Cookie Policy
Last updated: · Version 1.2
This is a translation. The Bulgarian text is the binding one.
1. In short
We use only strictly necessary cookies. The site cannot work without them: they keep your session, protect forms and keep you signed in. We use no cookies for analytics, advertising or tracking, and we load no scripts or fonts from third parties. That is why we do not ask for consent with a wall of choices, and only show a short notice.
2. The cookies we set
| Name | What it is for | Lifetime |
|---|---|---|
| agent-storefront-session | Session. Holds the session identifier, the language you chose, messages after an action and, when you are signed in, who you are. In the database we also store the IP address and user agent (browser type) of every visitor with the session, including visitors without an account. Legal basis: legitimate interest, security. | 2 hours of inactivity (the session record with IP address and user agent is kept for the same time) |
| XSRF-TOKEN | Protects forms against forged requests (CSRF). | For the session (2 hours) |
| remember_web_… | Set only if you choose "Remember me" when signing in. Keeps you signed in after you close the browser. | Up to 400 days |
The lifetimes are the default values. They can be changed in the server configuration.
3. Other data in your browser
- In your browser's local storage (localStorage) we keep two keys: sf_cookie_notice remembers that you closed the cookie notice, and sf_theme remembers the theme you chose (light, dark or system). They are functional, are not sent to the server and need no consent. When you are signed in, the theme you choose is also saved to your account so it applies on all your devices.
- The Service has a service worker that keeps styles, scripts and public pages you have already opened in the browser cache, so they load faster and an "offline" page can be shown. It does not cache the pages of the app, the administration, the phone page, MCP or Livewire requests. You can delete it from your browser settings.
4. Legal basis
Strictly necessary cookies are exempt from the consent requirement under Art. 5(3) of Directive 2002/58/EC (ePrivacy), as implemented in the Bulgarian Electronic Communications Act. We process the personal data they contain under Art. 6(1)(b) and (f) of the GDPR.
5. How to manage them
You can delete or block cookies in your browser settings. If you block the necessary cookies you will not be able to sign in or send forms.
Questions: [email protected].