Version 2.2 · 1 October 2026
Which cookies A&A-EUcoins uses
Cookies and consent on A&A-EUcoins (ePrivacy).
1. Necessary cookies
Session, language and consent cookies are required for sign-in, security, language choice and saving consent preferences. They are not used for marketing profiling.
2. Optional categories
With your analytics consent, A&A-EUcoins sets its own aa_vid cookie with a random visitor identifier for up to 365 days. It is used for visit statistics for public sections; private page addresses, search queries and message contents are not included in these events. The aa_eucoins_presence session cookie supports the online visitor count. Presence entries count for three minutes and expire in Redis within six minutes without updates. Withdrawing consent stops optional analytics events and deletes aa_vid and aa_eucoins_presence. The cookie_consent cookie stores your choice for up to 365 days. Marketing cookies are not currently used. A random identifier is a pseudonym, not a guarantee of anonymity.
2a. List of cookies and similar technologies
Name, purpose, retention period and category:
- aa_eucoins_session – sign-in and security; up to 30 days with “Remember me”, otherwise up to 24 hours (necessary).
- aa_eucoins_admin_session – administration sign-in; up to 8 hours (necessary, administrators only).
- aa_eucoins_guest – guest checkout without an account; up to 30 days of inactivity (necessary).
- aa_eucoins_locale – chosen language; up to 12 months (necessary). The language may also be kept in the browser's localStorage (aa_eucoins_locale_preference).
- cookie_consent – your cookie choice; up to 12 months (necessary).
- aa_eucoins_reg_challenge – bot protection for the registration form; up to 15 minutes (necessary).
- aa_eucoins_trial_device – pseudonymous abuse protection for the free auction trial; up to 180 days (necessary).
- Cloudflare Turnstile – bot check at sign-in and registration; technical browser data is processed by Cloudflare (necessary for security).
- __stripe_mid, __stripe_sid – set by Stripe only when the payment form opens, for payment processing and fraud prevention; up to 12 months and 30 minutes (necessary for the requested payment).
- aa_vid, aa_eucoins_presence – first-party visit statistics; up to 12 months and until the session ends (only with analytics consent).
- Google Analytics 4 (Google Ireland Ltd.) – where enabled: _ga and _ga_* for visit statistics, up to 2 years; loaded only after analytics consent, truncated IP address, transfer to the USA based on the EU-US Data Privacy Framework (only with consent).
3. Choice and withdrawal
You can accept analytics, keep only necessary cookies or change your choice with the button on this page. Withdrawal applies for the future.
4. Legal basis
Storage of and access to information on a device is governed by TDDDG section 25. Optional technologies require prior informed consent; without consent only message transmission and functions strictly necessary for an expressly requested service are permitted. Subsequent personal-data processing also requires a GDPR legal basis.