In short
- We only use our own cookies and browser storage, with no advertising or tracking scripts from other companies.
- Essential ones (account, cart, security, language, your banner choice) work without consent, because the site cannot work without them.
- Detailed visit statistics only start if you accept the “Analytics” category.
- We do not use advertising cookies. We remember in your browser which promotional messages (popups) you have seen from one visit to the next only if you accept the “Marketing” category, so they do not show up too often.
1.What cookies are
Cookies are small text files that a website saves in your browser and reads on later visits. Besides cookies, the demo.tivona.ro site also uses browser storage (localStorage and sessionStorage), which works in a similar way, but whose data stays in your browser and is not sent to the server automatically. In this policy, “cookies” means all of these technologies.
Under Article 4(5) and (6) of Romanian Law no. 506/2004, we may store or read information on your device without your consent only when it is strictly necessary for a service you ask for (for example, your shopping cart or signing in to your account). For anything else we ask for your consent first, through the cookie banner.
The site is operated by Calantha S.R.L.. All the cookies described here are first-party: they are set by our own site, not by other companies.
2.Cookie categories
We use the same three categories you see in the cookie banner:
- Essential
Needed for the basic features you use: signing in, your shopping cart, security, your chosen language and remembering your choice in the banner. They do not require your consent and cannot be switched off in the banner, because the site does not work properly without them.
- Analytics
Our own statistics about how the site is used: which pages are visited, which site visitors come from and how long they stay on a page. We do not use external analytics services (such as Google Analytics) and we do not set cookies for this: the only thing stored in your browser is the
synux_sidsession identifier, and only after you accept this category.If you decline or make no choice, your visit is only added to a daily total, with no page, source or identifier.
- Marketing
If you accept this category, we remember in your browser, from one visit to the next, which promotional messages (popups) you have seen, closed or used, and whether you have subscribed to the newsletter from this browser, so the messages do not show up too often. We do not use advertising or remarketing cookies (for example ad pixels); if we ever add any, we will describe them here and enable them only with your consent.
Without consent for this category, we store nothing when a promotional message is shown to you. Only after you close or use one do we remember it, until you close the tab or browser, so it does not appear again during the same visit (section 3).
3.List of cookies and browser storage
The table below shows everything the site may store in your browser. Some items only appear when you use the related feature (for example, after you sign in or add a product to your cart).
| Name | Provider | Purpose | Category | Duration | Type |
|---|---|---|---|---|---|
__Secure-authjs.session-token | Tivona (first party) | Keeps you signed in to your account after you log in. Its content is signed and encrypted.If the session is large, it is split across several cookies with the suffixes .0, .1 and so on. | Essential | 30 days, extended while you use your account; deleted when you log out | Cookie |
__Host-authjs.csrf-token | Tivona (first party) | Protects sign-in against requests sent on your behalf by other websites (CSRF). | Essential | Session: deleted when you close your browser | Cookie |
__Secure-authjs.callback-url | Tivona (first party) | Remembers the page to return to after you sign in. | Essential | Session: deleted when you close your browser | Cookie |
unit.2fa_trust | Tivona (first party) | Only if you have turned on two-step verification and chosen to remember the device: a random code that lets you sign in on this browser without the code from your authenticator app. You can revoke it at any time under Security in your account. | Essential | 30 days (7 days for administrator accounts) | Cookie |
NEXT_LOCALE | Tivona (first party) | Remembers your chosen language (Romanian or English), only after you change it on the site. | Essential | 1 year (365 days) | Cookie |
userOption | Tivona (first party) | Remembers that you have made a choice in the cookie banner (accepted all, declined or customised), so it does not appear on every visit. | Essential | 1 year (365 days) | Cookie |
