Cookie Policy
Last updated: August 20, 2026
This policy explains what estaid.com stores on your device, why, and
how you change your mind. It covers cookies and the technologies that work
like them — browser localStorage, sessionStorage, and tracking pixels.
We treat all of them the same way: if it is not strictly necessary to run
the site, we do not use it until you have said yes.
1. Who is responsible
- ESTAID ApS
- Store Kongensgade 65A, ST., 1264 Copenhagen K, Denmark
- CVR: 46213998
- Email: privacy@estaid.com
We are the data controller for the storage described here. How we handle personal data more generally is covered in our Privacy Policy.
2. How we ask for your consent
The first time you visit, a dialog asks you to choose between three categories:
| Category | Can you turn it off? |
|---|---|
| Essential | No — without it the site cannot sign you in or remember your choice |
| Analytics | Yes — off unless you switch it on |
| Marketing | Yes — off unless you switch it on |
Nothing is pre-ticked. Until you choose, no analytics or marketing technology loads at all. The categories are independent: you can accept analytics and refuse marketing, or the reverse.
Your choice is stored on your own device (see estaid_cookie_consent
below) and is not transmitted to us. Because it is stored per browser, you
will be asked again on a different browser or device, or after clearing
your browsing data.
3. Essential storage
Always active. These are strictly necessary to deliver the service you asked for, so they do not require consent (ePrivacy Directive Art. 5(3); GDPR Art. 6(1)(b)).
| Name | Type | Purpose | Retention |
|---|---|---|---|
__session | Cookie | Keeps you signed in. Issued by Firebase Authentication, HttpOnly, SameSite=Lax | 14 days |
estaid_session | Cookie | Tells the page that a sign-in session exists, so it does not flash a signed-out state | 14 days |
estaid_cookie_consent | localStorage | Your answer to the dialog above, so we do not ask again on every page | Until you clear it |
estaid_wizard_v2 | localStorage | Holds your answers in the property guide until you save them to your account | Until saved or cleared |
estaid_partner_category, estaid_partner_verified | localStorage | Remembers the filters you last used on the partner directory | Until you clear it |
These contain no advertising identifiers, and nothing in this category is shared with a third party for their own purposes.
4. Analytics
Loaded only if you accept the Analytics category. Legal basis: your consent (GDPR Art. 6(1)(a); ePrivacy Directive Art. 5(3)).
We use these to see which pages get used and where people get stuck, so we can fix the parts that do not work.
| Provider | Names | Purpose | Retention |
|---|---|---|---|
Google Analytics 4 (G-476SXJJ1YQ) | _ga, _ga_<id> | Distinguishes visitors and sessions to produce aggregate usage reports | 2 years |
Microsoft Clarity (tmxg6p5vqg) | _clck, _clsk, CLID, MUID | Records anonymised page interactions — clicks, scrolling, rage-clicks — to show where the interface fails | _clsk 1 day; others up to 1 year |
Microsoft Clarity records how you move through a page. It masks text input by default, so what you type into forms is not captured.
5. Marketing
Loaded only if you accept the Marketing category. Legal basis: your consent (GDPR Art. 6(1)(a); ePrivacy Directive Art. 5(3)).
We use these to measure which ads bring people to Estaid, so the budget goes to what actually works.
| Provider | Names | Purpose | Retention |
|---|---|---|---|
| Meta Pixel | _fbp, _fbc | Identifies the browser to Meta so a signup can be attributed to the ad that led to it | 90 days |
Google Ads (AW-17957860703) | _gcl_au | Attributes a conversion to a Google Ads click | 90 days |
Meta Conversions API
When you sign up or complete another tracked action and you have accepted Marketing, we also send the same event to Meta from our own server (Meta's Conversions API) rather than only from your browser. This is the server-side twin of the pixel, not an extra source of data: it carries the same event, plus contact details you have already given us — such as email address — which are hashed with SHA-256 before they leave our server, so Meta receives an irreversible fingerprint rather than the value itself. If you refuse Marketing, no such event is sent.
Campaign parameters captured on arrival
When you arrive from an ad or a campaign link, the URL carries parameters
identifying it (utm_source, utm_campaign, gclid, fbclid, and
similar). We store those in localStorage — under estaid_first_utm,
estaid_last_fbclid and estaid_campaign_* — as you land, before you have
answered the dialog, because they disappear from the address bar as soon as
you navigate.
They stay on your device and are used for two things only: attaching the
source of your visit to your account if you go on to create one, and
building the _fbc value if you accept Marketing. If you refuse
Marketing and never sign up, they are never transmitted anywhere. You can
remove them at any time by clearing this site's data in your browser.
6. Third parties and transfers outside the EU/EEA
The analytics and marketing providers above are independent recipients of the data their technology collects, and each has its own policy:
- Google Ireland Limited — Google Analytics and Google Ads: https://policies.google.com/privacy
- Microsoft Ireland Operations Limited — Clarity: https://privacy.microsoft.com/privacystatement
- Meta Platforms Ireland Limited — Pixel and Conversions API: https://www.facebook.com/privacy/policy
All three may process data on servers in the United States. Those transfers rely on the EU–U.S. Data Privacy Framework and/or the European Commission's standard contractual clauses.
We do not sell your data, and we do not load third-party advertising networks beyond the two named above.
7. Changing or withdrawing your choice
Withdrawing is as easy as giving — you do not need to contact us.
- Cookie settings — the link in the site footer reopens the dialog with your current choice shown. Saving a narrower choice takes effect immediately; the page reloads so that any script you have just switched off is unloaded.
- Your browser — you can block or delete cookies and site data for estaid.com through your browser's settings. Doing so also clears your stored consent, so you will be asked again on your next visit. Blocking essential cookies will sign you out and may break parts of the site.
- Provider opt-outs:
- Google Analytics browser add-on: https://tools.google.com/dlpage/gaoptout
- Google ads settings: https://myadcenter.google.com
- Meta ad preferences: https://www.facebook.com/adpreferences
Withdrawing consent does not affect the lawfulness of processing carried out while consent was in place.
8. Changes to this policy
If we add or remove a technology in a way that affects what is stored on your device, we update this page and ask for consent again where the law requires it. Material changes are announced on the site.
9. Contact
Questions about this policy, or about the data any of the above collected from you, go to privacy@estaid.com. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet, https://www.datatilsynet.dk).
ESTAID ApS — Store Kongensgade 65A, ST., 1264 Copenhagen K, Denmark