1. What cookies and similar technologies are
Cookies are small text files that your browser stores on your device at a website's request. Browser local storage, tracking pixels and advertising-platform scripts work in a similar way; below we call all of them "cookies". Cookies set on our own domain are first-party; cookies set from another company's domain are third-party. Either way, the data from Google, Meta and TikTok cookies reaches those companies, and what they do with it afterwards is governed by their own policies.
2. The four categories
- Necessary. The Site does not work without them: session and sign-in, the record of your cookie choice, bot protection for forms, load balancing, and the Film player on the Delivery Page. No consent is needed.
- Functional. Remember the language you chose for the Site.
- Analytics. Google Analytics 4 shows us which pages are visited, from which devices and where people stop — so we can make the Site clearer.
- Marketing. Meta Pixel, TikTok Pixel and Google Ads measure whether our advertising worked and let us show it to people who have already shown interest in the Studio.
Functional, analytics and marketing cookies run only with your consent.
3. The cookies we use
| Name | Provider | Purpose | Duration | Category | Party |
|---|---|---|---|---|---|
__Secure-better-auth.session_token |
the Studio | session and sign-in on the Site | session / up to 30 days | necessary | first-party |
cookie_consent |
the Site's own consent banner | stores your choice in the cookie banner | 12 months | necessary | first-party |
cf_clearance (Cloudflare Turnstile) |
the Studio | bot protection for forms, load balancing | session | necessary | first-party |
cf_clearance, __cf_bm |
Cloudflare, Inc. | protects the Site from bots and abuse (Turnstile), delivers video and images via CDN | 30 minutes / up to 12 months | necessary | third-party |
lang |
the Studio | remembers the Site language (UA/EN) | 12 months | functional | first-party |
_ga |
Google (Google Analytics 4) | distinguishes visitors | 2 years | analytics | first-party, set by Google's script |
_ga_* |
Google (Google Analytics 4) | keeps the state of a browsing session | 2 years | analytics | first-party, set by Google's script |
_gid |
Google (Google Analytics 4) | distinguishes visitors within a day | 24 hours | analytics | first-party, set by Google's script |
_gcl_au |
Google (Google Ads) | links an ad click to a later action on the Site | 90 days | marketing | first-party, set by Google's script |
_fbp |
Meta Platforms (Meta Pixel) | distinguishes browsers for measuring Meta advertising | 90 days | marketing | first-party, set by Meta's script |
_fbc |
Meta Platforms (Meta Pixel) | stores the click identifier from a Meta ad | 90 days | marketing | first-party, set by Meta's script |
_ttp |
TikTok (TikTok Pixel) | identifies the browser for measuring TikTok advertising | 13 months | marketing | first-party, set by TikTok's script |
_tt_enable_cookie |
TikTok (TikTok Pixel) | enables the TikTok Pixel | 13 months | marketing | first-party, set by TikTok's script |
Durations are the providers' typical values as of this version; the current list is always available in the "Cookie settings" window.
4. How consent works
- The banner. On your first visit you see three equally prominent buttons: "Accept all", "Reject all", "Settings". No pre-ticked boxes.
- Nothing before consent. Until you choose, only necessary cookies run; the Google, Meta and TikTok scripts do not load at all.
- Google Consent Mode v2. Your choice is passed to Google as the signals
analytics_storage,ad_storage,ad_user_dataandad_personalization. Without your consent they stay "denied". - 12 months. We store your choice — consent or refusal — for 12 months and do not ask again sooner, unless we add a new cookie category or a new provider.
- Changing your choice. At any time, via the "Cookie settings" link in the footer of every page. Withdrawing consent is as easy as giving it.
- Your browser. You can delete or block cookies in your browser settings. Without necessary cookies, the Site or the Delivery Page may not work properly.
- Global Privacy Control. If your browser sends a GPC signal, we treat it as "Reject all" for analytics and marketing cookies.
5. Where the data goes
Google, Meta and TikTok process the data from analytics and marketing cookies in the United States and other countries. The transfer rests on your consent and, contractually, on the European Commission's Standard Contractual Clauses (SCC) or, where the provider is certified, on the EU‑US Data Privacy Framework. Details are in our Privacy Policy.
6. Regional notes
- EU / EEA. Article 5(3) of the ePrivacy Directive (2002/58/EC) and the GDPR apply; consent must be freely given, specific, informed and unambiguous. Our EU representative: not appointed; for data-protection matters contact hello@vidlunnya.com. You may complain to the supervisory authority of your country.
- United Kingdom. PECR applies, as amended by the Data (Use and Access) Act 2025: the law now allows statistical cookies without prior consent, with a right to opt out. We deliberately keep one standard for everyone — analytics cookies only with your consent. The regulator is the ICO. Our UK representative: not appointed; contact hello@vidlunnya.com.
- Ukraine. The Law of Ukraine "On Personal Data Protection" (2297‑VI) applies; consent is given by ticking the banner (Article 2). Complaints go to the Ukrainian Parliament Commissioner for Human Rights.
- United States. We honour the Global Privacy Control signal as a refusal of analytics and marketing cookies.
- Canada, Australia and other countries. The same banner and the same rules.
7. Contact
Questions about cookies: hello@vidlunnya.com. We acknowledge receipt within 2 business days and reply within 5 business days. Responsible person: Kotliar Yana Mykhailivna, 12 Poshtova St., apt. 8, Berezan, Brovary district, Kyiv region, 07540, Ukraine.
8. Changes
We announce material changes to this Policy on the Site, and to Customers also by e-mail, 14 days before they take effect. If we add a new cookie category or a new provider, the banner asks for your consent again.