essentialanalyticsmarketing | Tivona (first party) | Store your consent for each banner category (“true” or “false”). The site reads them before starting any statistics. | Essential | 1 year (365 days) | Cookie |
unit_ref | Tivona (first party) | Only if you open a referral link: remembers that link’s code, so the reward goes to the person who sent it to you if you create an account or place an order. It contains no data about you and is not shared with other companies.The referral programme is not currently active, so this cookie is not set. | Essential | 30 days | Cookie |
synux_sid | Tivona (first party) | Only if you accept the “Analytics” category: a random visit identifier, so our statistics can link the pages viewed in the same session. It is deleted straight away if you withdraw consent. | Analytics | Until you close the tab or browser | Session storage (sessionStorage) |
UNIT-cart-storage | Tivona (first party) | Keeps the products in your cart and any coupon you entered, so you do not lose them when you close the page. | Essential | No automatic expiry: stays until you clear it or delete the site’s data in your browser | Local storage (localStorage) |
tivona-ritual-answers | Tivona (first party) | Remembers your answers to the skin analysis, so you can come back to your result without retaking the questionnaire. The analysis runs in your browser: your answers never reach us, are not linked to an account and are not sent to anyone.You can delete them at any time, from the “Retake the analysis” button on the result page. | Essential | 180 days from your last answer; after that they delete themselves | Local storage (localStorage) |
unit-wishlist-storage | Tivona (first party) | Keeps the products you add to your favourites on this device. | Essential | No automatic expiry: stays until you clear it or delete the site’s data in your browser | Local storage (localStorage) |
announcement_seen_…announcement_closed_… | Tivona (first party) | Remember when you first saw an announcement in the bar at the top of the site, so a time-limited announcement stops showing once it expires, and whether you closed an announcement. | Essential | No automatic expiry: stays until you clear it or delete the site’s data in your browser | Local storage (localStorage) |
unit_popup:…unit_nl | Tivona (first party) | Only if you accept the “Marketing” category: remembers which promotional messages (popups) you have seen, closed or used, and when, so that each one appears no more often than set for it (for example only once, or once every few days), and whether you have subscribed to the newsletter from this browser, so the sign-up window stops appearing.If you withdraw consent, we stop reading and writing them; anything already saved stays until you delete the site’s data in your browser. | Marketing | No automatic expiry: stays until you clear it or delete the site’s data in your browser | Local storage (localStorage) |
unit_popup:…unit_popup_session | Tivona (first party) | Only if you accept the “Marketing” category: remembers which promotional messages you have seen during the current visit, so they do not appear again and you never see more than the maximum set for one visit. | Marketing | Until you close the tab or browser | Session storage (sessionStorage) |
unit_popup:…unit_nl | Tivona (first party) | Without “Marketing” consent, only after you close or use a promotional message (popup), subscribe from it or confirm your newsletter subscription: remembers this, so the message does not appear again during the same visit. When a message is merely shown to you, we store nothing. | Essential | Until you close the tab or browser | Session storage (sessionStorage) |
unit-admin-uiunit:chart:… | Tivona (first party) | Only for the shop’s staff, in the admin panel: remember how the side menu is displayed and which chart type was chosen. | Essential | No automatic expiry: stays until you clear it or delete the site’s data in your browser | Local storage (localStorage) |
Cookies and browser storage used by the site: name, provider, purpose, category, duration and type
Name:
__Secure-authjs.session-token- Provider
- Tivona (first party)
- Purpose
- Keeps you signed in to your account after you log in. Its content is signed and encrypted.If the session is large, it is split across several cookies with the suffixes .0, .1 and so on.
- Category
- Essential
- Duration
- 30 days, extended while you use your account; deleted when you log out
- Type
- Cookie
Name:
__Host-authjs.csrf-token- Provider
- Tivona (first party)
- Purpose
- Protects sign-in against requests sent on your behalf by other websites (CSRF).
- Category
- Essential
- Duration
- Session: deleted when you close your browser
- Type
- Cookie
Name:
__Secure-authjs.callback-url- Provider
- Tivona (first party)
- Purpose
- Remembers the page to return to after you sign in.
