Excellent PRO
Excellent PRO

Cookies & privacy

Cookie Policy

Version 1.0 | oem.excellentpro.app

The OEM Platform oem.excellentpro.app uses strictly necessary cookies to operate the service (login, shopping cart, record of your choice) and - only with your consent - analytics cookies. We additionally measure traffic with a tool that stores nothing on your device. We do not profile Users. This Cookie Policy supplements the Privacy Policy.

§ I

What cookies are

  1. Cookie files (commonly referred to as "cookies") are small text files saved by the browser on the User's device. They allow the site to remember preferences (e.g. login status, shopping cart contents) across visits and subpages.
  2. Cookies do not contain personal data that would allow a person to be directly identified - they store only a session identifier that refers to the Controller's database.
  3. In addition to classic cookies (HTTP cookies), the Platform uses the browser's localStorage - an analogous mechanism kept locally and not sent to the server in HTTP headers.
  4. Cookies and localStorage are stored separately for each domain. The OEM Platform (oem.excellentpro.app) and the excellentpro.app wholesale store use the same mechanisms, but the login session on one domain does not automatically carry over to the other.
§ II

Cookies used on the OEM Platform

All the cookies listed below are strictly necessary for the service to operate. Without them you cannot log in, place an order or save your preferences.

sb-*-auth-token
Purpose: The login session (Supabase Auth) - keeps you logged in across pages and subpages.
Duration: 7 days from the last activity.
Type: HTTP cookie, httpOnly, Secure, SameSite=Lax.
cart_local
Purpose: The shopping cart contents for Users who are not logged in (stored locally in the browser).
Duration: Until the User manually clears the browser data.
Type: localStorage (not an HTTP cookie).
excpro_consent_v1
Purpose: Remembering your choice in the consent banner (which categories you enabled), so that we do not ask on every visit.
Duration: 12 months, after which we ask again.
Type: localStorage.

Analytics cookies - only with your consent

These are activated only after you enable the “Analytics” category in the banner. Until you do, no Google script is downloaded or executed, and Google receives no data about you.

_ga, _ga_*
Purpose: Google Analytics 4 - visit statistics: how many people use the OEM Platform, which sources they arrive from and which product pages they view.
Duration: Up to 24 months (Google setting).
Type: Third-party cookies (Google Ireland Ltd.).
Legal basis: Your consent - you may withdraw it at any time (see § V).

Cookieless traffic measurement

Independently of the above, we use Cloudflare Web Analytics, a tool that measures page views and loading speed. We list it here for full transparency, even though it stores no files on your device (no cookies, no localStorage), assigns you no identifier, does not track you across sites and builds no profile. For that reason it does not require consent and operates independently of your banner settings. Provider: Cloudflare, Inc.

§ III

What we do NOT use

Beyond the analytics described in § II, the Controller deliberately does not use the following tracking technologies:

  • Facebook Pixel, TikTok Pixel, LinkedIn Insight Tag
  • remarketing tools (Google Ads, Meta Ads, programmatic)
  • third-party cookies that collect data for profiling
  • web beacons, pixel tags, fingerprinting (canvas/font/audio)
  • session recording (Hotjar, Microsoft Clarity, FullStory, etc.)
  • A/B testing tools based on profiling

Visit statistics serve one purpose: developing the OEM Platform - judging which features are used and what loads slowly. We build no user profiles on that basis, make no automated decisions about anyone, and share none of it for advertising purposes. The Platform is a B2B tool for fulfilling orders, not a marketing channel.

§ IV

Legal basis

  1. Cookies strictly necessary for the service to function do not require the User's consent - legal basis: Article 173(3)(2) of the Act of 16 July 2004 - the Telecommunications Law (Journal of Laws of 2004, No. 171, item 1800, as amended) - an exemption for cookies strictly necessary to provide the service requested by the user.
  2. To the extent that cookies process data which may constitute personal data (e.g. a session identifier linked to the Customer's account), the legal basis is Article 6(1)(b) of the GDPR - performance of the contract.
  3. Analytics cookies require your consent - legal basis: Article 173(1) of the Telecommunications Act and Article 6(1)(a) of the GDPR. Consent is voluntary, given by a deliberate action in the banner (no toggle is pre-ticked), and you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
  4. Traffic measurement that stores nothing on your device (Cloudflare Web Analytics, see § II) requires no consent, as there is no storing of, or access to, information on terminal equipment within the meaning of Article 173(1) of the Telecommunications Act. The legal basis is Article 6(1)(f) of the GDPR - the Controller's legitimate interest in maintaining and developing the OEM Platform.
§ V

Managing cookies

  1. You can disable cookies at any time in your browser settings. Disabling session cookies will prevent you from logging in and placing an order - the Platform will not work correctly.
  2. To delete cookies already stored on your device, use the "Clear browsing data" function in your browser.
  3. Instructions for popular browsers:
  4. To change or withdraw your consent, use the "Cookie settings" link in the footer of every page - the banner reopens with your saved settings. There is no need to open developer tools or clear browser data.
§ VI

Consent banner

  1. On the first visit to the OEM Platform, a consent banner is displayed. The banner contains:
    • information about the categories of cookies in use
    • three categories to choose from: Essential (always active, the service does not work without them), Analytics and Marketing - the latter two switched off by default
    • a statement that tracking/profiling is not used
    • a link to this Cookie Policy and the Privacy Policy
    • three equally weighted buttons: "Reject all", "Customise" and "Accept all"
  2. Refusing consent is as easy as giving it - the "Reject all" button sits on the same screen and carries the same visual weight as "Accept all" (in line with the CJEU judgment in Case C-673/17 Planet49). Inaction does not amount to consent: until you click, no analytics script is executed.
  3. Consent is handled with Google Consent Mode v2. Until you decide, every category other than the essential ones has the status denied, meaning Google tools store no cookies and transmit no data.
  4. Once you make your choice, the excpro_consent_v1 key is saved in localStorage with your decision for each category and the date it was given, valid for 12 months. The banner does not appear again until this key is cleared, its validity expires, or the substance of the consent changes.
  5. You can change or withdraw your choice at any time via the "Cookie settings" link in the footer of every page. The banner reopens with your saved settings.
  6. The banner is accessible to people using assistive technologies (screen readers) - it has a role="dialog" attribute and an ARIA label describing its content.
§ VII

Contact

For matters relating to cookies, their configuration or this Policy - please contact the Controller:

For the full rules on the processing of personal data - see the Privacy Policy. For the full terms of use of the OEM Platform - see the Terms and Conditions.

This Cookie Policy comes into force on 3 July 2026.

Related documents: Terms and Conditions | Privacy Policy