Cookies

This Cookie Policy explains what cookies are, how INSPIRACIJA DIGITAL d.o.o. (“we”, “us”, “our”) uses cookies and similar technologies on www.inspiration-agency.com (the “Website”), and how you can manage your preferences.

This Cookie Policy should be read together with our Privacy Policy.

1) Who we are

INSPIRACIJA DIGITAL d.o.o.
Address: Srebrnjak 90A, 10000 Zagreb, Croatia
OIB: HR89556824634
Website: www.inspiration-agency.com
Email: info@inspiration-agency.com

2) What are cookies?

Cookies are small text files stored on your device (computer, phone, tablet) when you visit a website. Cookies help the site function, improve user experience, and provide information to website owners (and sometimes third parties).

We may also use similar technologies such as pixels, tags, and local storage (together referred to as “cookies” in this policy).

3) Why we use cookies and similar technologies

We use necessary technologies for essential website operation, security, form processing and remembering your consent choices where applicable. Necessary form and security processing is independent of optional advertising permissions.

We use Cloudflare Turnstile for form security and abuse prevention. During the form security/token flow, it may process technical request, device and network information according to the service's operation. This Website does not use Turnstile as advertising or analytics consent. See Cloudflare's Turnstile Privacy Addendum at https://www.cloudflare.com/turnstile-privacy-policy/ for information about the service.

Our first-party Consent Manager offers separate optional permissions for Analytics, Google Ads measurement, Meta Pixel, External Media and OpenAI Ads measurement. All optional permissions are OFF by default. These choices permit only technologies that are also configured and enabled.

Google Tag Manager manages the permitted tags and loads only after Analytics, Google Ads measurement or Meta Pixel permission. Google Analytics 4 measures approved public page use and interactions after Analytics permission, including successfully accepted Contact enquiries as generate_lead key events. Google Ads imports consented GA4 generate_lead, phone_click and email_click conversion events for campaign measurement and attribution. Analytics permission is required for these source events; the added Google advertising-data purpose also requires fresh Google Ads measurement permission. No separate Ads conversion or Conversion Linker tag is configured, and Enhanced Conversions are not configured. Google personalized advertising and remarketing remain disabled. Attribution is not guaranteed. Meta Pixel measures accepted Contact enquiries as Lead events and telephone/email link clicks as supplementary PhoneClick and EmailClick events after independent Meta Pixel permission and clean public-page checks. Link-click events do not include telephone numbers or email addresses and do not confirm completed calls or emails. The first-party tracking receiver validates permitted events without forwarding them to vendors or storing event payloads. Meta Conversions API is not configured.

4) Consent categories

A. Necessary

Necessary is always enabled and cannot be disabled through the consent interface. It supports essential operation, security, form processing and remembering your consent choice where applicable.

B. Analytics

Analytics is optional and OFF by default. It allows Google Analytics 4 to measure public page use and selected interactions, including accepted Contact enquiries and phone/email link clicks. It independently controls GA4 delivery. Google Ads conversion imports need these source events; the separate Google Ads measurement choice controls advertising storage and advertising-related user-data permission. Denying that separate choice does not establish that all account-side conversion imports stop.

C. Google Ads measurement and Meta Pixel

Google Ads measurement and Meta Pixel are independent optional choices, both OFF by default. Google Ads measurement allows advertising storage and Google use of advertising-related user data for conversion measurement and attribution through GA4-to-Google Ads conversion imports; Analytics permission is separately required for the source events. Google personalized advertising and remarketing remain disabled, and Enhanced Conversions are not configured. Meta Pixel allows eligible accepted Contact enquiries and phone/email link clicks to be shared with Meta for measurement; Meta may also use received data for further purposes under its applicable terms and privacy policy, including advertising/content personalization. No automatic Meta PageView is sent. Google consent settings do not restrict Meta processing. Earlier Marketing choices authorize neither new choice. Necessary forms work independently. See section 9 for the data processed and Privacy Policy section 7 for provider roles.

D. External Media / Google Maps

External Media is optional, separate from Analytics, Google Ads measurement and Meta Pixel, and OFF by default. The Google Maps iframe on Contact is blocked until you give External Media permission, including through LOAD MAP. The address and other contact information remain available without loading the map.

If you give permission, the Google Maps iframe may load and Google may process information under its own service and privacy terms. Google Maps is not Necessary.