- Category
- Essential
- Duration
- Session: deleted when you close your browser
- Type
- Cookie
Name:
unit.2fa_trust- Provider
- Tivona (first party)
- Purpose
- Only if you have turned on two-step verification and chosen to remember the device: a random code that lets you sign in on this browser without the code from your authenticator app. You can revoke it at any time under Security in your account.
- Category
- Essential
- Duration
- 30 days (7 days for administrator accounts)
- Type
- Cookie
Name:
NEXT_LOCALE- Provider
- Tivona (first party)
- Purpose
- Remembers your chosen language (Romanian or English), only after you change it on the site.
- Category
- Essential
- Duration
- 1 year (365 days)
- Type
- Cookie
Name:
userOption- Provider
- Tivona (first party)
- Purpose
- Remembers that you have made a choice in the cookie banner (accepted all, declined or customised), so it does not appear on every visit.
- Category
- Essential
- Duration
- 1 year (365 days)
- Type
- Cookie
Name:
essentialanalyticsmarketing- Provider
- Tivona (first party)
- Purpose
- Store your consent for each banner category (“true” or “false”). The site reads them before starting any statistics.
- Category
- Essential
- Duration
- 1 year (365 days)
- Type
- Cookie
Name:
unit_ref- Provider
- Tivona (first party)
- Purpose
- Only if you open a referral link: remembers that link’s code, so the reward goes to the person who sent it to you if you create an account or place an order. It contains no data about you and is not shared with other companies.The referral programme is not currently active, so this cookie is not set.
- Category
- Essential
- Duration
- 30 days
- Type
- Cookie
Name:
synux_sid- Provider
- Tivona (first party)
- Purpose
- Only if you accept the “Analytics” category: a random visit identifier, so our statistics can link the pages viewed in the same session. It is deleted straight away if you withdraw consent.
- Category
- Analytics
- Duration
- Until you close the tab or browser
- Type
- Session storage (sessionStorage)
Name:
UNIT-cart-storage- Provider
- Tivona (first party)
- Purpose
- Keeps the products in your cart and any coupon you entered, so you do not lose them when you close the page.
- Category
- Essential
- Duration
- No automatic expiry: stays until you clear it or delete the site’s data in your browser
- Type
- Local storage (localStorage)
Name:
tivona-ritual-answers- Provider
- Tivona (first party)
- Purpose
- Remembers your answers to the skin analysis, so you can come back to your result without retaking the questionnaire. The analysis runs in your browser: your answers never reach us, are not linked to an account and are not sent to anyone.You can delete them at any time, from the “Retake the analysis” button on the result page.
- Category
- Essential
- Duration
- 180 days from your last answer; after that they delete themselves
- Type
- Local storage (localStorage)
Name:
unit-wishlist-storage- Provider
- Tivona (first party)
- Purpose
- Keeps the products you add to your favourites on this device.
- Category
- Essential
- Duration
- No automatic expiry: stays until you clear it or delete the site’s data in your browser
- Type
- Local storage (localStorage)
Name:
announcement_seen_…announcement_closed_…- Provider
- Tivona (first party)
- Purpose
- Remember when you first saw an announcement in the bar at the top of the site, so a time-limited announcement stops showing once it expires, and whether you closed an announcement.
- Category
- Essential
- Duration
- No automatic expiry: stays until you clear it or delete the site’s data in your browser
- Type
- Local storage (localStorage)
Name:
unit_popup:…unit_nl- Provider
- Tivona (first party)
- Purpose
- Only if you accept the “Marketing” category: remembers which promotional messages (popups) you have seen, closed or used, and when, so that each one appears no more often than set for it (for example only once, or once every few days), and whether you have subscribed to the newsletter from this browser, so the sign-up window stops appearing.If you withdraw consent, we stop reading and writing them; anything already saved stays until you delete the site’s data in your browser.
