Cookies

Necessary cookies, and analytics only with your consent

Oro pavojus uses the cookies that sign-in, security and the settings you choose cannot work without. They need no consent.

To count visits we use Google Analytics, but only if you agree. On your first visit we ask, with two equal buttons: “Necessary only” and “Accept”. Until you choose “Accept”, the Google Analytics script is not loaded and sets no cookies. We use no advertising cookies.

You can change your choice at any time at the top of this page.

Necessary cookies

Name	What it is for	Lifetime	Notes
__session	Sign-in session	Up to 14 days	Not readable by scripts (HttpOnly), HTTPS only
oro_csrf	Protection against cross-site request forgery (CSRF)	14 days	Random value, HTTPS only; the site’s scripts add it to requests
oro_sess_exp	Knowing when the session ends so it can be renewed	Same as the session	Contains no personal data
oro_theme	Your light or dark theme choice	365 days	The same value is also kept in browser storage (localStorage)
oro_lang	Your language choice	365 days	Contains no personal data
oro_did	A random install id used to prevent report abuse	400 days	Set only when you submit a drone report; not readable by scripts (HttpOnly); the server keeps only a hash of it for 7 days

Necessary cookies are first-party: only oropavojus.lt sets them, and they are never sent to other sites.

In browser storage (localStorage, entry oro_disclaimer) we also keep your confirmation that this site is not an official source, with a random number, so the notice does not come back. It is not a cookie: it is not sent with every request. We send the server only the number, the notice version, the language and the time, once, and the record is linked neither to an account nor to an IP address.

Other entries in browser storage (localStorage, sessionStorage, IndexedDB) stay on your device and are not sent to the server:

• your choices: map layers, aircraft filters, the air quality or gamma background view, shelter search and directions app settings, ticked items on the preparedness checklist, dismissed notices, your answer to the cookie notice and your answer to the invitation to support the project (when, and whether you pressed “Donate”, so it is not shown too often);
• the draft of a drone report you have not sent yet (until you close the tab), and a queue for reports that could not be sent while offline. They hold the exact location until the report is sent;
• your Firebase sign-in state, so you do not have to sign in every time;
• the app cache (pages, map and shelter data), so the site works without a connection.

The sign-in, sign-up, password reset and report forms use Google reCAPTCHA Enterprise to tell people from automated programs. It loads only on those forms and keeps its own entry in browser storage (_GRECAPTCHA). On the report forms, Firebase App Check keeps a verification token in the browser database (IndexedDB) for up to an hour, so it does not have to fetch a new one every time. They protect the site from abuse, so we do not ask for consent to them. Both are provided by Google; more in the privacy policy.

Analytics cookies (only with consent)

Name	What it is for	Lifetime	Notes
_ga	Telling browsers apart, so one visitor is not counted several times	365 days after the last visit	A random id; set by Google Analytics
_ga_KWS4DJHE3C	Keeping the state of a visit (session)	365 days after the last visit	Set by Google Analytics

Google Analytics is provided by Google Ireland Limited. We send it the page address without query parameters (for example without a map position or the one-time codes of our emails), the page title, technical data about the browser and device, and what you do on the site (for example which button was pressed). We never send a location, nor a report, shelter or account identifier. Google signals and advertising features are off. More in the privacy policy.

We keep your answer in browser storage (localStorage, entry oro_consent) so the question does not come back on every page. We ask again after 365 days.

How to change your choice or delete cookies

You can turn analytics cookies on or off at the top of this page. Turning them off stops measurement at once and deletes the _ga cookies.

You can also delete all cookies in your browser settings. After deleting the sign-in cookies you will need to sign in again, and the theme and language return to their defaults.

Questions

Write to info@oropavojus.lt. More about data processing in the privacy policy.