Cookie Policy
Effective from 1 June 2026
This Cookie Policy applies to https://www.oraros.com and the Oraros web application operated by ORAROS LTD (company number 17227040, registered in England and Wales). It explains what cookies and similar technologies we use, why, and how you can control them. It supplements our Privacy Policy.
1. What cookies are
A cookie is a small text file that a website saves on your device when you visit. Similar technologies include local storage, session storage, pixels, software development kits, and device fingerprinting. For simplicity we refer to all of these as "cookies".
Cookies fall into two groups under the Privacy and Electronic Communications Regulations (UK) and Law 506/2004 (Romania): strictly necessary cookies, which are required for the website or application to work and do not require your consent; and all others — analytics, advertising, and functional cookies — which require your consent before they can be set, and which you can change or withdraw at any time.
We do not set any non-essential cookie until you give your consent through our cookie banner.
2. How we ask for your consent
The first time you visit oraros.com, you will see a cookie banner with three equally prominent choices: Accept all, Reject all, and Customise. The "Reject all" option is just as easy to use as "Accept all" — same size, same weight, same position.
You can change your preferences at any time by clicking the "Cookie settings" link in our website footer. We will ask for your consent again at least every 24 months, and earlier if we add a new category of non-essential cookie.
We respect the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we treat that as a rejection of analytics and advertising cookies, even if you have not interacted with our banner.
3. The cookies we use
Strictly necessary cookies
These cookies are required for the platform to function. They cannot be turned off and are not used for tracking or marketing.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
sb-access-token, sb-refresh-token |
Oraros (via Supabase) | Keeps you signed in and refreshes your session | Session and up to 30 days |
oraros_csrf |
Oraros | Protection against cross-site request forgery | Session |
oraros_consent |
Oraros | Stores your cookie preferences | 24 months |
oraros_locale, oraros_currency |
Oraros | Remembers your language and currency | 12 months |
__stripe_mid, __stripe_sid |
Stripe | Fraud prevention on payment pages only | Up to 1 year |
Analytics cookies (require your consent)
These cookies help us understand how the platform is used so we can improve it.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _ga_<id>, _gid |
Google Analytics 4 | Distinguishes unique visitors and sessions | Up to 24 months |
We use Google Analytics with IP anonymisation enabled, advertising features disabled, and data retention set to 14 months. We do not share Google Analytics data with Google for advertising personalisation.
Advertising cookies (require your consent)
These cookies help us measure the effectiveness of our advertising and shape future campaigns.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_fbp, fr |
Meta Pixel | Advertising measurement and conversion tracking | Up to 90 days |
If you reject advertising cookies, the Meta Pixel does not load on any page, and we do not send any server-side conversion event to Meta. You may still see general advertising from Meta — it just will not be informed by your activity on Oraros.
Functional cookies (require your consent)
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
oraros_recent_searches |
Oraros | Remembers your recent business searches | 30 days |
oraros_dismissed_banners |
Oraros | Hides product-update banners you have dismissed | 12 months |
Mobile apps (iOS)
The Oraros iOS app uses only strictly necessary cookies and local storage, to keep the app secure and functional. Analytics, advertising, and other non-essential cookies are disabled in the iOS app and cannot be enabled there, so the iOS app shows no cookie consent prompt. The iOS app does not use tracking or marketing cookies and does not track you across apps or websites owned by other companies.
4. What happens when you reject
Oraros works fully whether you accept or reject non-essential cookies. You can browse, sign up, book, manage your account, and pay either way. If you reject, we do not load Google Analytics or Meta Pixel at all, and you will not see personalised content. There is no "cookie wall" — your access to the Service is not conditional on consent.
5. International transfers
Some cookie providers transfer data outside the UK and the EEA. Google Ireland Limited is the EU and UK contracting party for Google Analytics, with data potentially transferring to Google LLC in the United States under the EU–US Data Privacy Framework and UK Extension. Meta Platforms Ireland Limited is the EU and UK contracting party for Meta Pixel, with similar arrangements. Stripe transfers between its UK and Irish entities and our database hosting provider may transfer operational metadata to the United States, all under standard contractual clauses. Further detail is in Section 7 of our Privacy Policy.
6. Browser controls
You can also manage cookies in your browser settings. Useful starting points: Chrome (support.google.com/chrome/answer/95647), Firefox (support.mozilla.org/kb/clear-cookies-and-site-data-firefox), Safari (support.apple.com/guide/safari/manage-cookies-sfri11471), and Edge (support.microsoft.com/microsoft-edge/delete-cookies). Note that blocking strictly necessary cookies in your browser will prevent you from signing in to Oraros.
7. Changes to this policy
We will update this policy whenever we add, remove, or change cookies. The effective date at the top of this page reflects the current version. Material changes will trigger a fresh consent banner.
8. Contact
For any question about cookies, email support@oraros.com.