- Category
- Marketing
- Duration
- No automatic expiry: stays until you clear it or delete the site’s data in your browser
- Type
- Local storage (localStorage)
Name:
unit_popup:…unit_popup_session- Provider
- Tivona (first party)
- Purpose
- Only if you accept the “Marketing” category: remembers which promotional messages you have seen during the current visit, so they do not appear again and you never see more than the maximum set for one visit.
- Category
- Marketing
- Duration
- Until you close the tab or browser
- Type
- Session storage (sessionStorage)
Name:
unit_popup:…unit_nl- Provider
- Tivona (first party)
- Purpose
- Without “Marketing” consent, only after you close or use a promotional message (popup), subscribe from it or confirm your newsletter subscription: remembers this, so the message does not appear again during the same visit. When a message is merely shown to you, we store nothing.
- Category
- Essential
- Duration
- Until you close the tab or browser
- Type
- Session storage (sessionStorage)
Name:
unit-admin-uiunit:chart:…- Provider
- Tivona (first party)
- Purpose
- Only for the shop’s staff, in the admin panel: remember how the side menu is displayed and which chart type was chosen.
- Category
- Essential
- Duration
- No automatic expiry: stays until you clear it or delete the site’s data in your browser
- Type
- Local storage (localStorage)
On secure (HTTPS) connections, the names of the sign-in cookies start with the __Secure- or __Host- prefix, which tells the browser to send them only over encrypted connections.
4.Cookies from other websites
Our pages do not currently load scripts from other companies that set cookies: we do not use Google Analytics, advertising pixels (such as the Meta / Facebook Pixel or Google Ads), maps or embedded videos. Product images and the photos in Google reviews shown on the site are delivered through our own server.
If you pay by card, you are taken to the secure page of the payment processor; its own cookie policy applies there. Likewise, if you follow a link to our Instagram or Facebook pages or to another website, that website’s cookies are governed by its own policies.
5.How to give or withdraw consent
- On your first visit, the cookie banner gives you three options: “Accept all”, “Decline” and “Manage preferences”. Declining is as easy as accepting, and we do not start detailed statistics until you choose.
- Once you have chosen, a round button with a cookie icon (labelled “Cookies”) stays in the bottom left corner of the page. Press it at any time to reopen your preferences, switch the “Analytics” and “Marketing” categories on or off, and press “Save preferences”.
- Withdrawing consent takes effect straight away, without reloading the page: detailed statistics stop and the
synux_sididentifier is deleted from your browser. Withdrawal does not affect processing carried out before it. - If you withdraw your “Marketing” consent, we stop reading and saving in local storage which promotional messages you have seen. Anything already saved is not deleted automatically: it stays in your browser, unused while your consent is withdrawn, until you delete the site’s data in your browser settings.
- Your choice is kept for one year. After that, or if you delete cookies in your browser, the banner appears again.
6.Browser settings
You can view and delete the cookies and data saved by websites at any time in your browser settings, usually under “Privacy” or “Privacy and security” (in Chrome, Edge, Firefox, Safari and others). From there you can also block all cookies or only those from other websites.
Good to know
If you block or delete the cookies in the “Essential” category and the browser storage, you will not be able to sign in, your cart will be emptied and your banner choice will be lost. In private browsing mode, all of this is deleted when you close the window.
7.Personal data
Some of this information, such as your account session or the visit identifier, is personal data. What data we use, how long we keep it and your rights are explained in our Privacy policy.
Detailed visit statistics are kept on our server for 400 days. Your IP address is not saved: an irreversible identifier that changes every day is calculated from it and your browser type.
For any question about cookies, write to us at contact@tivona.ro.
8.Changes to this policy
We update this policy when the site starts using different cookies or when the law changes. The new version is published on this page with the date of the last update. If we add a new category that needs your consent, or use an existing category for a new purpose (for example ad pixels under “Marketing”), we will ask for it again through the banner before using it (section 2).