Chính sách Cookie

1. What are Cookies and Local Storage?

Cookies are small text files placed on your device (computer or mobile) when visiting websites. They store information such as session tokens, security parameters, and aggregate statistical metrics.

We also utilize browser localStorage. Unlike cookies, data stored in localStorage remains strictly in your browser and is not transmitted with every HTTP header, making it ideal for client-side settings such as UI themes and cookie consent choices.

2. Google Consent Mode v2 & Privacy-First Telemetry

Our platform strictly adheres to Privacy by Default principles:

Zero Tracking Without Consent

No analytics or preference cookies will ever be installed on your terminal device until you click "Accept" or configure them in our consent settings.

Default Opt-out: Upon initial arrival, statistical and marketing consents default to "denied". Google Analytics does not write or read any tracking cookies (_ga, _gid).
Cookieless Pings: In denied state, Google Analytics 4 receives only cookieless technical pings without identifiers, enabling aggregate behavioral modeling without tracking users.
First-Party Edge Telemetry: Our internal edge logging (live.co.pl) operates without cookies or terminal storage prior to consent, and IP addresses are masked (/24 subnet) immediately at the server gateway. No personally identifiable information (PII) is stored.

3. Technical Technology & Storage Registry

Below is a transparent registry of all cookies and storage elements used throughout our platform:

Name / Key	Type	Provider	Category	Purpose	Expiry
next-auth.session-token	Cookie	test.tft-boost.net	Strictly Necessary	Maintains authenticated customer and booster user sessions.	Up to 6 months / session
next-auth.csrf-token	Cookie	test.tft-boost.net	Strictly Necessary	Protects forms against Cross-Site Request Forgery (CSRF).	Session
cookie_consent_choice	localStorage	test.tft-boost.net	Strictly Necessary	Stores your cookie banner decision (accept/custom/reject).	Persistent
__stripe_mid / __stripe_sid	Cookie	stripe.com	Strictly Necessary	PCI-DSS certified secure payment processing and fraud prevention.	1 year / session
__paypal_.*	Cookie	paypal.com	Strictly Necessary	Enables smooth checkout via PayPal gateway.	Varies by PayPal
cf_clearance	Cookie	cloudflare.com	Strictly Necessary	Cloudflare DDoS protection, bot management, and Turnstile challenges.	Up to 1 year
theme	localStorage	test.tft-boost.net	Preferences	Remembers your preferred color scheme (dark/light).	Persistent
pref_cookies_allowed	localStorage	test.tft-boost.net	Preferences	Stores consent preference for customization cookies.	Persistent
stats_cookies_allowed	localStorage	test.tft-boost.net	Preferences	Stores consent preference for statistical cookies and full analytics.	Persistent
_ga	Cookie	analytics.google.com	Analytics	Google Analytics 4 unique visitor identifier (only after consent).	2 years
_gid	Cookie	analytics.google.com	Analytics	Google Analytics 4 24-hour session differentiator (only after consent).	24 hours

4. Third-Party Service Providers

We engage trusted global processors meeting strict European data protection standards:

Stripe Payments Europe, Ltd. – PCI-DSS Level 1 payment processor.
PayPal (Europe) S.à r.l. – licensed EU payment institution.
Google Ireland Limited – analytics with Consent Mode v2 and IP anonymization.
Cloudflare Inc. – edge network, certified under the EU-U.S. Data Privacy Framework.

5. Manage Your Cookie Preferences

You can modify your cookie choices at any time using the preferences control panel below, or by clicking the floating cookie icon at the bottom-left of any page:

6. Inquiries and Contact

For any questions regarding our cookie practices, please contact us at support@tft-boost.net or submit a ticket via our Support page.