Cookie Policy

Introduction

This page describes the tracking technologies used by the BORN ONLINE S.R.L. website (hereinafter, the “Application” or the “Site”). “Tracking Tools” refers to cookies, unique identifiers, web beacons, embedded scripts, tags, and other technologies that allow collecting and saving information on the user’s device when interacting with the Application.

Cookies may be first-party (installed directly by Shoplykraft) or third-party (set by external parties). Certain purposes of use require the user’s consent; such consent may be revoked at any time through the preference management banner or browser settings.

Purposes of Tracking Tools

Tracking Tools are used for the following purposes:

• Activities strictly necessary for site operation: technical cookies that enable site display, saving of user preferences, and spam protection. Without these cookies, the Site may not function correctly.
• Experience: cookies and scripts that improve browsing quality and allow integration of external content, such as custom fonts or videos.
• Measurement: statistical cookies that allow analysis of traffic and user behaviour to improve the service.
• Marketing and advertising: cookies used to display personalised ads and remarketing activities based on user interest. Their use requires user consent.

Tracking Tools Used

Below are the main tracking services used by the Application, with a description of their purposes and links to their respective privacy policies.

Spam and Bot Protection

Google reCAPTCHA (Google LLC)

A spam protection service that analyses user movements (clicks, keypress events, mouse movements) to distinguish real people from bots. It uses cookies and other identifiers. Data processed: clicks, usage data, keypress events, touch events, and Tracking Tools. For more information, please refer to Google’s privacy policy (https://policies.google.com/privacy). Cookies: _GRECAPTCHA (session), rc::a (persistent), rc::b and rc::c (session).

Tag Management

Google Tag Manager (Google Ireland Limited)

Enables centralised management of tags and scripts on the site. The service may transmit user data to Google servers. Data processed: usage data and cookies. For information, please refer to Google’s privacy policy (https://policies.google.com/privacy).

Experience – Display of Content from External Platforms

Google Fonts (Google Ireland Limited)

Allows integration of custom font styles on the site. Data processed: usage data and cookies. Place of processing: Ireland. Information at: https://policies.google.com/privacy.

Hosting and Infrastructure

Hostinger (Hostinger International Ltd.)

A hosting and infrastructure service that hosts the Application and delivers the Site to users. Hostinger may collect technical data and usage logs, including IP addresses and device information, to ensure service security and performance. These cookies and tracking tools are technical in nature and necessary for site operation. For further details, please refer to Hostinger’s privacy policy available on their official website.

CMS Platform

WordPress (self-hosted)

The Application uses WordPress as its content management platform. WordPress installs technical session and preference cookies for user authentication, cart management, and dashboard customisation (for example “wordpress_logged_in_*”, “wordpress_sec_*”, “wp-settings-*”, “wp-settings-time-*”, and “wordpress_test_cookie”). These cookies are necessary for the proper functioning of the Site and do not require user consent.

Measurement – Heat Mapping and Session Recording

Microsoft Clarity (Microsoft Corporation)

A heat mapping and session recording service that detects the areas of the site with which users interact most frequently. Microsoft may use the data for advertising purposes as indicated in its privacy policy. Data processed: cookies and usage data. Cookie durations: ANONCHK (10 minutes), CLID (1 year), MR (7 days), MUID (1 year), SM (session), _clck (1 year), _clsk (1 day).

Statistics

Google Analytics (Universal Analytics) – Google LLC

A web analytics service that tracks and analyses site usage. Collected data is shared with other Google services and may be used to personalise ads. Data processed: cookies and usage data. Main cookies: AMP_TOKEN (1 hour), _ga (2 years), _gac* (3 months), _gat (1 minute), _gid (1 day). Opt‑out: https://tools.google.com/dlpage/gaoptout.

Google Analytics 4 (Google Ireland Limited)

An evolved version of Google Analytics that anonymises IP addresses before recording. Data processed: usage data, number of users, session statistics, and cookies. Cookies: _ga and _ga_* (2 years). Opt‑out: https://tools.google.com/dlpage/gaoptout.

