Cookie policy

Effective from Operator: Arfrag s. r. o.

What cookies and local storage are

Cookies are small text files that a website stores in the visitor’s browser and that the browser sends back to the website’s server with further requests. The browser’s local storage works in a similar way: localStorage keeps data even after the browser is closed, until the website or the visitor deletes them, while sessionStorage keeps them only until the tab or window is closed. For simplicity, this policy refers to all these technologies together as cookies.

Some third-party services, for example the payment form and the pickup point map, are displayed on the website in their own embedded window, which is loaded from their provider’s server. Cookies that a service stores in such a window are managed by its provider under its own policy. Links to these policies are in the Third-party services section.

Who uses cookies

Cookies on this website are used by its operator, Arfrag s. r. o., with its registered office at Jazerná 639/27, 925 22 Veľké Úľany, Company ID (IČO): 57087288, email: info@byroman.sk. Other processing of personal data is described on the Privacy policy page.

Necessary cookies, without which the cart, ordering and login do not work, are stored without consent under Section 109(8) of Act No. 452/2021 Coll. on Electronic Communications, because they are needed to provide a service that the visitor has requested themselves.

Analytics and marketing cookies are stored only with the visitor’s consent under the same provision and under Article 6(1)(a) of Regulation (EU) 2016/679 (GDPR).

Consent is voluntary and is not a condition for making a purchase or browsing the website. It can be withdrawn at any time, as easily as it was given. Withdrawing consent does not affect the lawfulness of processing before its withdrawal.

List of cookies

The overview below lists all cookies and browser storage entries that the website uses, divided into categories, with their provider, duration and purpose. Analytics and marketing entries appear in the overview only when the website uses such a tool, and the website always asks for consent before using them.

