# Cookie policy

> Which cookies this site uses, what they are for and how to manage consent.

## 1. What cookies are

Cookies are small text files a website stores in your browser. In this policy, "cookies" also covers similar technologies: `localStorage` and pixels.

## 2. Necessary cookies (always on)

Required for the site to work — forms, security mechanisms and remembering your consent depend on them. No consent is needed (legal basis: legitimate interest in keeping the site working and secure).

| Name | Set by | Purpose | Duration |
| --- | --- | --- | --- |
| `klinika-2x2-session` | This site | Keeps your session so a form you are filling in does not lose its data | 2 hours |
| `XSRF-TOKEN` | This site | Protects forms against forged requests (CSRF) | 2 hours |
| `cm_consent` (`localStorage`) | This site | Remembers your cookie banner choice so we don't ask on every visit | Until changed or browser data is cleared |
| `__cf_bm` | Cloudflare | Tells humans from automated bots in the network protecting the site | 30 minutes |

## 3. Analytics cookies (with consent)

Help us understand how the site is used so we can improve it. They are not set until you consent (legal basis: consent, GDPR Art. 6(1)(a)).

| Name | Set by | Purpose | Duration |
| --- | --- | --- | --- |
| `_ga` | Google Analytics 4 | Tells returning visits apart from new ones | 2 years |
| `_ga_<ID>` | Google Analytics 4 | Keeps the state of the current visit (session) | 2 years |
| `_clck` | Microsoft Clarity | Ties a visitor's actions to one Clarity identifier | 1 year |
| `_clsk` | Microsoft Clarity | Joins the page views of a single visit into one recording | 1 day |
| `CLID` | Microsoft Clarity (`clarity.ms`) | Recognises the browser on its first visit | 1 year |

## 4. Advertising cookies (with consent)

Used only while we run advertising campaigns, and only after you consent.

| Name | Set by | Purpose | Duration |
| --- | --- | --- | --- |
| `_fbp` | Meta (Facebook) Pixel | Links a visit to an ad click so we can measure a campaign's result | 90 days |
| `fr` | Meta (`facebook.com`) | Ad delivery and audience building | 90 days |

## 5. Embedded map

We use an embedded **Google Maps** map to show the clinic's location. It loads from Google's servers as soon as a page carrying the map opens, so Google may set its cookies before you make a choice in the cookie banner.

| Name | Set by | Purpose | Duration |
| --- | --- | --- | --- |
| `NID` | Google (`google.com`) | Remembers map settings and security parameters | 6 months |
| `CONSENT` | Google (`google.com`) | Stores your choices across Google services | Up to 2 years |

If you would rather the map did not load, block third-party cookies in your browser settings — the site keeps working, you will simply see an empty area where the map would be.

## 6. Managing your consent

On your first visit the site shows a cookie banner — analytics and advertising cookies stay off until you consent. You can change your choice by clearing the site data in your browser settings (the banner reappears) or by blocking cookies in the browser. Consent signals are handled via Google Consent Mode v2.

For more on how we handle personal data, see the [Privacy policy](https://www.klinika2x2.lt/en/privacy-policy).

In short: besides the necessary cookies, this site uses only analytics (Google Analytics, Microsoft Clarity) and advertising (Meta Pixel) cookies — and only after your consent. You can change your choice at any time.