In short: the site works without cookies. Until you choose in the message on your first visit, the statistics do not start at all. If you press “Necessary only”, we count you without cookies and without anything saved in the browser. Statistics cookies (PostHog) start only if you press “Accept”. This page follows Romanian Law 506/2004 and the GDPR.
What we keep without consent (strictly necessary)
- malinoiu-consent (local storage): your choice in the cookie message, so that we do not ask you again. It is deleted when you press “Cookie settings” in the footer. PostHog also keeps a refusal in local storage, so that it does not start cookies.
- malinoiu-contact, malinoiu-quote (session storage): what you filled in on a form, so that you do not lose the text if you change page. They are deleted on sending or when the tab is closed.
- The choices in the quote request (products, wood species, finish) sit in the page address, not in the browser. You can save them or send them as a link.
- Cloudflare Turnstile, the anti-spam check, loads only on the last step of a form. In our configuration it sets no cookies; it sends Cloudflare, strictly to tell people from robots, the IP address and the browser’s signature (Turnstile privacy notice).
Statistics without cookies (without consent)
Cloudflare Web Analytics tells us how many visitors we have, which pages they read and how fast the site loads. It does not use cookies, does not build profiles and does not track visitors across sites; that is why it starts without consent.
PostHog, if you press “Necessary only”: counts the visit, the pages and the steps of the form without putting anything in the browser. The identity is a code computed on PostHog’s servers from the IP address, the browser type and the site’s address, which changes every day and cannot be linked from one day to the next; the IP address is not kept. The data stays in the European Union (Frankfurt). No session recordings.
Statistics with cookies (only after “Accept”)
PostHog (PostHog Inc., PostHog Cloud EU, Frankfurt) shows us, besides the pages, what visitors do on the site: which path they take, where they stop in the form and whether they send a request, and may record the scrolling and clicks on a page (what you type in fields is masked). It sets cookies that tell visitors apart, without telling us who they are:
- ph_…_posthog and ph_…_posthog_cpm (cookies and local storage): random browser identifier and the state of the current session, 12 months;
- __ph_opt_in_out_… (local storage): that you accepted, so that we do not ask you again.
- malinoiu-utm and malinoiu-ref (session storage, deleted when the tab is closed): the campaign or site you came from, kept only after “Accept” and attached to a possible request so that we know which channels work. They do not identify you.
The data is kept for at most 2 years, in the European Union. PostHog Inc. is a US company and may access the data from there, on the basis of the standard contractual clauses approved by the European Commission.
Marketing (only if we run campaigns and only after “Accept”)
If we run Google Ads or Meta campaigns, their measuring tools will start only after consent and will be listed here, with the names of the cookies and their duration. They are not active at the moment. When they are, the cookie message will have a separate tick box for marketing, and the statistics can be accepted without it.
How to change your choice
Press “Cookie settings” in the footer of any page: the message reappears and you can choose again. You can also delete cookies at any time from the browser settings. If you switch from “Accept” to “Necessary only”, the PostHog cookies are deleted at once.
Third-party content
The site loads no content from other companies. The links to Google Maps (the showroom address), Facebook and YouTube open their sites in a new tab; until you press one, your browser does not contact them. The fonts and the film are served from our own site.
More about personal data in the privacy policy.