Necessary: cookies and similar technologies
NameTypeProviderDomainDurationPurpose
byroman_consentCookieArfrag s. r. o.byroman.sk12 monthsKeeps your cookie settings choice together with a random consent ID and the time, so the banner does not appear on every visit and we can demonstrate that consent was given or withdrawn.
wordpress_logged_in_*CookieArfrag s. r. o.byroman.sksession, 14 days with “Remember me”Keeps a user signed in. It is created only after signing in.
wordpress_sec_*CookieArfrag s. r. o.byroman.sksession, 14 days with “Remember me”Secure authentication of a signed-in user in the admin area. It is created only after signing in.
wordpress_test_cookieCookieArfrag s. r. o.byroman.sksessionChecks whether the browser accepts cookies, which signing in needs. It is set on the login page only.
wp-settings-*CookieArfrag s. r. o.byroman.sk1 yearStores display settings of the admin area. It applies only to signed-in site administrators.
wp-settings-time-*CookieArfrag s. r. o.byroman.sk1 yearTime the admin area display settings were last saved. It applies only to signed-in site administrators.
wp_langCookieArfrag s. r. o.byroman.sksessionRemembers the language of the login page if you change it when signing in.
wpEmojiSettingsSupportsSession storageArfrag s. r. o.byroman.sksessionWordPress remembers whether the browser can display emoji and flags, so the test does not run again on every page.
wp_woocommerce_session_*CookieArfrag s. r. o.byroman.sk2 days, 7 days when signed inLinks the cart and an order in progress to a session in the shop. It is created only once a product is added to the cart.
woocommerce_items_in_cartCookieArfrag s. r. o.byroman.sksessionRecords whether there is anything in the cart.
woocommerce_cart_hashCookieArfrag s. r. o.byroman.sksessionHelps the shop notice a change in the cart so the header cart stays up to date.
wc_cart_hash_*, wc_fragments_*, wc_cart_createdSession storageArfrag s. r. o.byroman.sksessionWooCommerce temporarily keeps the mini cart contents and checksum so they do not have to be loaded on every page.
wc_cart_hash_*Local storageArfrag s. r. o.byroman.skpersistent (until cleared in the browser)A cart checksum shared between open tabs so the mini cart is the same everywhere.
storeApiCartData, storeApiCartHash, storeApiNonceLocal storageArfrag s. r. o.byroman.skpersistent (until cleared in the browser)The WooCommerce cart and checkout store the cart contents, its checksum and a security token for talking to the shop. Stored on the cart and checkout pages only.
WOOCOMMERCE_CHECKOUT_IS_CUSTOMER_DATA_DIRTYLocal storageArfrag s. r. o.byroman.skpersistent (until cleared in the browser)A technical checkout flag showing whether changed customer details still have to be saved in the shop.
wc-blocks_dismissed_incompatible_extensions_noticesLocal storageArfrag s. r. o.byroman.skpersistent (until cleared in the browser)The WooCommerce Cart and Checkout blocks remember which notices about incompatible extensions were dismissed. Holds block and extension names only.
__stripe_midCookieStripe Payments Europe, Limitedbyroman.sk1 yearThe Stripe payment gateway uses it to protect card payments against fraud.
__stripe_sidCookieStripe Payments Europe, Limitedbyroman.sk30 minutesThe Stripe payment gateway uses it to protect card payments against fraud during a single visit.
mCookieStripe Payments Europe, Limited.m.stripe.com2 yearsStripe stores it in its own payment form window to recognise the device when protecting payments against fraud.
_ab, _mf, 1Session storageStripe Payments Europe, Limitedm.stripe.networksessionStripe stores them in its own frame (m.stripe.network) to protect payments against fraud; key 1 tests whether session storage is available.
hmt_idCookieIntuition Machines, Inc.api.hcaptcha.com30 daysIdentifier of the hCaptcha check that protects the form against bots.
__cflbCookieIntuition Machines, Inc.api.hcaptcha.comvaries, up to 30 daysKeeps the connection on the same hCaptcha server during the check.
hc_accessibilityCookieIntuition Machines, Inc..hcaptcha.comvaries, up to 30 daysEnables the accessibility alternative to the check for people with disabilities who use it.
__cf_bmCookieIntuition Machines, Inc..hcaptcha.comup to 1 dayBot protection (Cloudflare) on the hCaptcha servers.
Cloudflare TurnstileService (no storage)Cloudflare, Inc.Protects forms against bots and abuse. Cloudflare Turnstile evaluates technical data about the browser and its behaviour, mostly without a puzzle for the person, to tell a person from an automated program.
Packeta (Zásilkovna)Service (no storage)Packeta Slovakia s. r. o.A map for choosing a pickup point or Z-BOX at checkout. It loads from Packeta servers and shows its own cookie banner in its window; Packeta handles the cookies and technical data there under its own policy.
wc_stripe_express_checkout_redirect_urlCookiebyroman.sk (WooCommerce Stripe Gateway)byroman.sk10 minutesWhen an Apple Pay or Google Pay payment requires an account, remembers the page the purchase returns to after signing in.
w3tc_logged_outCookiebyroman.sk (W3 Total Cache)byroman.sksession (until the browser is closed)Tells the page cache that the user has just signed out, so it serves them no stored copies of pages until the browser is closed. It is created only when signing out and deleted at the next sign-in.
byroman_currencyCookieArfrag s. r. o.byroman.sk1 yearRemembers the chosen currency for prices (its code: EUR, CZK or PLN). It is created only when a currency other than the default currency of the page's language is chosen (euro on Slovak and English pages, Czech koruna on Czech pages) and deleted when that default currency is chosen.