E. OpenAI Ads measurement

With your separate OpenAI Ads measurement consent, our server sends OpenAI events for successfully accepted Contact enquiries and clicks on our telephone and email links to measure ChatGPT advertising results. A link click does not confirm a completed call or email. We send the event type, an opaque event identifier, the event time, the clean source-page URL and the original OpenAI advertising click reference, oppref, when available. Event and attribution identifiers may still constitute personal data. We rely on your consent under Article 6(1)(a) GDPR for this measurement and sharing. The source-page URL contains only our canonical domain and a verified public page path, without query strings, fragments, form contents or visitor-supplied data.

We omit the optional customer-matching payload. We do not send names, email addresses, telephone numbers, enquiry contents, hashed customer identifiers or Career application data to OpenAI. Visitor IP addresses and browser user-agent strings are omitted from CAPI event payloads. OpenAI receives the technical network information of our server connection. We do not load the OpenAI browser Pixel or SDK, create OpenAI Pixel cookies, or use Automatic Advanced Matching. Each event opts out of future user-level personalization; this does not describe all other processing permitted under OpenAI's applicable advertising terms.

OpenAI Ads consent is independent of Analytics, Google Ads measurement, Meta Pixel and External media, and is off until a recorded choice permits it. Existing Version 3 preferences never authorize OpenAI. You can refuse or withdraw consent using Cookie settings. Withdrawal stops new OpenAI events, clears our stored click reference and cancels pending requests where cancellation reaches our server. Once our server confirms a recorded withdrawal, that consent grant cannot authorize another delivery attempt or retry. It cannot recall information already transmitted. Necessary form processing remains independent of measurement consent.

5) First-party and third-party storage

Our first-party Consent Manager remembers your technical preferences in local storage in your browser. Necessary storage supports essential functions where applicable.

Optional Analytics, Google Ads measurement and Meta Pixel storage requires the relevant independent permission. Google Analytics uses _ga and _ga_JDR19WJB33 to distinguish browsers and maintain session state. Google documents a two-year default expiry, renewed on subsequent activity; browsers can shorten this, including a 400-day cap in Chrome. The current integration sets _gcl_au (Google advertising measurement) and _fbp (Meta browser identification) with a 90-day cookie expiry. Expiry may change when a cookie is renewed, and browser settings can delete it sooner. Provider scripts also use local storage, including _gcl_ls for Google and lastExternalReferrer/lastExternalReferrerTime for Meta; local storage has no automatic browser expiry. Effective _gcl_ls retention is unverified; the verified Meta script removes its values older than 90 days when eligible cleanup code runs, rather than guaranteeing deletion on day 90. Cookie expiry does not determine provider server retention. Google Analytics user/event retention depends on the account setting, including its activity-reset option; standard aggregated reports are outside that setting. The verified GA4 property is set to 14 months for event and user data, with reset on new user activity enabled; the reset applies to user data. Meta Business Tools Terms state a maximum two-year retention for Event Data, subject to those terms; this is not a universal retention limit for all Meta information. Google Ads provider-side retention remains unverified. Cookie settings lists the registered services and remaining retention uncertainties. Google Maps remains a separate External Media permission.

OpenAI Ads measurement is a fifth independent optional choice, off by default. Only after recorded consent, we may retain the original oppref from your page URL in first-party session storage under inspiration_openai_attribution. It is used only within the current tab, for at most 30 days and no later than consent expiry. We do not add persistence for campaign UTM parameters or a cross-tab customer identity. Closing the tab normally clears session storage; browser session restoration may retain it. Expired references are not used. Expiry timers and the next access remove them, although suspended tabs can delay physical deletion. Withdrawal clears this stored reference.

Our server holds a bounded delivery fingerprint in memory for up to ten minutes after an attempt sequence completes, to prevent duplicate delivery. We do not retain a durable OpenAI conversion outbox or persistent event payload records. Brief, bounded retries can occur while consent remains valid; failures, capacity limits, navigation or process loss can cause events to be dropped. These limits can reduce attribution completeness. The local storage periods do not establish OpenAI's provider-side retention period, which follows the applicable agreement, data-protection terms and legal requirements.

6) Consent storage and duration

The first-party consent record contains only the consent version, Necessary state, Analytics preference, Google Ads measurement preference, Meta Pixel preference, External Media preference, OpenAI Ads preference, update and expiry timing, and an opaque receipt reference when recording succeeds. It does not store your name, email, phone, account identifier, marketing profile or fingerprint.

