Legal
Cookie Policy
This policy explains which cookies Baba Vanga uses and how you can control them. It complements our Privacy Policy.
1. What are cookies?
Cookies are small text files a website stores in your browser. They let the site remember you between pages and visits — for example, that you are signed in.
2. How we categorise cookies
- Strictly necessary — required for the site to work (e.g. keeping you signed in). These can't be switched off and don't require consent.
- Preference — remember your choices, such as your language.
- Analytics — help us understand which pages are used and for how long. Optional, off by default, and set only after you allow them.
- Advertising — let us measure our campaigns and show relevant ads on Google, Microsoft (Bing), Facebook, Instagram, TikTok, X, Pinterest and LinkedIn. A separate choice from analytics, also off by default.
3. Cookies we use
| Name | Category | Purpose | Duration |
|---|---|---|---|
app_session | Strictly necessary | Keeps you signed in. Holds an opaque session ID only — never your password or tokens. HttpOnly, SameSite=Lax, Secure. | ~8 hours, or ~30 days with "Keep me signed in" |
oauth_redirect | Strictly necessary | Set only while you sign in with Google: remembers which page to open once you return. Holds a page path only. HttpOnly, SameSite=Lax. | ~5 minutes |
cookie_consent | Strictly necessary | Remembers your cookie choices so we don't ask again on every visit. | ~180 days |
PARAGLIDE_LOCALE | Preference | Remembers your chosen language (Bulgarian, English, German or Russian). | ~400 days |
_ga, _ga_* | Analytics | Google Analytics. Distinguishes visitors so page views can be counted in aggregate. Set only with your analytics consent. | up to ~2 years |
_ym_uid, _ym_d, _ym_* | Analytics | Yandex Metrica. Counts page views and goals in aggregate; session recording is off. Set only with your analytics consent. | up to ~1 year |
_clck, _clsk | Analytics | Microsoft Clarity. Aggregated click and scroll heatmaps. Set only with your analytics consent. | up to ~1 year |
_gcl_au | Advertising | Google Ads conversion measurement. Set only with your advertising consent. | ~90 days |
_fbp, _fbc | Advertising | Meta pixel (Facebook and Instagram). Measures campaigns and enables remarketing. Set only with your advertising consent. | ~90 days |
_ttp | Advertising | TikTok pixel. Measures campaigns run on TikTok. Set only with your advertising consent. | ~13 months |
personalization_id | Advertising | X (Twitter) website tag. Measures campaigns run on X. Set only with your advertising consent. | ~2 years |
_uetsid, _uetvid | Advertising | Microsoft Advertising (Bing) UET tag. Set only with your advertising consent. | up to ~13 months |
_pin_unauth, _epik, _derived_epik | Advertising | Pinterest tag. Set only with your advertising consent. | up to ~1 year |
li_fat_id | Advertising | LinkedIn Insight tag. Set only with your advertising consent. | ~30 days |
Our own page-view measurement, which runs only with your analytics consent, sets no cookie. The Baba Vanga pages store nothing else in your browser (no localStorage), and your photos are held only in memory until you send them.
4. Third parties
Unless you allow the optional categories above, Baba Vanga sets no third-party cookies — the scripts that would set them are never loaded. Our typefaces are loaded from Google Fonts, which receives your IP address but sets no cookie.
Signing in with Google happens on Google's own pages (accounts.google.com), where Google's cookies and Privacy Policy apply; on our site it sets only the strictly necessary oauth_redirect and app_session cookies above.
5. The Android app
The Android app uses no cookies and no tracking. It keeps your sign-in session in its private storage on your phone, as described in section 9 of our Privacy Policy.
6. Managing cookies
You can change your choice at any time with the button below — withdrawing consent clears the optional cookies we can reach and reloads the page. Blocking the strictly necessary cookies in your browser will stop sign-in from working.
7. Changes to this policy
We'll update this page whenever our use of cookies changes and revise the "Last updated" date accordingly.
8. Contact
Questions about cookies? Visit our contact page or write to office@pacod.io.