Cookie and Tracking Policy
Version 1.3 · Effective 3 November 2026
In short: on the website, no analytics or marketing loads before you accept, and you can change your choice here at any time.
1. Scope
This Policy explains cookies, local storage, pixels, tags, attribution links, identifiers and similar technologies in the Stadami Website and apps. Read it with the Terms of Use and Privacy Policy.
Controller: LOSI Sp. z o.o. Contact: support@stadami.com. Version 1.3. Effective: 3 November 2026.
2. Categories
Essential technologies enable security, sessions, verification, language, requested preferences and operation. Analytics measures use and performance. Marketing/attribution measures campaigns. Non-essential analytics and marketing require prior consent or permission where required.
3. Consent rule
GA4, Meta Pixel and the Google Tag Manager container (with the Google Ads tags it carries) load on the Website only after acceptance. After acceptance, the Website sends Google the consent signals for analytics and advertising (Google consent mode). Without acceptance, nothing loads and the signals remain denied. Rejecting or continuing without cookies should produce no request to those third parties and should not prevent basic content. We do not use pre-ticked boxes or treat browsing as consent.
Accept and Reject should be accessible. The choice can be changed at /cookies. Withdrawal acts for the future; data already received by a third party may follow its policy and retention, subject to your rights.
4. Website inventory
Names and durations may vary by browser and configuration. The table states the current minimum inventory; a new or materially changed technology requires an update and, where necessary, renewed consent.
Swipe sideways to see the whole table.
| Category | Technology | Purpose | Duration | When |
|---|---|---|---|---|
| Essential | Signup session cookie (httpOnly; technical name may vary) | Email verification and completing signup; for login with Google, it holds the attempt's one-time code (nonce) the Website compares when the token arrives | Up to 30 min/completion | Always in web signup and on the login and signup pages where the Google button is shown |
| Essential | Client session cookie (stadami_client; httpOnly) | Keep the Client logged in and unlock the contact channels published by Professionals | Up to 30 days or until logout | Only after Client login or signup |
| Essential | Google Identity Services: accounts.google.com script (login with Google; the button is a Google iframe) | Allow login with a Google account when you choose it. No cookie is written on the Website; when the button loads, Google receives your IP address, browser and the page's origin | None: no cookie on the Website | Only on the login and signup pages, when the button is shown |
| Preference | localStorage: language | Remember language | Until changed/cleared | Always |
| Preference | localStorage: banner/local state | Remember choice or dismissal | Until cleared/replaced | When feature exists |
| Consent | localStorage: cookie choice | Record accept/reject | Until changed/cleared | Always |
| Session | sessionStorage: temporary state | Avoid repetition/maintain tab | Until tab closes | When feature exists |
| Analytics | _ga | Distinguish browser/visitor in GA4 | Up to 2 years, configurable | Only after accept |
| Analytics | _ga_<container-id> | Maintain GA4 state | Up to 2 years, configurable | Only after accept |
| Marketing | _fbp | Meta browser measurement | Normally up to 3 months | Only after accept |
| Marketing | _fbc | Meta click attribution, if applicable | Normally up to 3 months | Only after accept |
| Marketing | Google Tag Manager (container GTM-NGL9JPD5): googletagmanager.com script | Load the Google Ads campaign measurement tags configured by Stadami; writes no cookie of its own | Script session | Only after accept |
| Marketing | _gcl_au | Google Ads conversion attribution | Normally up to 3 months | Only after accept |
| Marketing | _gcl_aw, _gcl_gs | Attribution after a Google ad click, if applicable | Normally up to 3 months | Only after accept |
| Marketing | IDE, test_cookie (doubleclick.net, Google third-party cookie) | Google remarketing and ad measurement | IDE up to 13 months; test_cookie 15 minutes | Only after accept |
5. Google Analytics 4 and Google Ads
With consent, we use GA4 measurement ID G-Q0XJHSWTE7 for pages, sessions and events. Common first-party cookies are _ga and _ga_<container-id>, with a configurable lifetime of up to 2 years. Configuration and browsers may shorten, refresh or block it.
We do not intentionally send a name, email, phone, password or card data to GA4. Google may process IP, device, page, referrer and event data under the configuration and its policy.
With consent, the Google Tag Manager container GTM-NGL9JPD5 loads the Google Ads conversion and remarketing tags configured by Stadami. Google may set or read the cookies listed in the inventory and receive IP, device, page, referrer, event and the click identifier of an ad (gclid) under its policy. After acceptance, the Website sends Google the consent-mode signals for advertising. The tags are limited to Google and Meta services. We do not intentionally send a name, email, phone, password or card data to them.
6. Meta Pixel
With consent, we use Meta Pixel 1444496940001487 for campaign and interaction measurement. Meta may set/read identifiers including _fbp and, after an applicable click, _fbc, and receive IP, device, page, referrer and event data under its policy/configuration.
We do not intentionally enable sending passwords, card data or sensitive data. Advanced matching or a new identifiable event requires an appropriate basis, notice, configuration and consent.
7. AppsFlyer and apps
Links and QR codes may use AppsFlyer OneLink for redirection and attribution. In apps, AppsFlyer and platform-permitted identifiers may measure installation, campaign and events under consent/permission and device settings.
Apple and Google control advertising identifiers, permissions and certain measurements. You can limit tracking in device settings. Refusal may reduce personalised attribution without preventing essential features.
8. App technologies
The app may use secure/local storage, session tokens, push notifications, crash logs and safety tools needed for accounts and operation. Device permissions and notifications can be changed in app or system settings.
Strictly necessary technologies are not used for advertising. If a non-essential SDK is added or changes purpose, we update the inventory and request consent/permission where required.
9. Links and third parties
When you open the App Store, Google Play, AppsFlyer, WhatsApp, a social network or another link, the third party may use its own technologies and receive IP, device, referrer and interaction data. Its policies apply to its service.
Login with Google, offered on the /login and /signup pages, uses Google Identity Services: the accounts.google.com script loads only on those pages, when the button is shown, and the button is a Google iframe. There is no One Tap and no automatic sign-in, and Google writes no cookie on the Website. When the button loads, Google receives your IP address, browser and the page's origin and processes the authentication as an independent controller under its own privacy policy.
More information: policies.google.com/privacy (Google Analytics 4 and login with Google); policies.google.com/technologies/ads (Google Ads); facebook.com/privacy/policy; appsflyer.com/legal/services-privacy-policy; vercel.com/legal/privacy-notice.
10. Management and changes
Use /cookies to accept, reject or withdraw Website analytics/marketing; clear browser cookies and site data; adjust device permissions, advertising and notifications. Clearing essential storage may sign you out or interrupt verification.
We update this Policy if a technology, purpose, provider, duration or basis changes. Version 1.1 adds the Client session cookie, used for Client login on the Website. Version 1.2 adds login with Google (Google Identity Services) on the login and signup pages, an essential technology that writes no cookie on the Website. Version 1.3 adds Google Tag Manager and the Google Ads tags, marketing technologies loaded only after acceptance, which is why the cookie choice is requested again. PT-BR is primary; English and Spanish are convenience translations. Contact: support@stadami.com.
Related documents: Terms of Use · Privacy Policy · Cookie and Tracking Policy · Community Guidelines
LOSI Sp. z o.o. (LOSI SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ), ul. Korytnicka 46/52, 04-109 Warsaw, Poland. KRS 0001146588 · REGON 540499518 · NIP 1133154642. support@stadami.com