FixingLog – Cookie Notice
Archived document. Current version: 2026-10-20-v25
1. Necessary settings
Necessary cookies support sign-in, CSRF protection, temporary external authentication state and language selection. fixinglog-consent stores the necessary/analytics choice for 180 days. Language preference lasts up to one year; session and temporary cookies follow their session/token lifetime. No account is required to choose cookie settings.
2. Optional Google Analytics
Optional analytics operates only with explicit consent to IP-based measurement and a configured GA4 connection. General categories are home page, HVAC landing page, portal and report-form views. The browser does not load Google measurement scripts. The FixingLog server forwards the public visitor IP supplied by the trusted Cloudflare tunnel/proxy to Google Analytics as ip_override so Google can determine an approximate network location, such as country and city. IP addresses are personal data. This does not measure GPS position or a work address. No separate country, city or coordinates are sent. Measurement includes a fixed category and generic title, a random browser identifier and technical session information. The browser identifier is not an account identifier and is not derived from names, emails or other business data. Company or customer records, private URLs, URL parameters, company path segments, tokens, job identifiers, work content, job locations, form fields, attachments and raw browser headers are not forwarded. Analytics forwarding creates no dedicated IP log and does not store the IP in the application database. Diagnostics hide the IP. No event is sent without a usable trusted visitor IP; server and proxy addresses are not used as substitutes. Measurement does not establish form submission or work completion. Google processes the IP and other technical information under its service terms; international transfers may occur. The nine language versions of the public home and HVAC pages can be measured separately using allowlisted canonical paths and language codes; no URL parameters or company paths are included. Portal and report-form categories remain aggregated across languages and companies.
3. Analytics cookies and lawful basis
fixinglog-analytics-client stores a random, server-authenticated browser identifier for up to 180 days; fixinglog-analytics-session lasts 30 minutes. They are created only after permission and deleted on withdrawal. The new implementation does not create a Google _ga cookie. Provider-side retention must be configured separately in Google Analytics. Analytics relies on consent under GDPR Article 6(1)(a); advertising data sharing and advertising personalisation are denied. Google service terms and international transfer arrangements apply.
4. Choice and withdrawal
Necessary only and Allow analytics are equally available; optional consent is not preselected. Cookie settings can be reopened at any time. Rejection stops the embedded measurement and clears accessible GA cookies. Withdrawal does not affect prior lawful processing or automatically delete information already held by Google; use the privacy contact for requests. Clearing browser data or expiry after 180 days requires a new choice.
5. Evidence and embedded forms
Changes are logged with version, time, language, random event reference and, with a trusted proxy, IP address. Maintenance removes raw IP after 90 days and cookie-choice evidence after 180 days. Rejection may also be held in necessary local browser storage to block analytics during server failures. Embedded report forms may use category-based server-side measurement only after consent in the FixingLog context; no Google measurement script loads there either. Browser restrictions on embedding or cookies may prevent measurement. Cookies of the host website are governed by that website’s notice.
Version: 2026-10-20-v24.1