Google Conversion Linker (Google Ireland Limited)

The Conversion Linker is a tag that sets first-party cookies (_gcl) to record when a user clicks on a Google ad and to correctly attribute conversions when the user visits multiple domains or subdomains. Data processed: cookies and usage data. Main cookies: _gcl_aw, _gcl_dc, _gcl_au with typical durations of 90 days. Further information is available in Google’s privacy policy (https://policies.google.com/privacy) and in Google Ads documentation.

Meta Ads Conversion Tracking (Meta Pixel) – Meta Platforms Inc.

Connects data from the Meta advertising network with actions performed on the Site. Data processed: cookies and usage data. Cookies: _fbp and fr (3 months). Opt‑out: https://www.facebook.com/ads/preferences/.

Google Ads Conversion Tracking (Google Ireland Limited)

Connects data from the Google Ads network with actions performed on the Site. Data processed: usage data and cookies. Main cookies: IDE (2 years) and test_cookie (15 minutes).

Marketing – Affiliation and Advertising

Amazon Affiliation (Amazon.com Inc.)

An affiliation service that allows display of links and banners to Amazon products. Data processed: cookies and usage data. Information at: https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ.

Google AdSense (Google LLC)

An advertising service that uses the DoubleClick cookie to display personalised ads. Users can disable DoubleClick from Google ad settings and consult Google’s partner policies. Main cookies: AID, ANID, Conversion, DSID, FCNEC, FLC, FPAU, FPGCLAW, FPGCLDC, FPGCLGB, IDE, NID, RUL, TAID, __gads, __gsas, _gac_, _gac_gb_, _gcl_* etc., with variable durations up to 2 years.

Remarketing and Behavioural Targeting

Facebook Remarketing (Meta Platforms Ireland Limited)

Allows display of ads based on the user’s previous behaviour. Data processed: usage data and cookies. Cookies: _fbp (3 months). Opt‑out: https://www.aboutads.info/choices.

Meta Custom Audiences (Meta Platforms Ireland Limited)

Allows creation of custom audiences using email addresses and browsing data. Data processed: email and cookies. Opt‑out: https://www.aboutads.info/choices.

Google Ads Remarketing (Google Ireland Limited)

Connects user activity with the Google Ads advertising network and the DoubleClick cookie. Data processed: usage data and cookies. Opt‑out: Google ad settings. Cookie duration up to 2 years.

Remarketing with Google Analytics (Google Ireland Limited)

Connects Google Analytics tracking data with Google Ads. Data processed: usage data and cookies. Main cookies: test_cookie (15 minutes), IDE (2 years), and _gcl_* (3 months).

Additional Processing

Personal data collected may also be used for the provision of services to the user or the sale of products, including contact management via forms or telephone. In such cases, the purposes and legal bases described in our privacy policy apply. Since Shoplykraft exclusively uses cash on delivery payment, no credit card or bank account data is collected.

Managing Preferences and Withdrawing Consent

Users can manage their Tracking Tool preferences in several ways:

• Through the consent management banner: on first visit, the user can choose to accept or refuse non-essential cookies; this choice can be changed at any time using the dedicated link or widget.
• Through browser or device settings, which allow blocking cookie installation and deleting them.
• Through the opt‑out links provided by third-party services, indicated in the sections above.
• Using preference sites such as YourOnlineChoices (EU), Network Advertising Initiative, and Digital Advertising Alliance, which allow disabling interest-based advertising.

Data Controller

BORN ONLINE S.R.L.
Bradetu 71, bl 0252, 627232 Nistoresti, Vrancea, Romania, Bucharest 030167 – Romania
Email address: email@shoplykraft.com

Users may contact the data controller for further information on the use of Tracking Tools or to exercise their rights regarding data protection.

Key Definitions

• Personal data: any information that identifies or makes an individual identifiable.
• Usage data: information collected automatically through the Site, such as IP addresses, request times, pages visited, and other technical information.
• User: the natural person who uses the Site.
• Data controller: the natural or legal person who determines the purposes and means of personal data processing.
• Cookie: small text files stored in the user’s browser.
• Tracking Tool: any technology that enables the collection of information on the user’s device.

Changes and Updates

This cookie policy may be subject to changes and updates, for example in the event of regulatory changes or changes to the services used. Updated versions will be published on this page.