Cookie Policy
Cookie Policy
Last updated: 18 July 2026
This policy adapts our cookie disclosures to the current sincronflow.tech implementation. We use a self-hosted consent management platform (CMP) built for this Astro website. Functional, analytics, and marketing trackers are blocked until you consent through the cookie banner. You can change your choice at any time with Cookie Settings.
1. Introduction
This Cookie Policy explains how SincronFlow IT SRL ("we", "us", "our", or "Company") uses cookies and similar tracking technologies on our website at sincronflow.tech (the "Website"). We are committed to transparency and to your right to control cookies under the ePrivacy Directive (2002/58/EC) and the General Data Protection Regulation (GDPR).
2. What are cookies?
Cookies are small text files stored on your device by your browser. They can remember preferences, support security, measure visits, or support advertising. Cookies can be:
- Session cookies: deleted when you close your browser.
- Persistent cookies: kept until they expire or you delete them.
- First-party cookies: set directly by sincronflow.tech.
- Third-party cookies: set by external services such as Google, Plausible, or Cloudflare after the relevant consent is granted.
3. Why do we use cookies?
- Essential functions: to keep the website running and remember your cookie-consent choice.
- Analytics: to understand how visitors use the Website and improve performance.
- Marketing: to measure advertising effectiveness and Google Ads conversions.
4. Cookies we use
The following tables list cookies and similar tracking technologies used on the Website. Cookies are grouped by category, with necessary cookies first.
Necessary (essential) cookies
These cookies are strictly necessary for the Website to function or to remember your privacy choice and cannot be disabled through the banner.
| Cookie name | Provider | Purpose | Category | Duration | Consent required |
|---|---|---|---|---|---|
sf_cookie_consent | sincronflow.tech | Stores your analytics and marketing consent choices so the banner does not ask again on every page. | Necessary | 12 months | No |
Functional cookies
Functional cookies enhance your experience, such as remembering optional preferences. The CMP includes a separate functional toggle in its second layer, but we do not currently set separate functional cookies.
| Cookie name | Provider | Purpose | Category | Duration | Consent required |
|---|---|---|---|---|---|
| None currently in use | — | — | Functional | — | Yes, if added later |
Analytics cookies and scripts
Analytics technologies help us measure Website traffic and user behavior to improve our services. They are blocked until analytics consent is granted.
| Cookie or service | Provider | Purpose | Category | Duration | Consent required |
|---|---|---|---|---|---|
| Plausible Analytics script | Plausible Analytics (third-party) | Measures page views, visitor sessions, and traffic sources. Plausible is intended to be privacy-focused and cookieless, but we still load it only after analytics consent. | Analytics | No browser cookie intentionally set by this site; provider-side retention depends on Plausible settings. | Yes |
| Cloudflare Insights beacon | Cloudflare Inc. (third-party) | Web analytics and performance monitoring using request metadata such as URL, user agent, and IP-derived information. | Analytics | No browser cookie intentionally set by this site; provider-side retention follows Cloudflare terms. | Yes |
Note: Google Tag Manager is not loaded as a separate container on this static site. Google tag functionality for Google Ads is not initialized before consent. After marketing consent, the consent manager sets window.gtag_consent_status.ad_storage to granted, initializes Google Consent Mode v2, and only then loads the Google tag.
Marketing cookies
Marketing cookies measure advertising effectiveness and may support ad attribution or retargeting across other websites. They are blocked until marketing consent is granted.
| Cookie name | Provider | Purpose | Category | Duration | Consent required |
|---|---|---|---|---|---|
_gcl_au | Google Ads (third-party) | Conversion tracking and audience segmentation for Google Ads campaigns. It allows Google to measure ad attribution and may support retargeting. | Marketing | Approximately 13 months from the date it is set | Yes |
Note: Additional Google marketing cookies may be set by Google after marketing consent, depending on Google Ads behavior and browser settings.
Unknown or under-review services
The following script has been detected or configured as optional on the Website. We treat it as analytics and block it until consent while its exact cookie behavior is reviewed.
| Service | Source | Purpose | Category | Status |
|---|---|---|---|---|
| Cloudflare Insights | static.cloudflareinsights.com | Web analytics and performance monitoring. | Analytics | Under review; loaded only after analytics consent and only if configured. |
5. Legal basis for cookie use
- Necessary cookies: no consent required; justified by technical necessity and the ePrivacy Directive Article 5(3) exemption for services requested by the user.
- Functional, analytics, and marketing cookies: GDPR Article 6(1)(a), prior informed consent. Under ePrivacy Directive Article 5(3), we obtain consent before these cookies or scripts are set or loaded.
