Cookie Policy

Effective date: 16 September 2026 Last updated: 16 September 2026

This Cookie Policy explains which storage or access technologies kepio.eu uses and how you can control your Google Analytics choice.

Privacy contact: info@kepio.eu

1. What cookies are

Cookies are small files or values stored by a browser that allow a website to maintain a session, preferences or measurement identifiers.

Some cookies are necessary for a service to work. Others, such as analytics cookies, are used for measurement and are enabled according to the consent choice implemented by Kepio.

2. Strictly necessary / session cookie

Kepio uses a PHP session cookie for authentication, CSRF protection, secure session state and functionality that requires continuity between requests.

Typical name:

• PHPSESSID, or an equivalent name configured by the server.

Current application session-cookie properties:

• host-only,
• HttpOnly,
• Secure when the connection is HTTPS,
• SameSite=Lax,
• session lifetime, unless the server/browser applies different technical handling.

The session is necessary for login, security state and many application functions.

3. Language preference cookie

Cookie:

• kepio_lang

Purpose:

• stores your EL/EN language choice when you switch language inside Kepio.

Duration:

• up to 1 year under the current implementation.

Properties:

• first-party,
• SameSite=Lax,
• Secure on HTTPS,
• not HttpOnly because it is a browser preference rather than an authentication credential.

4. Analytics consent cookie

Cookie:

• kepio_analytics_consent

Purpose:

• stores whether you selected granted or denied for Google Analytics.

Duration:

• up to 1 year under the current implementation.

Properties:

• first-party,
• SameSite=Lax,
• Secure on HTTPS.

This choice controls whether Google Analytics is loaded on public pages.

5. Google Analytics cookies

If you accept analytics, Kepio may load Google Analytics 4.

The standard GA4 web implementation may use first-party cookies such as:

• _ga — used to distinguish users,
• _ga_<measurement-id> — used to persist session state.

Google documents a default expiration of up to 2 years, although browser limits or property/tag configuration may reduce this period.

Under the current basic-consent implementation, Kepio does not load the Google Analytics tag before explicit analytics consent.

6. What happens when you reject analytics

If you choose Reject:

• the Google Analytics tag is not loaded by Kepio,
• GA4 analytics cookies are not enabled by Kepio in this flow,
• the denied choice is stored so you are not asked on every page view.

Strictly necessary session/security functionality continues to operate.

Kepio maintains a separate privacy-minimised first-party server-side event stream for product/SEO measurement. That stream uses a random session visitor identifier and does not store IP address or user agent in the relevant analytics table. It is not used for cross-site advertising.

7. Advertising storage

Under the current Google consent configuration:

• ad_storage = denied,
• ad_user_data = denied,
• ad_personalization = denied,
• allow_google_signals = false.

Kepio does not enable Google advertising personalisation through the public GA4 loader.

8. Calculator and lead data

We do not send the financial values entered into the Profit Calculator to GA4.

Lead email and optional store URL are not sent as GA4 event parameters.

Consent-aware GA4 events, when permitted, are limited to non-personal interaction data such as event name, page language, CTA name or placement.

9. Third-party pages

If you follow a link to a hosted third-party service such as a payment checkout or provider authorisation page, that provider may use its own cookies under its own policy.

Those cookies are not controlled by kepio.eu while you are on the third party’s domain.

10. How to change your choice

You can reopen Cookie Settings from the footer and choose Accept or Reject for Google Analytics.

You can also delete cookies using your browser settings. If you delete kepio_analytics_consent, Kepio may ask for your choice again on a later visit.

Deleting the session cookie may sign you out.

11. Browser controls

Most browsers allow you to:

• view cookies by website,
• delete cookies,
• block third-party cookies,
• block all cookies.

If you block strictly necessary cookies, some login/security functionality may not work.

12. Changes to this Cookie Policy

The list may be updated when the technical implementation, analytics provider or features change.

Before adding a non-essential technology that requires consent, the consent mechanism and this Policy should be updated accordingly.

13. Contact

For questions about cookies or privacy: info@kepio.eu