Cookie-Richtlinie
Effective date: 2026-06-12
Effective date: .
Version: cookie_policy_v2_2.
Replaces: cookie_policy_v2_1.
Cookie Policy — Pilotium
D.1.1 What are cookies and equivalent technologies
Cookies are small text files placed on your device when you visit a website. This Policy covers cookies and equivalent tracking technologies within the meaning of Article 5(3) ePrivacy Directive 2002/58/EC as construed in EDPB Guidelines 2/2023 — including web beacons / pixels, local storage and session storage, SDK identifiers, and other client-side state-storing mechanisms.
D.1.2 Legal basis
Strictly necessary cookies are placed on the basis of Article 5(3) ePrivacy Directive 2002/58/EC (the strictly-necessary exemption from consent); no GDPR Article 6(1) lawful basis is additionally required for the placement act. All other cookies and equivalent technologies are placed on the basis of your consent (Article 5(3) ePrivacy Directive + Article 6(1)(a) GDPR for any subsequent processing of personal data).
D.1.3 Cookies and equivalent technologies we use
Strictly necessary (no consent needed):
| Identifier | Provider | Purpose | Duration |
|---|---|---|---|
PILOTIUM_COOKIE_CONSENT | Pilotium | Stores your cookie-consent preferences | 12 months |
lang | Pilotium | Stores your selected language | 12 months |
pilotium_session | Pilotium | Authenticated session (sliding refresh; absolute maximum 30 days) | Up to 30 days |
PILOTIUM_COUNTRY | Pilotium | Detects your country for legal-text rendering and language suggestion | 12 months |
PILOTIUM_SUGGESTED_LOCALE | Pilotium | Remembers the language-suggestion banner state so it is not repeated | 12 months |
oauth_state, google_oauth_state, tiktok_oauth_state, meta_oauth_state | Pilotium | OAuth-state CSRF protection during sign-in / connection flows | Session |
pilotium_promo | Pilotium | Links a promotional invitation you opened to your registration so the promised credit can be applied (see the Promo Privacy Notice) | 7 days |
__cf_bm | Cloudflare | Bot management and security at the network edge | 30 minutes |
Analytics (consent needed):
No first-party analytics cookies are currently active. If an analytics technology is activated, it appears in the Conditional table below and is deployed only with your consent.
Marketing and advertising attribution (consent needed):
First-party attribution cookies (pltm_*, pilotium_ref) are set only after you consent to the marketing category. They never leave Pilotium's own domain and are used to measure which campaigns and partners bring visitors.
| Identifier | Provider | Purpose | Duration |
|---|---|---|---|
_fbp | Meta | Facebook Pixel ad delivery and measurement | 3 months |
fr | Meta | Personalised ads on Meta platforms | 3 months |
pltm_vid | Pilotium (first-party) | Visitor identifier used to attribute sign-ups to advertising campaigns | 12 months |
pltm_ft | Pilotium (first-party) | First-touch ad attribution (UTM parameters, click identifiers such as gclid / fbclid, referrer, landing page, device class) | 12 months |
pltm_lt | Pilotium (first-party) | Last-touch ad attribution (same fields as pltm_ft) | 30 days |
pltm_vc | Pilotium (first-party) | Visit counter supporting ad attribution | 12 months |
pilotium_ref | Pilotium (first-party) | Referral attribution — remembers which partner link brought you here (first touch) | 60 days |
Conditional (deployed only with consent and only on the relevant pages, currently inactive):
| Identifier | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _gid | Google Analytics 4 (if activated) | Site analytics | 24 months / 24 hours |
TikTok Pixel cookies | TikTok (if activated) | Conversion measurement | Up to 13 months |
If any conditional technology is activated, this Policy will be republished with a new effective date and a fresh consent prompt will trigger.
D.1.4 Consent banner
When you first visit the site, a consent banner gives you choices that are presented with equal prominence:
- "Accept" and "Reject" (or "Accept only essential") buttons are presented with identical visual weight, identical colour treatment, and identical keyboard focus order;
- No pre-ticked boxes are used;
- Closing the banner without an explicit choice is treated as a refusal.
You may change your preferences at any time via the "Cookie settings" link in the site footer. If you clear cookies in your browser, the banner re-triggers on your next visit (no dark-pattern persistence trick is used).
D.1.4 bis Granular control
Within "Customise preferences" you may grant or refuse consent separately for each non-essential category (analytics, marketing). Refusing one category does not affect the others. Refusal is as easy as acceptance.
D.1.5 Third-party policies
- Meta:
www.facebook.com/policies/cookies/ - Cloudflare:
www.cloudflare.com/cookie-policy/ - Google:
policies.google.com/technologies/cookies - TikTok:
www.tiktok.com/legal/cookie-policy
D.1.6 Contact
For any question about cookies on pilotium.cc: [email protected].
D.1.7 Global Privacy Control / Do Not Track
Pilotium honours the Global Privacy Control signal where transmitted by your browser, treating it as a refusal of consent for non-essential cookies and equivalent technologies. This aligns with the AEPD's 2024 guidance on automated consent signals and with the developing EDPB position.