Cookie Policy

Effective date: 1 October 2026

1. What are cookies?

Cookies are small text files stored on your device when you visit a website.

We may also use similar technologies, including:

• local storage
• session storage
• pixels
• scripts
• tags
• device identifiers

For simplicity, we refer to cookies and similar technologies collectively as "cookies" in this Cookie Policy.

2. How Approvale uses cookies

Approvale uses cookies and similar technologies to:

• keep users signed in
• maintain secure sessions
• protect the application against unauthorized access
• support CSRF protection and other security mechanisms
• remember cookie and privacy preferences
• operate the website and application
• understand how visitors use the website, where consent has been provided
• measure advertising and conversion activity, where consent has been provided
• support Google Consent Mode where applicable

Approvale uses a first-party Consent Management Platform (CMP) to manage optional cookies and similar technologies.

Non-essential cookies and tracking technologies are disabled by default where consent is required.

3. Categories of cookies

3.1 Necessary cookies

Always active.

Necessary cookies are required for the website and application to function correctly.

They may be used for:

• authentication
• login sessions
• security
• CSRF protection
• maintaining application state
• remembering consent preferences
• preventing abuse
• other functionality that is strictly necessary to provide the service

Because these cookies are necessary for the operation and security of Approvale, they cannot be disabled through the optional cookie preferences.

3.2 Preferences

Optional.

Preference technologies may be used to remember non-essential choices and preferences.

Examples may include:

• interface preferences
• language preferences
• other settings selected by the user

Preference technologies are enabled only where applicable and, where legally required, after the relevant consent has been provided.

3.3 Statistics

Optional.

Statistics technologies help us understand how visitors use the Approvale website and improve the service.

Depending on the configuration, this category may include:

• Google Analytics
• analytics tags loaded through Google Tag Manager
• other website measurement technologies

Statistics technologies are activated only after the required statistics consent has been provided.

3.4 Marketing

Optional.

Marketing technologies may be used to:

• measure advertising campaigns
• measure conversions
• understand advertising effectiveness
• create or measure remarketing audiences
• improve advertising campaigns

Depending on the configuration, this category may include:

• Google Ads
• Meta Pixel
• Meta Business Tools
• other advertising technologies

Marketing technologies are activated only after the required marketing consent has been provided.

4. Consent Management Platform

Approvale uses a first-party Consent Management Platform (CMP) to manage cookie preferences.

The CMP allows you to:

• accept all optional categories
• reject all optional categories
• select individual optional categories
• review your current consent choices
• change or withdraw optional consent

Your consent preferences may be stored using necessary first-party technologies so that we can remember your choices.

The CMP may also record information necessary to demonstrate when and how consent was provided or withdrawn.

5. Google Tag Manager

Approvale may use Google Tag Manager (GTM) to manage website tags.

Google Tag Manager acts as a tag management layer. Individual tags configured through GTM may belong to different cookie categories.

For example:

• Google Analytics tags are treated as statistics technologies
• Google Ads tags are treated as marketing technologies
• Meta tags are treated as marketing technologies

Tags that require consent should not be activated before the relevant consent has been provided.

Google Tag Manager may also be configured to work with Google Consent Mode.

6. Google Consent Mode

Where Google services are enabled, Approvale may use Google Consent Mode to communicate consent choices to Google services.

Depending on the configuration, consent signals may include:

• ad_storage
• analytics_storage
• ad_user_data
• ad_personalization

Before the user provides the relevant consent, applicable Google advertising and analytics storage signals are configured as denied.

After consent is provided, the relevant signals may be updated according to the user's preferences.

The exact behavior may depend on the Google services and tags enabled on the website.

7. Google Analytics

Approvale may use Google Analytics to measure website usage and understand how visitors interact with the website.

Depending on the configuration, Google Analytics may process information such as:

• page views
• events
• browser information
• device information
• approximate location
• referrer information
• technical identifiers

Google Analytics is classified as a Statistics technology for the purposes of the Approvale CMP.

It is not activated where the required statistics consent has not been provided.

8. Google Ads

Approvale may use Google Ads technologies for advertising and conversion measurement.

Depending on the configuration, Google Ads may use cookies or similar technologies to:

• measure advertising conversions
• measure campaign performance
• support remarketing
• improve advertising campaigns

Google Ads technologies are classified as Marketing technologies.

They are not activated where the required marketing consent has not been provided.

9. Meta

Approvale may use Meta advertising technologies, including the Meta Pixel and related Meta Business Tools.

These technologies may be used to:

• measure advertising conversions
• understand website interactions following advertisements
• measure campaign performance
• support remarketing
• optimize advertising campaigns

Meta advertising technologies are classified as Marketing technologies.

They are not activated where the required marketing consent has not been provided.

10. First-party application cookies

Approvale may use first-party cookies necessary to operate the application.

These may include cookies associated with:

• authentication
• sessions
• security
• CSRF protection
• consent preferences
• application functionality

The exact cookie names and technical implementation may change as the application is updated.

11. Technology inventory

Approvale maintains an inventory of configured cookies and similar technologies through its Consent Management Platform.

Depending on the current production configuration, the inventory may include information such as:

The actual inventory may change as technologies are added, removed or updated.

The presence of a provider in this policy does not mean that the provider is active on every page or for every visitor.

12. Third-party cookies

Some technologies used on the Approvale website may be provided by third parties.

Third-party providers may process information according to their own privacy policies and terms.

These providers may include:

• Google
• Meta
• other providers configured through Google Tag Manager

We do not control the internal operation of third-party services and their technologies may change over time.

13. Managing your cookie preferences

When you first visit Approvale, you may be presented with a cookie consent interface.

Depending on the applicable requirements, you can:

• accept all cookies
• reject optional cookies
• customize your preferences

You can change or withdraw your optional consent at any time by selecting:

Privacy settings

in the Approvale website footer or through the available CMP control.

Changing your preferences does not normally affect necessary cookies required for the operation and security of the service.

14. What happens if you reject optional cookies?

If you reject optional cookies:

• necessary cookies remain active
• authentication and core application functionality continue to work
• optional analytics technologies are not activated
• optional advertising technologies are not activated
• Google advertising and analytics consent signals remain restricted according to your preferences

Rejecting optional cookies may mean that we have less information about how visitors use the website and that advertising campaigns cannot be measured or personalized in the same way.

15. Cookies and personal data

Some cookies and similar technologies may involve information that qualifies as personal data under applicable data protection law.

Where this occurs, the processing is also governed by our:

Privacy Policy

The legal basis for processing depends on the specific technology and purpose.

Where consent is required, the technology will only be activated after the relevant consent has been provided.

16. Cookie retention

The duration for which cookies and similar technologies remain on your device depends on their purpose.

Some cookies are session-based and are removed when you close your browser.

Other cookies may remain until they expire or are deleted.

The exact retention period may vary depending on the technology provider and the current configuration.

The CMP inventory may contain the applicable retention information for individual technologies.

17. Changes to this Cookie Policy

We may update this Cookie Policy from time to time.

Changes may be necessary when:

• new technologies are introduced
• existing technologies are removed
• third-party providers change
• legal requirements change
• the Approvale website or application changes

The current version will be published through the Approvale legal document system.

The effective date at the beginning of this policy indicates when the current version became effective.

18. More information

For more information about how Approvale processes personal data, see our:

Privacy Policy

If you have questions about cookies or your privacy preferences, contact:

support@approvale.io

Data Controller

Rafał Migda – Lore Media
ul. Zuchów 131/1
43-300 Bielsko-Biała
Poland

NIP: 8691983646
REGON: 360319820

Email: support@approvale.io