Passvanta

Cookie Policy and Consent Copy

Version 5 September 2026

Information about necessary and optional technologies and the binding copy for the Passvanta consent banner.

First banner layer

Title: Your privacy at Passvanta

Text: We use necessary cookies so the website, sign-in, security and billing work. With your consent, we also use Google Analytics for audience measurement and Google Ads and Meta Pixel for conversion measurement and remarketing. Optional services load only after you consent. You can change your choice at any time through Cookie Settings.

Buttons with equal visual weight: Accept all | Necessary only | Settings

Links: Privacy Notice | Cookie Policy | Legal Notice

Preference centre

Necessary always active These storage and access operations are required for sign-in, security, language choice, consent evidence and payment. They cannot be disabled through the banner.

Analytics off by default Google Analytics helps us understand website use. It may process online identifiers, device information and usage data. It loads only after consent.

Marketing off by default Google Ads and Meta Pixel help measure conversions and build remarketing audiences. They can associate data with Google or Meta accounts and transfer data to third countries. They load only after consent.

Buttons: Save selection | Accept all | Necessary only

Withdrawal: A permanent Cookie Settings link opens the same dialogue. Withdrawal deletes Passvanta-set optional cookies where possible and changes all optional consent signals to denied. It does not retroactively erase data already held by a provider.

Cookie table

This table is the required target configuration. Confirm names, providers and durations through a cookie and network scan before each release. No optional service absent from the table may load.

Name Provider Category Purpose Duration Legal basis

Authenticated session and tenant Session; up to 30 days __Host-pv_session Passvanta Necessary s.25(2)(2) TDDDG; Art. 6(1)(b) or (f) GDPR assignment with persistent sign-in

Protects forms and account actions from pv_csrf Passvanta Necessary Session s.25(2)(2) TDDDG; Art. 6(1)(f) GDPR forged requests

Stores consent version and choice pv_consent Passvanta Necessary 6 months s.25(2)(2) TDDDG; Art. 6(1)(c),(f) GDPR without a marketing ID

pv_locale Passvanta Necessary Stores the language expressly selected 12 months s.25(2)(2) TDDDG; Art. 6(1)(f) GDPR

pv_return_to Passvanta Necessary Returns the user safely after sign-in Session s.25(2)(2) TDDDG; Art. 6(1)(b) GDPR

__cf_bm Cloudflare Necessary Bot and abuse detection about 30 minutes s.25(2)(2) TDDDG; Art. 6(1)(f) GDPR

up to 12 months cf_clearance Cloudflare Necessary Records a passed security challenge s.25(2)(2) TDDDG; Art. 6(1)(f) GDPR depending on rule

Name Provider Category Purpose Duration Legal basis

Necessary for __stripe_mid Stripe Fraud prevention and secure payment up to 12 months s.25(2)(2) TDDDG; Art. 6(1)(b),(f) GDPR payment

Necessary for __stripe_sid Stripe Fraud prevention during payment session about 30 minutes s.25(2)(2) TDDDG; Art. 6(1)(b),(f) GDPR payment

_ga Google Analytics Analytics Distinguishes users up to 2 years Consent: s.25(1) TDDDG; Art. 6(1)(a) GDPR

_ga_* Google Analytics Analytics Stores session state for the GA4 property up to 2 years Consent: s.25(1) TDDDG; Art. 6(1)(a) GDPR

Conversion measurement and ad _gcl_au Google Ads Marketing up to 90 days Consent: s.25(1) TDDDG; Art. 6(1)(a) GDPR attribution

_gac_* and _gcl_* Google Ads Marketing Campaign and conversion attribution up to 90 days Consent: s.25(1) TDDDG; Art. 6(1)(a) GDPR

Google Ad measurement and, where consented, up to 13 months in the IDE or id Marketing Consent: s.25(1) TDDDG; Art. 6(1)(a) GDPR DoubleClick personalisation EEA

Browser identifier for measurement and _fbp Meta Pixel Marketing up to 90 days Consent: s.25(1) TDDDG; Art. 6(1)(a) GDPR attribution

Stores a Facebook click identifier where _fbc Meta Pixel Marketing up to 90 days Consent: s.25(1) TDDDG; Art. 6(1)(a) GDPR present

Necessary always active

These storage and access operations are required for sign-in, security, language choice, consent evidence and payment. They cannot be disabled through the banner.

Google Analytics helps us understand website use. It may process online identifiers, device information and usage data. It loads only after consent.

Google Ads and Meta Pixel help measure conversions and build remarketing audiences. They can associate data with Google or Meta accounts and transfer data to third countries. They load only after consent.