This Cookie Policy explains the cookies, local storage and third-party technologies that are actually used on core2pa.com (the "website"), operated by CORE 2PA ("CORE", "we", "our", "us"). It describes what each technology does, whether it is essential, and how you can control it.
We have written this policy to reflect the website as it is currently implemented. Where a piece of information (such as a specific retention period set by a third party) is determined by an external provider and not by us, we say so rather than invent a value.
1. What Cookies Are
Cookies are small text files placed on your device by websites you visit. Similar technologies — such as the browser's local storage — also let a site store small amounts of information on your device between visits.
Cookies and local storage can be set by the website you are visiting ("first-party") or by an external service loaded by that website ("third-party"). They can be used for purposes such as keeping a site functioning, remembering your preferences, or measuring how the site is used.
2. Why CORE Uses Cookies
We use a deliberately small set of technologies on this website. They are used to:
- Keep the website running and secure.
- Remember your cookie consent choices so we do not ask you on every page.
- Measure aggregate, anonymised website usage — but only if you have given consent.
We do not use cookies for advertising, retargeting, profiling, or selling data to third parties.
3. Consent and Google Consent Mode v2
When you visit core2pa.com for the first time, a cookie banner is displayed. Before you make a choice, our analytics provider is loaded in a "consent denied" state using Google Consent Mode v2 — meaning no analytics or advertising storage is written to your device.
Analytics cookies and identifiers are only set after you click Accept or enable the Analytics category in Customize. If you click Reject, no analytics or marketing cookies are placed.
You can change your choice at any time by clearing the consent record stored in your browser (see section 7).
4. Categories of Cookies and Storage Currently Used
4.1 Essential (always active)
These are strictly necessary for the website to function or to remember your consent choice. Under the GDPR / UK GDPR / ePrivacy Directive, no consent is required for strictly necessary storage.
| Name | Type | Party | Purpose | Retention |
|---|---|---|---|---|
core_cookie_consent_v1 | Local storage | First-party | Stores your cookie consent choice (accepted / rejected / customised categories) so the banner is not shown on every page load. | Persists until you clear your browser's site data for core2pa.com. |
4.2 Analytics (consent required)
Loaded only after you accept the Analytics category. These cookies help us understand, in aggregate and anonymised form, how visitors use the website so we can improve it. They are set by Google Analytics 4 (property ID G-JNEFVP6PSP). We have enabled IP anonymisation.
| Name | Type | Party | Purpose | Retention |
|---|---|---|---|---|
_ga | Cookie | Third-party (Google) | Distinguishes unique visitors by assigning a randomly generated client identifier. | 2 years (set by Google). |
_ga_JNEFVP6PSP | Cookie | Third-party (Google) | Used by Google Analytics 4 to persist session state for this specific property. | 2 years (set by Google). |
Under the GDPR / UK GDPR these analytics cookies require your prior consent. You can withdraw consent at any time (see section 7).
4.3 Functional
We do not currently use any functional cookies beyond the essential consent record described above.
4.4 Marketing / Advertising
We do not use any marketing or advertising cookies. We do not run Google Ads, Meta Pixel, LinkedIn Insight Tag, Microsoft Clarity, Hotjar, or any similar tracking pixels on this website.
5. Third-Party Technologies Currently in Use
5.1 Google Analytics 4 (Google LLC / Google Ireland Ltd)
Used to measure aggregate website traffic and usage. Loaded only after consent. IP anonymisation is enabled. Cookies set by this service are listed in section 4.2. More information: Google Privacy Policy.
5.2 Google Search Console (verification only)
We include a single HTML meta tag (google-site-verification) on the website so Google can confirm domain ownership for Search Console. This is a static tag in the page source. It does not set any cookies, does not run any script and does not track visitors.
5.3 Cloudflare (network & hosting layer)
The website is delivered via Cloudflare's global network. Cloudflare may set a strictly necessary cookie named __cf_bm to distinguish humans from automated traffic (bot management). This cookie is classified as strictly necessary by Cloudflare and typically expires after approximately 30 minutes. We do not control its lifetime; the value is set by Cloudflare. More information: Cloudflare Cookie Policy.
5.4 Lovable hosting platform
The website is built and hosted on the Lovable platform. On preview environments (not on the public production domain), Lovable may inject platform-level cookies or scripts for editor functionality. The retention and exact names of any such cookies are determined by the platform provider; we cannot enumerate them here with certainty.
5.5 Form submissions (no cookies)
When you send a message via the contact form, the data is transmitted to our backend (Supabase) and a notification email is sent via our transactional email infrastructure on notify.core2pa.com. These actions take place server-side and do not place cookies on your device.
6. First-Party vs Third-Party Summary
- First-party (set by core2pa.com):
core_cookie_consent_v1in local storage. - Third-party (set by external services):
_gaand_ga_JNEFVP6PSPby Google Analytics (only after consent);__cf_bmby Cloudflare for bot management.
7. How to Manage or Disable Cookies
You can manage cookies in several ways:
- Cookie banner: use the banner on first visit to Accept, Reject or Customize. Your choice is stored in your browser.
- Change your choice later: clear the site data for core2pa.com in your browser (or specifically delete the
core_cookie_consent_v1local-storage entry). The banner will reappear on your next visit so you can choose again. - Browser controls: most browsers let you block or delete cookies via their settings (Chrome, Safari, Firefox, Edge, etc.).
- Google Analytics opt-out: install the Google Analytics Opt-out Browser Add-on.
Blocking essential storage (such as the consent record) may cause the cookie banner to reappear on every page load. Blocking analytics has no effect on website functionality.
8. Do Not Track
Because we already require explicit consent before any analytics cookies are set, we do not act on browser "Do Not Track" signals separately. Our default state — before you interact with the banner — is equivalent to no tracking.
9. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in the technologies we use, in third-party providers, or in applicable law. The updated version will always be available on this page with a revised "Last Updated" date. Where changes are material, we may also surface them through the cookie banner.
10. Contact Us
If you have any questions about this Cookie Policy or about how cookies are used on this website, please contact us:
CORE 2PA
Email: am.yordanova@core2pa.com
See also our Privacy Policy and Terms & Conditions.