Draft — under review
This text is a draft: the project owner and a lawyer are still reviewing it, so it may change.
Cookies
Your choice
To count visits. On only if you agree; turning them off deletes them.
Necessary cookies, and analytics only with your consent
Oro pavojus uses the cookies that sign-in, security and the settings you choose cannot work without. They need no consent.
To count visits we use Google Analytics, but only if you agree. On your first visit we ask, with two equal buttons: “Necessary only” and “Accept”. Until you choose “Accept”, the Google Analytics script is not loaded and sets no cookies. We use no advertising cookies.
You can change your choice at any time at the top of this page.
Necessary cookies
| Name | What it is for | Lifetime | Notes |
|---|---|---|---|
__session |
Sign-in session | Up to 14 days | Not readable by scripts (HttpOnly), HTTPS only |
oro_csrf |
Protection against cross-site request forgery (CSRF) | While you use the site | Random value, HTTPS only |
oro_sess_exp |
Knowing when the session ends so it can be renewed | Same as the session | Contains no personal data |
oro_theme |
Your light or dark theme choice | 365 days | The same value is also kept in browser storage (localStorage) |
oro_lang |
Your language choice | 365 days | Contains no personal data |
oro_did |
A random install id used to prevent report abuse | Long-lived | Not readable by scripts (HttpOnly); the server keeps only a hash of it for 7 days |
Necessary cookies are first-party: only oropavojus.lt sets them, and they are never sent to other sites.
In browser storage (localStorage, entry oro_disclaimer) we also keep your confirmation that this site is not an official source, with a random number, so the notice does not come back. It is not a cookie: it is not sent with every request. We send the server only the number, the notice version, the language and the time, once, and the record is linked neither to an account nor to an IP address.
The sign-in, sign-up, password reset and report forms use Google reCAPTCHA Enterprise to tell people from automated programs. It loads only on those forms and keeps its own entry in browser storage (_GRECAPTCHA). On the report forms, Firebase App Check keeps a verification token in the browser database (IndexedDB) for up to an hour, so it does not have to fetch a new one every time. They protect the site from abuse, so we do not ask for consent to them. Both are provided by Google; more in the privacy policy.
Analytics cookies (only with consent)
| Name | What it is for | Lifetime | Notes |
|---|---|---|---|
_ga |
Telling browsers apart, so one visitor is not counted several times | 365 days after the last visit | A random id; set by Google Analytics |
_ga_KWS4DJHE3C |
Keeping the state of a visit (session) | 365 days after the last visit | Set by Google Analytics |
Google Analytics is provided by Google Ireland Limited. We send it the page address without query parameters (for example without a map position or the one-time codes of our emails), the page title and technical data about the browser and device. Google signals and advertising features are off. More in the privacy policy.
We keep your answer in browser storage (localStorage, entry oro_consent) so the question does not come back on every page. We ask again after 365 days.
How to change your choice or delete cookies
You can turn analytics cookies on or off at the top of this page. Turning them off stops measurement at once and deletes the _ga cookies.
You can also delete all cookies in your browser settings. After deleting the sign-in cookies you will need to sign in again, and the theme and language return to their defaults.
Questions
Write to info@oropavojus.lt. More about data processing in the privacy policy.