Cookie Policy
Effective 31 October 2026 · Gabor Tarnok trading under the Retronative brand. Contact: info@retronative.com.
We separate essential storage from optional audience measurement. Rejecting Analytics does not prevent browsing, registering, signing in or using the shop. No Analytics script or consent-mode ping is sent before an affirmative Analytics choice. We use Google’s basic, not advanced, consent-mode approach.
to change or withdraw your choice. A rejection or withdrawal stops new Analytics collection and removes this site’s accessible Analytics cookies. A tag that has already loaded is disabled and the page reloads after the saved withdrawal. Other open tabs are notified when supported. Previously transmitted information is not recalled by deleting a cookie.
| Name / provider | Purpose and category | Duration |
|---|---|---|
| retronative_session Retronative, first party | Essential authentication and CSRF protection. Random identifier; not an advertising cookie. HttpOnly, SameSite=Lax, Secure on HTTPS. | Browser session; server session expires after two hours of inactivity. |
| rn_privacy Retronative, first party | Essential random reference to your server-side cookie choice. HttpOnly; does not contain your email or name. | 180 days from a saved choice. |
| rn_privacy_optout Retronative, first party | Essential local refusal flag. Keeps Analytics off even if saving a rejection temporarily fails. It contains only a refusal value. | 180 days, or until a later successful opt-in. |
| _ga and _ga_<stream suffix> Google Analytics, first party | Optional visitor/session measurement only after Analytics permission and activation by Retronative. Advertising storage, ad personalisation, Google signals and User-ID are not enabled by this integration. | Configured to a maximum of 180 days without renewal on every visit. Exact names depend on the configured GA4 stream. |
What we measure
Only coarse public homepage, shop, product and journal routes. The integration does not deliberately transmit names, emails, phone numbers, addresses, searches, query strings, URL fragments, password-reset tokens, account/profile/admin pages or newsletter forms. Automatic enhanced measurement must be disabled in the Google property before activation, as described in the operator setup checklist.
Preferences and proof
The selected category, notice version and time are saved in MySQL with a pseudonymous preference reference. We do not add the account ID, raw IP address or browser fingerprint to this consent log. Preference evidence is kept for up to 400 days. A changed Analytics configuration invalidates the earlier version so that it cannot silently authorise new measurement.
Other providers
We do not load Google/Facebook sign-in SDKs in the background. If enabled, selecting a social sign-in method takes you to that provider, where its own storage and policies apply. Affiliate links are marked and lead to an external site; this implementation does not place affiliate tracking pixels before a click. Any additional tracking inserted by the hosting account or another integration must also be inventoried and blocked or disabled unless lawfully permitted.
YouTube in journal articles: only a local placeholder appears initially; no external video thumbnail, iframe or player script loads. Choosing “Load YouTube video” connects that player to Google via youtube-nocookie.com, which may receive device/connection information and use its own storage. This per-video choice is separate from Analytics, is not saved as a site preference and is not enabled by accepting Analytics. “Unload YouTube video” removes the player but cannot recall data already transmitted. The video is optional; the rest of the article stays available without it.
Read the Privacy Policy for recipients, international transfers, retention and rights. Browser controls can also block or clear cookies, but blocking essential cookies can prevent sign-in. Clearing all storage may cause the site to ask for your choice again.