We do not rely on legitimate interest for non-essential cookies. Consent is required.
6. Third-party data processors
The following third-party services may process personal data on our behalf. We use their published privacy and data-processing terms, including Standard Contractual Clauses where applicable for transfers outside the EEA.
| Service | Purpose | Legal status | Data Processing Agreement / privacy terms |
|---|---|---|---|
| Google Ads / Google tag (Google Ireland Limited / Google LLC, loaded only after marketing consent) | Conversion tracking and advertising measurement only after ad_storage is granted | Third-party processor / independent controller depending on Google processing context | Google Ads Data Processing Terms · Google Privacy Policy |
| Google Tag Manager | Not currently loaded as a separate GTM container on this site | Not active as a separate container | Google business data terms |
| Plausible Analytics | Privacy-focused analytics after analytics consent | Third-party processor | Plausible DPA · Plausible Privacy Policy |
| Cloudflare Insights | Performance monitoring after analytics consent | Third-party processor | Cloudflare DPA · Cloudflare Privacy Policy |
7. Consent and cookie banner
When you first visit the Website, our CMP appears before any non-essential scripts load. Layer 1 presents equally prominent Accept all and Reject all actions plus Manage preferences. Layer 2 provides separate functional, analytics, and marketing toggles with no pre-ticked boxes.
- You see clear choices to accept, reject, or manage non-essential cookies.
- The Reject button is equally prominent and as easy to click as the Accept button.
- No functional, analytics, or marketing tracker scripts are loaded before you interact with the banner.
- If you click Accept all, analytics and marketing trackers may load.
- If you click Reject all, analytics and marketing trackers remain blocked.
The banner uses no pre-ticked boxes, no dark patterns, and no cookie wall. You can use the Website without accepting non-essential cookies.
8. How to manage your cookies
Change your consent
At any time, click Cookie Settings in the footer. This reopens the consent banner so you can update analytics and marketing choices.
Delete cookies manually
- Chrome: Settings → Privacy and security → Clear browsing data → Cookies and other site data
- Firefox: Preferences → Privacy & Security → Cookies and Site Data → Manage Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Privacy, search, and services → Clear browsing data → Cookies and other site data
Opt out of specific services
- Google Ads: Google Ads preferences
- Google Analytics browser add-on: Google opt-out add-on
- Plausible Analytics: Plausible is privacy-focused and does not offer a per-user opt-out on this site; disable analytics through our consent banner instead.
9. Withdraw consent
Under GDPR Article 7, withdrawing consent is as easy as giving it:
- Click Cookie Settings in the footer.
- Deselect any categories you no longer want to allow.
- Click Save preferences. Your choice is updated immediately.
Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.
10. Data retention
- Consent record: kept in
sf_cookie_consentfor 12 months. - Plausible analytics data: retained according to Plausible workspace settings and published retention terms.
- Google Ads conversion data and
_gcl_au: approximately 13 months by default. - Cloudflare Insights data: retained according to Cloudflare’s published terms and account settings.
11. Your rights under GDPR
You have the right to request access, rectification, erasure, restriction, portability, objection to processing, withdrawal of consent, and information about automated decision-making. We do not use cookies for automated decisions that produce legal or similarly significant effects.
To exercise your rights, email contact@sincronflow.tech with the subject line “GDPR Data Subject Request” and specify which right you are exercising. We aim to respond within 30 days.
12. Complaint to a supervisory authority
If you believe we have violated your rights under GDPR or the ePrivacy Directive, you may lodge a complaint with your national data protection authority. Useful contacts include:
- Romania: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP): dataprotection.ro
- EU/EEA list: European Data Protection Board members
13. Data controller and contact information
Company name: SINCRONFLOW IT SRL
Registration: CUI 52357694 · J12/2710/2025
Address: Str. Lunii 16, Cod Poștal 400367, Cluj-Napoca, Cluj, Romania
Email: contact@sincronflow.tech
Phone: Not published; please use email for privacy requests.
Data Protection Officer (DPO)
Status: A separate DPO is not published for SINCRONFLOW IT SRL. Privacy and data-subject requests are handled through the data controller contact above unless a DPO is designated later.
14. Changes to this Cookie Policy
We may update this policy to reflect changes in cookie practices, legal requirements, or third-party services. We will update the “Last updated” date and, if changes are significant, may show a new banner notice.
15. Questions?
If you have questions about this policy, cookies, or your privacy rights, contact us at contact@sincronflow.tech.