Cookie and analytics policy

1. Scope and controller

This Policy covers cookies, localStorage and similar technologies on tacprint.com, shop.tacprint.com and app.tacprint.com. The controller is SKYSYSNET sp. z o.o., operator of the TacPrint brand. Personal-data details are in the Privacy Policy.

The store and quote application are separate systems and may use their own necessary session, cart and security cookies. An optional-technology choice saved on one domain is not automatically treated as consent on another; each surface must provide the relevant notice and controls.

2. Default rule and legal basis

Before a choice, only technology necessary for transmission, security and an expressly requested function is used. Google Analytics, Microsoft Clarity and marketing tags do not load before the relevant consent.

Optional device access relies on consent under electronic communications law and further processing on Article 6(1)(a) GDPR. Necessary technology supports the requested service, security duties and the controller’s legitimate interests.

3. Necessary technology

Necessary mechanisms support sessions, authentication, routing, abuse prevention, forms, privacy settings and orders. They may be provided by TacPrint infrastructure or Cloudflare; blocking them may break login, forms or payment.

The privacy choice is stored in localStorage under tacprint_consent_v3 with version, date, expiry and categories. It expires after 180 days or sooner when the consent implementation changes.

Sentry is used for necessary error diagnostics, not advertising. Query parameters, form content, cookies and confidential headers are removed from reports.

4. Analytics — Google Analytics 4

After analytics consent, GA4 measures page views, traffic sources, scroll stages and interactions used to improve the site and quote journey. The external Google script is not loaded before consent.

GA4 may set _ga and _ga_<identifier>, normally for two years, to distinguish users and retain session state. Browser or provider settings may shorten this. Form values, email and Model content must not be sent to GA4.

5. Experience measurement — Microsoft Clarity

After separate consent, Clarity may produce click and scroll heatmaps and behaviour recordings. Form fields are masked, but confidential data should only be entered in intended fields.

Clarity may use _clck, _clsk and Microsoft technologies such as CLID, MUID, ANONCHK, MR or SM. Recordings are normally retained for 30 days and click, heatmap and labelled-session data for up to 13 months.

6. Marketing and Google Tag Manager

After marketing consent, Google Tag Manager may start only configured campaign, conversion or advertising tags. The container does not by itself determine which cookies are set; its live configuration must match this Policy.

If no marketing tag or GTM identifier is configured, this category loads no additional tool. A new consent-based provider must be inventoried and assigned to the correct category before activation.

7. Choice, refusal and withdrawal

The first banner layer provides equally accessible accept-all and reject-optional controls. Detailed settings separately show only currently configured analytics, experience-measurement and marketing categories; options are off by default. A provider-configuration change invalidates the earlier choice and requires a new decision.

“Cookie settings” in the footer reopens the panel. Withdrawal blocks the provider on the next page load and attempts to remove its first-party TacPrint cookies. Third-party cookies can also be cleared in the browser.

Refusal does not block quotes, contact, accounts or orders except where an objectively necessary mechanism is required.

8. Browser controls and privacy signals

Browsers can inspect, block and delete cookies and site storage. Blocking all site data may remove the recorded choice and display the banner again.

Providers may support signals such as Global Privacy Control or Do Not Track. The TacPrint settings panel remains the direct control for this system.

9. Contact and updates

Questions: [email protected]. The Policy and consent version change when categories, providers, retention or law changes.

The live tool set depends on environment configuration. If a GA4, GTM or Clarity identifier is absent, the related script is not loaded.