Cookies and third parties

Effective from 10/1/2026

Working draft. The wording has not been reviewed and is not binding.

What fukamo.com stores in your browser, what for, for how long, and who besides us receives visitor data. We measured this list in a browser on 26 September 2026, before consent and after it, rather than writing it from memory.

Operator

Company: Typeface s. r. o.
Registered office: Nové nábrežie 15021/5, 058 01 Poprad, Slovakia
Company ID: 54372330
Tax ID: 2121649981
VAT number: SK2121649981
Email: support@fukamo.com
Service: Fukamo — https://fukamo.com

1. Before you consent

Until you choose, the site sets no cookie and your browser contacts no third party. Verified: a clean browser on fukamo.com had zero cookies after the page loaded, and every request went to fukamo.com only.

2. What we store in your browser

Essential items work without consent because what you asked for does not work without them. Everything else switches on only when you allow it, and each choice is separate.

fukamo:privacy:v1

Type: localStorage
Set by: Fukamo
Purpose: Remembers your choice so we do not ask on every visit.
Duration: The choice is honoured for 180 days; then we ask again and the new choice replaces it.
When: After you choose in the banner; essential.

fukamo:report-tab, fukamo:completed-report, fukamo-active-report

Type: sessionStorage and IndexedDB
Set by: Fukamo
Purpose: Keeps an open report when you reload the tab during an audit.
Duration: At most 8 reports; those older than 1 hour are deleted when you run another audit. Without another audit they stay until you clear the site data in your browser. sessionStorage until the tab is closed.
When: During an audit; essential.

fukamo:url-origins:v1, fukamo-audit-history-v1, fukamo-crawl-history-v1

Type: localStorage
Set by: Fukamo
Purpose: History: up to 8 recent domains, 12 audit results and 5 site crawls, including URLs and findings.
Duration: While consent is valid (180 days) or until you withdraw it.
When: Only with consent to “Address and audit history”.

_ga, _ga_*

Type: cookie (.fukamo.com)
Set by: Google (Google Analytics 4)
Purpose: Tells visits and sessions apart so we can see which pages are read.
Duration: 180 days
When: Only with consent to “Visitor analytics”.

fukamo-monitor

Type: HttpOnly cookie
Set by: Fukamo
Purpose: Access to a recurring check you created.
Duration: 180 days
When: Only when you explicitly create a recurring check.

__Host-fukamo_admin, __Host-fukamo_login, __Host-fukamo_gsc_oauth

Type: HttpOnly cookie
Set by: Fukamo
Purpose: Administrator sign-in to the operations overview.
Duration: Sign-in 12 hours; sign-in code and Search Console connection 10 minutes.
When: Administrators only; never set for visitors.

__Host-fukamo_account, __Host-fukamo_account_login, fukamo:panel-sidebar:v1

Type: HttpOnly cookie and localStorage
Set by: Fukamo
Purpose: Signs a customer in to the panel with their reports; in the browser the panel remembers a collapsed sidebar.
Duration: Sign-in 30 days, sign-in code 5 minutes; the sidebar choice until you clear it.
When: Only for customers who sign in to the panel; never set for visitors.

Google Tag Manager can load further tags without any change to our code. As of 26 September 2026 it loads Google Analytics only: after consent the browser contacted only www.googletagmanager.com and region1.google-analytics.com.

3. How to change or withdraw consent

Every page has a Cookie settings button in the footer. It opens the same choices as the banner; Reject optional withdraws history and analytics at once.
Withdrawing analytics stops measurement and deletes the _ga cookies in this browser. Verified on 26 September 2026: after rejecting, and after reloading the page, no cookie remained.
Rejecting history deletes the stored addresses and audit results. Withdrawal does not delete data Google Analytics has already received.

4. Who else receives data

The complete list of third parties to which the site or our server sends visitor and customer data. No other third party receives this data.

Hetzner Online GmbH

Located in: Germany
Receives: Everything our server processes: IP addresses in operational logs, audited addresses, customer e-mail addresses.
When: On every visit; it is our hosting provider.
Legal basis: Performance of a contract and legitimate interest in running the site (Art. 6(1)(b) and (f) GDPR); Hetzner is our processor.

Google Ireland Limited (Google Analytics, Google Tag Manager)

Located in: Ireland
Receives: Technical visit data and analytics identifiers; Fukamo page addresses without parameters or fragments, never audited addresses or form content.
When: Only after consent to analytics.
Legal basis: Consent (Art. 6(1)(a) GDPR).

Google PageSpeed Insights

Located in: Ireland (Google Ireland Limited)
Receives: The address of the audited page, so Lighthouse can measure it. Not your IP address or e-mail.
When: During an audit you started.
Legal basis: Performance of a contract — running the audit you requested (Art. 6(1)(b) GDPR).

GeoJS

Located in: Australia; Cloudflare infrastructure
Receives: The IP address, from which we derive an approximate country and city for the operations overview. We store only a shortened IP without its last number.
When: During an audit and a metadata check.
Legal basis: Legitimate interest in an overview of operations (Art. 6(1)(f) GDPR). We have no data processing agreement with this service.

PostHog

Located in: EU data centre (Frankfurt)
Receives: The event name (audit, PDF download, e-mail sent, checkout started, API call), the audited site's domain, numbers such as scores, duration or the count of copied addresses, the error type, the API key's label and a pseudonymous identifier that changes every day. Never an e-mail, a full address or your IP address.
When: On these events, from the server.
Legal basis: Legitimate interest in operational statistics (Art. 6(1)(f) GDPR).

Resend, Inc.

Located in: USA
Receives: Recipient e-mail addresses and the content of the report you send.
When: When you e-mail a report or receive an order e-mail.
Legal basis: Performance of a contract — delivering the e-mail you requested (Art. 6(1)(b) GDPR).

Stripe Payments Europe, Limited

Located in: Ireland
Receives: The buyer's e-mail, the amount and the payment details you enter directly on Stripe's payment page; we never see the card.
When: When you buy.
Legal basis: Performance of a contract and the legal duty to keep accounts (Art. 6(1)(b) and (c) GDPR); for payment details Stripe is a separate controller.

Zoho (the support@fukamo.com mailbox)

Located in: EU data centre
Receives: Your e-mail address and the content of your message.
When: When you write to us.
Legal basis: Legitimate interest in answering your message (Art. 6(1)(f) GDPR).

5. Changes

When a cookie or a third party is added, we list it here and change the effective date of this page.