We also record your explicit consent choices as server-side evidence linked to an immutable configuration and Privacy/Cookie Policy snapshot. The receipt contains an opaque request identifier, receipt identifier, server timestamp, versions, action and category choices. It does not contain your name, email, phone, IP address, User-Agent, fingerprint, form or application identifiers, CV data, raw URLs, query strings or referrers. Browser preference expiry does not delete this separate evidence; its retention period requires a separate decision.

Your saved consent choice has a maximum lifetime of 180 days. After it expires, the Website asks for a new choice and optional permissions return to OFF until you choose again. Browser settings may clear or prevent this local storage sooner.

Any storage used by an optional external service has its own duration. Our Cookie settings interface controls permission categories; it does not present a verified name-by-name cookie inventory or individual third-party cookie lifetimes.

The necessary first-party preference record includes the fifth independent OpenAI Ads choice after a Version 4 decision. Valid Version 3 preferences retain their original receipt, four choices and expiry until a new decision; they do not grant OpenAI consent. The maximum browser preference lifetime remains 180 days. Immutable server evidence of consent decisions has its own retention policy and is not automatically deleted by browser preference expiry.

To authenticate withdrawal or replacement of an OpenAI consent grant, we also store inspiration_openai_revocation in first-party local storage. It contains only an opaque consent receipt identifier, a verification proof and an expiry. It is used for consent management and is not sent to OpenAI or other measurement vendors. It expires no later than the associated preference, with a maximum of 180 days. A confirmed refusal removes it; a failed withdrawal may retain it so that recording can be retried. Our server preserves grant and withdrawal records under the existing consent-evidence retention policy, alongside the immutable consent decisions; no additional provider retention period is implied.

7) Consent and cookie management

We use our own first-party Consent Manager to display the banner, save technical preferences and allow preference changes or withdrawal of optional permissions.

The banner offers Accept all, Reject non-essential and Manage preferences. Accept all enables all optional permissions; Reject non-essential leaves only Necessary enabled. Manage preferences lets you choose Analytics, Google Ads measurement, Meta Pixel, External Media and OpenAI Ads measurement independently.

You can reopen Cookie settings in the footer at any time to change or withdraw optional permissions. Necessary remains enabled. If you reject optional permissions, essential website functions and form processing remain available, while Google Maps stays blocked unless you separately permit it.

Withdrawing an optional permission stops future optional delivery for that purpose and removes the map iframe if External Media is withdrawn. It does not delete information already transmitted to an external third party.

8) How to control cookies via your browser

You can also control cookies through your browser settings.

Most browsers allow you to:

• see which cookies you have,
• delete cookies,
• block third-party cookies or all cookies,
• set rules for specific sites.

Note:

If you disable essential cookies, parts of the Website may not work properly.

9) Information processed by consent and optional services

Our consent storage holds only the technical preference state described above. If you enable Google Maps, Google may process information such as your IP address and browser or device details in providing its service.

Our first-party event payloads contain selected page and interaction information and opaque conversion identifiers; delivery adds consent evidence. These event payloads exclude raw form contents, names, emails, telephone numbers, CVs, raw URL queries and referrers. Google and Meta scripts separately process technical information: browser/device details, page URLs and available browser identifiers; Google measurement requests can also include the page title. Requests expose network information, including the IP address, to the receiving provider. Our GA4 page URL excludes queries and fragments, and its referrer field is empty. Meta events require a public page with no query, fragment or referrer. Existing provider identifiers may include advertising-click identifiers where available; they are not fields added to our semantic payloads. The added permission for Google to use advertising-related user data for conversion measurement and attribution requires fresh Google Ads measurement consent under the updated notice. Google personalized advertising and remarketing remain disabled. Google Enhanced Conversions are not configured. INSPIRACIJA DIGITAL operates the first-party receiver. Meta may also use received data for further purposes under its applicable terms and privacy policy, including advertising/content personalization; Google consent settings do not restrict Meta processing. Privacy Policy section 7 explains the providers’ roles. See section 5 for storage and retention.

For more information on how we process personal data, see our Privacy Policy.

10) Updates to this Cookie Policy

We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.

11) Contact

If you have questions about our use of cookies, contact us at: info@inspiration-agency.com