BadMars — Cookie Policy
What cookies are
Cookies (and similar storage) are small files a site places on your device. Some are needed to run the service; others help us understand usage or support marketing. Under EU rules (ePrivacy Directive Art. 5(3), transposed in Romania by Law 506/2004), anything that is not strictly necessary may be placed only with your prior consent.
How consent works here
When you first visit, a banner lets you accept or reject non-essential cookies, by category. Strictly-necessary cookies are always on (they need no consent); analytics and marketing cookies are set only if you opt in. You can change or withdraw your choice at any time from the “Cookie settings” link in the footer. Rejecting non-essential cookies costs you nothing — the service works the same.
The categories we use
Strictly necessary (always on, no consent needed)
| Cookie / storage | Set by | Purpose | Duration |
|---|---|---|---|
| Session / authentication | BadMars (first party) | Keeps you logged in | Session / short-lived |
CSRF token (XSRF-TOKEN) |
BadMars (first party) | Protects forms from cross-site forgery | Session |
| Turnstile challenge | Cloudflare | Confirms you are human at signup; blocks bots | Short-lived |
| Checkout context | Paddle | Carries your purchase through checkout | Transaction |
| Consent record | BadMars (first party) | Remembers your cookie choices | Up to 12 months |
Analytics (consent required)
| Cookie / storage | Set by | Purpose | Duration |
|---|---|---|---|
Google Analytics 4 (_ga, _ga_*) |
Measures site usage and performance | Up to 24 months |
Google Analytics 4 is a Google service; data is processed in the United States under Standard Contractual Clauses (and the EU–US Data Privacy Framework where Google is certified). We use Google Consent Mode v2 in basic mode: Google Analytics is not contacted until you opt in to the Analytics category — no data, cookieless or otherwise, is sent to Google beforehand. After you opt in, Google Analytics may set the cookies listed below and receive the associated analytics information. Google Signals and advertising features are turned off.
Marketing (consent required — planned, not yet live)
When enabled, advertising pixels (for example Meta/Facebook and TikTok) would set cookies to measure campaigns and show relevant ads. These are not active today. They load only with your consent, and only once we turn them on — at which point they are listed here with their names, durations, and providers.
Managing your choices
- In BadMars: the “Cookie settings” link (footer) reopens the banner any time.
- In your browser: you can block or delete cookies in your browser settings; strictly-necessary cookies may then break parts of the service.
Changes
If we change what we set, we update this page and its date, and — for any new non-essential cookie — we ask for your consent first.
For how we handle your data generally, see the Privacy Policy.