Third-Party Cookies Used in The Smartestway
This document tracks the third-party cookies functionally implemented in our web application. Each entry provides details about the cookie's purpose, duration, and domain. Cookies are organized by category to facilitate proper consent management.
Data Controller Information
Sparta d.o.o. (contact: hello@thesmartestway.com)
Cookie Categories
Necessary Cookies
These cookies are essential for the website to function properly. They enable core functionality such as security, network management, and account access. The website cannot function properly without these cookies.
Legal basis: Legitimate interest
Data processed: Session identifiers, security tokens, user preferences
| Cookie Name | Domain | Description | Duration |
|---|---|---|---|
| `__stripe_sid` | .checkout.stripe.com | Stripe session ID cookie. Used to identify the current payment session. | 1 day |
| `cookie-perms` | .stripe.com | Stripe cookie permissions cookie. Stores user consent preferences. | Session |
| `site-auth` | .stripe.com | Stripe site authentication cookie. Used for security purposes. | Session |
| `stripe.csrf` | .stripe.com | Stripe CSRF token cookie. Used to prevent cross-site request forgery attacks. | Session |
| `_tracking_consent` | .thesmartestway.com | Stores consent preferences for tracking. | 1 year |
| `__cflb` | api.hcaptcha.com | hCaptcha load balancer cookie. Used to direct traffic to the appropriate server. | 1 day |
| Various session cookies | newassets.hcaptcha.com | hCaptcha security cookies. Used for bot detection and security verification. | Session |
| `accessToken` | .thesmartestway.com | Authentication token for API requests. Required for accessing protected resources. | 5 minutes |
| `refreshToken` | .thesmartestway.com | Token used to refresh the access token when it expires. Used for maintaining user sessions without requiring re-login. | 30 days |
Functional Cookies
These cookies enable enhanced functionality and personalization. They may be set by us or by third-party providers whose services we use on our pages.
Legal basis: Consent
Data processed: User preferences, session information
| Cookie Name | Domain | Description | Duration |
|---|---|---|---|
| `_chatwobt_session` | support.thesmartestway.com | Session cookie for chat widget functionality. | Session |
| `cw_conversation` | app.thesmartestway.com | Customer conversation tracking for the chat widget. | 1 year |
| `user.expires_at` | support.thesmartestway.com | User session expiration timestamp. | Session |
| `user.id` | support.thesmartestway.com | User identifier for the support system. | Session |
| `merchant` | .stripe.com | Stripe merchant identifier cookie. Used to identify the merchant account. | Session |
| `savedState` | .thesmartestway.com | Temporarily stores login state during authentication, particularly for OAuth processes like Google login. | 10 minutes |
| `referralCode` | .thesmartestway.com | Stores referral information when a user arrives via a referral link. Used to attribute referrals correctly. | 1 hour |
Analytics Cookies
These cookies collect information about how visitors use our website. The information collected is aggregated and anonymous, and helps us improve our website.
Legal basis: Consent
Data processed: IP addresses (anonymized), browser information, page interaction statistics
| Cookie Name | Domain | Description | Duration |
|---|---|---|---|
| `_ga` | .thesmartestway.com | Google Analytics main cookie. Used to distinguish users and store a unique identifier. | 2 years |
| `_gid` | .thesmartestway.com | Google Analytics cookie. Used to distinguish users. | 24 hours |
| `_gat` | .thesmartestway.com | Google Analytics throttling cookie. Used to limit the collection of data on high traffic sites. | 1 minute |
| `m` | m.stripe.com | Stripe metrics cookie. Used for tracking and analytics within Stripe services. | 6 months |
Marketing/Advertising Cookies
These cookies are used to track visitors across websites. They are set to display targeted advertisements based on visitor interests and to measure the effectiveness of advertising campaigns.
Legal basis: Consent
Data processed: Browsing history, click behavior, unique identifiers
| Cookie Name | Domain | Description | Duration |
|---|---|---|---|
| `_fbp` | .thesmartestway.com | Facebook Browser Pixel. Used to track visits across websites to measure the effectiveness of Facebook advertising. Stores a unique identifier. | 3 months |
| `_fbc` | .thesmartestway.com | Facebook Click Identifier. Stores the last click ID when a user clicks on a Facebook ad that leads to the website. | 3 months |
| `_ttclid` | .thesmartestway.com | TikTok Click ID cookie. Tracks users coming from TikTok ads for attribution purposes. | 13 months |
| `_ttp` | .thesmartestway.com | TikTok Pixel ID cookie. Used for TikTok's tracking and advertising effectiveness measurement. | 13 months |
Device Identification & Security Cookies
These cookies help identify unique users and devices for security purposes and fraud prevention.
Legal basis: Legitimate interest
Data processed: Device information, browser fingerprints, session data
| Cookie Name | Domain | Description | Duration |
|---|---|---|---|
| `__Secure-has_logged_in` | .stripe.com | Stripe authentication cookie. Indicates whether the user has logged in. | 1.5 years |
| `__stripe_mid` | .checkout.stripe.com | Stripe session management cookie. Used to identify and maintain user sessions. | 1 week |
| `__stripe_orig_props` | .stripe.com | Stripe properties cookie. Stores original properties data for Stripe functionality. | 1.5 years |
| `cid` | .stripe.com | Stripe customer ID cookie. Used to identify the customer. | 2.5 months |
| `machine_identifier` | .stripe.com | Stripe device identifier cookie. Used to identify unique devices. | 1.5 years |
| `private_machine_identifier` | .stripe.com | Stripe private device identifier cookie. Used for additional device fingerprinting. | 1.5 years |
Tag Manager Implementations
The following third-party services are implemented through our Tag Manager and may set additional cookies beyond those directly observed:
| Service Name | Type | Implementation | Last Updated |
|---|---|---|---|
| Facebook Pixel | Marketing/Advertising | All Pages | April 11, 2024 |
| Google Analytics (GA4) | Analytics | All Pages (Initialization) | March 21, 2024 |
| TikTok Pixel | Marketing/Advertising | All Pages | August 12, 2024 |
| TSW Purchase Tracking | Analytics | Purchase Pages | August 19, 2024 |
International Data Transfers
Some third-party cookies (Google Analytics, Facebook, TikTok) may transfer your data to countries outside the EU/EEA. These transfers are protected by appropriate safeguards such as Standard Contractual Clauses.
Cookie Management
How to Withdraw Consent
You can manage your cookie preferences through your browser settings or by contacting our support team.
How to Delete Cookies
You can delete cookies through your browser settings. Instructions for common browsers:
- Chrome: Settings > Privacy and security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
Data Retention
Data collected through cookies is retained only for the duration specified for each cookie. After this period, the data is automatically deleted or anonymized.
