Google Analytics 4 (G-KFFT4ZDGXL) and Google Ads (AW-16511797551) use Google Consent Mode v2 in advanced mode. Google tags load on every page, but start with all permissions denied (analytics storage, ad storage, ad user data, and ad personalization): they do not set or read cookies and do not use browser identifiers. They send Google only cookieless signals—for example, that a page was visited or that a form was submitted, together with the state of your choice—from which Google estimates statistically the visits and conversions it cannot measure directly. Like any request on the internet, these signals contain the IP address and the browser type. To avoid using cookies, Google tags may keep the ad click identifier (gclid) in the page address while you browse the website. If you accept later, the tags switch to normal measurement, with the cookies listed above; if you refuse, they stay in cookieless mode.

The tagging server ea.epicads.ro. Google Analytics 4 data first passes through this server of ours and only then reaches Google—both the data with cookies, when you have accepted statistics, and the cookieless signals, when you have refused. The server does not set cookies. It is hosted by Stape Europe OÜ (Tallinn, Estonia), on a server in the European Union (Poland). Details in the Privacy policy.

The website works the same either way, and so does the quote form.

7. Content from others

• YouTube videos: they do not load until you click on them. After you click, they play from youtube-nocookie.com; Google receives your IP address and may set cookies under its own policy.
• The Google Maps map on the Contact page: it does not load automatically. Until you click “Open the Google map,” you see only an image of the map, hosted by us, and nothing is sent to Google. After you click, the map loads directly from Google (Google Ireland Limited / Google LLC), which receives your IP address and may set or read its own cookies (for example, NID, AEC, SOCS), under Google’s policy. The legal basis is your express action (consent, Art. 6(1)(a) GDPR and Art. 4(5) of Romanian Law 506/2004). If you do not want this, use the “Open in Google Maps” link or the address: Piața 1 Decembrie nr. 9, Palatul Ullmann, Oradea.
• Fonts: hosted by us, not by Google Fonts.
• Google Tag Manager loads on every page: it is the tool that starts the tags above, only within the limits of your choice. It does not set cookies.

8. From your browser

You can also delete or block cookies from your browser settings: Chrome, Firefox, Safari, Edge. If you block all cookies, including the necessary ones, the forms may stop working.

9. Questions

Write to us at contact@epicads.ro. Your rights and how to lodge a complaint with the ANSPDCP (the Romanian data protection authority) are described in the Privacy policy.