1. What this policy covers
This policy describes the cookies and similar technologies used on the EUDAPrep public marketing site (eudaprep.com) and explains how visitors can manage their consent. The EUDAPrep application (app.eudaprep.com) uses only strictly necessary cookies for authentication and session management; see the Privacy Policy §9 for the application side.
2. Cookies on the marketing site
The marketing site uses a four-category granular consent system. No non-essential cookies are set until the visitor consents via the banner.
Strictly necessary
No cookies in this category are set by the marketing site itself. The category exists for forward-compatibility with future authentication or security cookies.
Analytics
When analytics consent is granted, the following are loaded:
Google Analytics 4 (GA4)
| Cookie name | Purpose | Retention |
|---|---|---|
_ga | Distinguishes unique visitors. Used by Google Analytics to associate page views into sessions. | 2 years from last update |
_ga_<container-id> | Persists session state for a specific GA4 property. Container ID is the measurement ID without the G- prefix. | 2 years from last update |
These cookies are set by Google. We pass IP-anonymisation and operate Consent Mode v2 with default-denied storage, so no analytics cookies are written until the visitor grants analytics consent. Google’s privacy policy is at policies.google.com/privacy.
Cloudflare Web Analytics
Cloudflare Web Analytics is enabled at the network edge with no cookies and no JavaScript fingerprinting. Visitor metrics are derived from request metadata only; no persistent identifiers are stored on the visitor’s device. Cloudflare’s privacy policy is at cloudflare.com/privacypolicy.
Advertising and personalisation
No cookies in this category are currently set. This category is reserved for future tracking (for example, the LinkedIn Insight Tag or Meta Pixel) that may be added with advance notice via an updated cookie policy.
Functional preferences
No cookies in this category are currently set. This category is reserved for future theme or language persistence.
3. Managing your consent
The marketing site shows a consent banner on first visit with three buttons: Reject all, Customise, and Accept all.
- Reject all keeps only strictly necessary cookies. No analytics is loaded.
- Customise opens a panel where each category (analytics, advertising, functional) can be toggled independently. Strictly necessary cannot be turned off.
- Accept all grants consent to every category. All listed cookies are enabled.
Consent is stored in the visitor’s browser only (localStorage, key eudaprep-consent-v2). It is not transmitted to EUDAPrep or any third party.
To change or revoke consent, click the “Cookie preferences” link in the marketing site footer at any time. The banner re-opens with the current saved state and any change applies immediately.
4. International transfers
When Google Analytics 4 is enabled, page-view and event data is transmitted to Google’s processing infrastructure in the United States. The transfer is covered by Google’s certification under the EU-US Data Privacy Framework and by Standard Contractual Clauses included in Google’s Data Processing Terms (accepted by EUDAPrep at GA4 property creation).
Cloudflare Web Analytics processes request metadata at Cloudflare’s global edge network. No personally identifiable data is transmitted.
5. Cookie retention and deletion
Each cookie’s individual retention is listed in Section 2. To delete cookies set by the marketing site, use your browser’s cookie management settings; this will reset the consent state and the banner will appear on the next visit.
6. Updates to this policy
We will update this policy when cookies are added, removed, or change purpose. Material changes are reflected in the version number and effective date at the top of this page. If non-essential tracking is added to a category that does not currently set cookies, the consent banner will re-open with the new category surfaced.
7. Contact
For questions about this policy: privacy@eudaprep.com
The EU Article 27 representative is being arranged; see Privacy Policy §1 for the current status.