Cookie Policy

Last updated: 2025-01-15

Controller: Deviant Group S.R.L. (Romania)

Contact: privacy@thedeviantgroup.com

This page explains how we use cookies and similar technologies on this site. For broader privacy details, see Privacy Policy.

1) What these technologies are

"Cookies" are small files placed on your device. We also use similar storage (e.g., localStorage, sessionStorage, IndexedDB) and tags/pixels/SDKs that read or write identifiers. They help run the site, secure it, measure performance, and remember choices.

2) What we use them for (categories)

Strictly necessary — Required for core functionality, security, and traffic protection. These run without consent.
Performance / analytics — Measure usage to improve the site (page performance, features used). Consent required in EEA/UK.
Functional — Remember preferences (e.g., cookie choices). Consent may be required depending on implementation.
Advertising — Not enabled. If enabled in the future, it will be off by default and require explicit consent with granular controls.

Legal bases: strictly necessary = legitimate interests; all other categories = consent (where required).

3) Your choices

Consent banner: On first visit (and periodically), you can accept, reject, or customize categories.
Change your mind anytime: Use Cookie Settings in the footer to withdraw or update consent. Your last choice is stored for 12 months (then we'll ask again).
Browser controls: You can block or delete cookies in your browser. Blocking strictly necessary cookies may break parts of the site.
Signals: Where supported, we honor system-level preferences (e.g., reduced tracking/Do Not Track) by defaulting non-essential tools off unless you opt in via the banner.

4) What we deploy today (typical set)

This is the current set. Vendors or names may change as we evolve the stack; the banner and Cookie Settings always reflect the live state.

Name / Key	Provider	Purpose	Category	Duration	Notes
`_cf_bm`	Cloudflare	Bot management / traffic integrity	Strictly necessary	Session (~30 min)	Helps filter automated traffic; doesn't identify a human directly.
`sessionId` (or similar)	Deviant / hosting	Session continuity, CSRF/anti-abuse	Functional / Strictly necessary	Session	First-party key; scope limited to this site.
`_ga` (and related)	Google Analytics (if enabled)	Usage metrics, page performance	Analytics	Up to 24 months	Loads only with consent in EEA/UK. IP anonymization and consent mode configured when active.

We may also store a small consent record to remember your choices.

Not used: advertising cookies, cross-site tracking pixels, social login trackers.

5) Vendors & transfers

Cloudflare (security/CDN). May process data outside the EEA with contractual safeguards.
Google Analytics (only if you opt in). When active, it may involve international transfers under standard safeguards; we run consent-mode and IP anonymization.
Additional providers (e.g., error monitoring, uptime) may appear in the banner and Cookie Settings when active.

6) Retention

Consent choice: 12 months, then we ask again.
Analytics cookies: per vendor default (up to 24 months) and only if you consent.
Strictly necessary: minimal lifetime needed to operate or secure the session.

7) Changes

We will update this notice when vendors or categories change and refresh the "Last updated" date. Material changes may trigger the banner again.

8) How to contact us

Questions about cookies or consent? privacy@thedeviantgroup.com

Contact: privacy@thedeviantgroup.com