byroman_currency_popupLocal storageArfrag s. r. o.byroman.skpersistent (until cleared in the browser)Remembers the answer to the offer to show prices in another currency (for example Czech koruna or Polish złoty) so the offer is not repeated.
byroman_promo_dismissedLocal storageArfrag s. r. o.byroman.skpersistent (until cleared in the browser)Remembers that the promotional popup was closed so it stays hidden for a while.
Analytics: cookies and similar technologies
NameTypeProviderDomainDurationPurpose
Google Tag ManagerService (no storage)Google Ireland LimitedA tag management tool that loads other measurement and marketing tools on the website, only within the scope of your consent. It stores no cookies itself, but Google processes your IP address and technical browser data when it loads.
_gaCookieGoogle Ireland Limitedbyroman.sk2 yearsDistinguishes visitors with a randomly generated identifier to measure website traffic.
_ga_<container-id>CookieGoogle Ireland Limitedbyroman.sk2 yearsKeeps the state of the current visit (session) and the page view count for Google Analytics.
_gac_gb_<container-id>CookieGoogle Ireland Limitedbyroman.sk90 daysHolds advertising campaign information when Google Analytics is linked to Google Ads.
_clckCookieMicrosoft Ireland Operations Limitedbyroman.sk1 yearKeeps a random visitor ID and Clarity settings so actions on later visits can be linked to the same anonymous user.
_clskCookieMicrosoft Ireland Operations Limitedbyroman.sk1 dayCombines one visitor's page views into a single session recording.
_cltkSession storageMicrosoft Ireland Operations Limitedbyroman.sksessionRemembers during the visit that a session recording is already running.
CLIDCookieMicrosoft Ireland Operations Limitedwww.clarity.ms1 yearAn identifier Clarity uses to recognise the browser across websites that use Clarity.
Marketing: cookies and similar technologies
NameTypeProviderDomainDurationPurpose
_gcl_auCookieGoogle Ireland Limitedbyroman.sk90 daysStores an identifier used to measure conversions from Google ads and attribute them to ad clicks.
_gcl_aw, _gcl_dc, _gcl_gb, _gcl_gsCookieGoogle Ireland Limitedbyroman.sk90 daysStores data about a click on a Google ad so the conversion it brought in can be measured. It is set only when you arrive from an ad.
_gcl_lsLocal storageGoogle Ireland Limitedbyroman.skpersistent (until cleared in the browser)A copy of the Google ad click data in browser storage for conversion measurement.
IDECookieGoogle Ireland Limited.doubleclick.net13 monthsGoogle uses it to show, measure and target ads across the Google advertising network.
test_cookieCookieGoogle Ireland Limited.doubleclick.net15 minutesChecks whether the browser accepts cookies.
MUIDCookieMicrosoft Ireland Operations Limited.clarity.ms390 daysA browser identifier Microsoft uses across its services, for example for analytics and advertising.
ANONCHKCookieMicrosoft Ireland Operations Limitedc.clarity.ms10 minutesRecords whether the MUID is passed to ANID, an advertising cookie. Clarity does not use ANID, so the value is always 0.
MRCookieMicrosoft Ireland Operations Limitedc.clarity.ms7 daysDecides whether the MUID identifier should be refreshed.
SMCookieMicrosoft Ireland Operations Limitedc.clarity.mssessionSynchronises the MUID identifier across Microsoft domains.
_sp_id.*CookieECOMAIL.CZ, s.r.o.byroman.sk2 yearsA random browser identifier with the times of the first and last visit, which Ecomail uses to link the pages viewed to a newsletter contact.
_sp_ses.*CookieECOMAIL.CZ, s.r.o.byroman.sk30 minutesMarks a visit in progress so Ecomail can tell a new visit from a continuing one.
snowplowOutQueue_ecotrack_*Local storageECOMAIL.CZ, s.r.o.byroman.skpersistent (until cleared in the browser)A queue of page-view records not yet sent to Ecomail, with its expiry record; it is emptied once they are sent.
sbjs_currentCookieArfrag s. r. o.byroman.sksessionSource of the current visit (search engine, link, campaign) so the shop knows where an order came from.
sbjs_current_addCookieArfrag s. r. o.byroman.sksessionTime, landing page and referring site of the current visit, to attribute an order to its source.
sbjs_firstCookieArfrag s. r. o.byroman.sksessionSource of the first visit (search engine, link, campaign), to attribute an order to its source.
sbjs_first_addCookieArfrag s. r. o.byroman.sksessionTime, landing page and referring site of the first visit, to attribute an order to its source.
sbjs_udataCookieArfrag s. r. o.byroman.sksessionNumber of visits and browser type, to attribute an order to its source.
sbjs_sessionCookieArfrag s. r. o.byroman.sk30 minutesNumber of pages viewed in the current visit, to attribute an order to its source.
sbjs_migrationsCookieArfrag s. r. o.byroman.sksessionTechnical record of the format version of the other order attribution cookies.

If the website uses cookies that require consent, on the first visit it displays a banner in which the individual categories can be allowed or refused. The choice can then be changed, or consent withdrawn, at any time through “Cookie settings” in the website footer.

Cookies can also be deleted or blocked in the browser settings. However, if necessary cookies are blocked, the cart and ordering stop working.

Third-party services

Some functions of the website are provided by third-party services. When they are used, their providers may store their own cookies and process data under their own privacy policies:

Contact

Questions about cookies and the processing of personal data can be sent to info@byroman.sk.

This version is effective from 16 October 2026.