Cookie and local preference notice

Last updated: 22 September 2026

1. What is mandatory and what is optional

Firmeego separates strictly necessary technology from optional measurement and advertising.

Essential storage is mandatory only where it is technically necessary to provide a function you request or to protect the service. It does not require an Analytics or Advertising choice. If essential session or security storage is blocked in your browser, signed-in or form-based functions may not work correctly.

Analytics is optional. Advertising is optional. Both stay off until you choose the relevant category. Refusing either optional category does not disable the core marketplace.

2. Essential storage

Essential storage can include:

• the secure PHP/Firmeego session cookie used for sign-in state, CSRF/request protection, security state and other short-lived session functions;
• `firmeego_consent`, which records your privacy choices and the version of the consent notice for up to six months unless you clear or replace it earlier;
• language, interface, app or workflow preferences needed to remember choices you have asked Firmeego to keep;
• security, fraud-prevention and load/application state that is strictly necessary to deliver or protect the requested service.

Exact session-cookie names and technical expiry can vary with the production PHP/hosting configuration. Firmeego does not store passwords, MFA secrets or full payment-card details in cookies.

3. Analytics — optional

If the operator enables Google measurement through Google Tag Manager or a direct Google tag, Firmeego does not load the measurement tag until you choose Analytics in Cookie preferences. Google measurement can then create identifiers such as `_ga` and related `_ga_*` cookies according to the configured Google service.

Tag Manager is a delivery mechanism, not permission to track. Tags configured through it must respect Firmeego's consent state and must not be used to bypass your choice.

4. Advertising — optional

Advertising is off by default. Entering an AdSense publisher ID can make Firmeego ready for Google ownership verification through a publisher meta tag and ads.txt, but it does not enable ad serving. After Google site review is requested, Firmeego can load the standard AdSense page-level bootstrap on eligible public pages with ad requests paused so Google's certified Privacy & Messaging CMP can initialise. While requests are paused, no AdSense ad requests are sent and no ads are shown.

Firmeego intentionally does not load that AdSense/CMP bootstrap on the Privacy, Cookie or Terms pages, or on private messages, Deal Rooms, account/admin surfaces, support cases, checkout or transaction workspaces, posting forms and other unsuitable private or transactional areas.

Actual AdSense serving remains blocked until Google marks the site Ready, the named Google-certified CMP with the required IAB TCF integration is confirmed, Firmeego's serving and Auto Ads switches are enabled, the page/language/viewer safety gates pass, and the visitor's Firmeego Advertising preference permits advertising. The certified CMP remains responsible for current Google/vendor consent choices where required; Firmeego's Advertising preference is an additional platform-level gate, not a substitute for that CMP.

If Google AdSense is enabled after those gates pass, third-party vendors including Google can use cookies or similar technologies to deliver and measure ads, prevent fraud, control frequency and, where permitted by the applicable consent and configuration, personalise ads based on visits to Firmeego and/or other sites. Google advertising preferences can be managed through Google Ads Settings. If your browser sends Global Privacy Control, Firmeego's own consent layer keeps optional Advertising off.

5. Payments and other requested third-party services

Opening an external payment, identity or other provider service that you deliberately request can cause that provider to use its own necessary storage on its own service. That is separate from Firmeego's optional Analytics and Advertising categories. The provider's own notice applies to its service.

Firmeego does not describe its hosting, email or payment providers as privacy or security certifications merely because those providers are used.

6. Change or withdraw your choice

You can reopen Cookie preferences from the Firmeego footer at any time. You can enable or disable Analytics and Advertising separately. Withdrawing an optional choice is designed to be as easy as giving it.

You can also block or clear cookies in your browser. Blocking strictly necessary storage can prevent the related requested function from working.

7. Changes and provider configuration

Firmeego increments the consent-policy version when a material storage or tracking configuration changes, so an old optional choice is not silently reused for a materially different setup. Before a new analytics or advertising provider is enabled, the operator should update the notice and consent configuration with the provider's current purposes, storage, retention and transfer information where applicable.

8. Questions

Questions about Firmeego's use of cookies or local preferences can be sent to support@firmeego.com.