Cookie Policy
Last updated:
This page explains which cookies and similar storage technologies the MIKLOS CENTERI FIT site uses, why they are used, and how to change your choice at any time.
The technical names in the table below are the same in every language, because that is exactly how they appear in your browser.
What cookies are
A cookie is a very small text file a site saves in your browser and can read back on later visits. It is the ordinary way a site remembers something from one page to the next — that you have just signed in, for example.
Alongside cookies there are technologies that do the same job by other means, such as local storage and session storage. Legally what matters is the effect, not the technical name: storing or reading information on your device falls under the same rules either way. This page therefore treats them together.
Why we use them
Only for the things without which the site could not do what you asked of it:
- keeping your session alive after you sign in, so you are not logged out on every page;
- protecting the platform and limiting repeated sign-in or form submission attempts;
- remembering the language you chose, so it is not worked out afresh on every visit;
- remembering your cookie choice, so you are not asked again each time.
Session and persistent cookies
A session cookie is deleted automatically when you close your browser. A persistent cookie stays until its expiry date, or until you delete it.
Both cookies this site uses are persistent, with different lifetimes for different reasons: the authentication cookie expires after 14 days, so a session forgotten on a shared device does not stay valid indefinitely; the language cookie lasts a year, because a preference that expired within days would not be much of a preference.
First-party and third-party cookies
A first-party cookie is set by the site you are visiting. A third-party cookie is set by another domain loaded into the page — an advertising network, an analytics tool, an embedded video player — and it is the usual mechanism by which you are followed from one site to another.
Every technology this site uses is first-party. There is no third-party cookie at all, because no element is loaded from another domain: even the fonts are served from the site's own domain, so displaying a page generates no request to an external server.
Categories
The Cookie Settings panel divides these technologies into four categories. The first cannot be switched off; the other three stay off until you switch them on.
- Strictly Necessary — the site cannot work without them: authentication, security, language, and remembering your cookie choice. They are never used for tracking and cannot be disabled.
- Functional — would enable extra features supplied by third parties, such as embedded video. Optional.
- Analytics and performance — would measure how the site is used, so it can be improved. Optional.
- Marketing — would measure how well promotion works and allow relevant advertising on other platforms. Optional.
What is actually in use
The table below is the complete inventory. It contains no examples and nothing we might add later — only what the site uses now.
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
centeri_session | MIKLOS CENTERI FIT (first-party) | Cookie. Keeps your session alive after you sign in to the platform. It holds a random token; only a hash of it is kept in the database. It is HttpOnly, so JavaScript cannot read it, uses SameSite=Lax, and is marked Secure in production. It is created only when you sign in, never by visiting the public site. | Strictly necessary | 14 days |
mcf_locale | MIKLOS CENTERI FIT (first-party) | Cookie. Remembers the language you chose — ro, en or de. It holds one language code and no identifying information. SameSite=Lax. | Strictly necessary | 1 year |
mcf_consent | MIKLOS CENTERI FIT (first-party) | Local storage, not a cookie: it is never sent to the server with a request. Records which categories you accepted, the version of the consent model, and when you decided. It holds no personal identifier. | Strictly necessary | Until you clear this site's data in your browser |
What we do not use
The site loads no Google Analytics, Google Tag Manager, Google Ads, Meta Pixel, TikTok Pixel, Hotjar, Clarity or any other analytics or advertising tool. It shows no advertising, builds no profiles, and embeds no third-party content — no maps, no external video players, no social widgets.
The Instagram and Threads links in the footer are ordinary links. Your data reaches those platforms only if you choose to click through.
The optional categories exist in the settings panel because the consent mechanism was built before it was needed. Nothing is currently registered against them — the panel says so on each category. If we ever add something, the consent version changes, the switches return to off, and we ask you again before it loads.
Legal basis
Storing and reading information on your device is governed in Romania by Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, which implements the corresponding European directive.
The rule has two branches. Storage that is strictly necessary to provide the service you expressly asked for — staying signed in, receiving the site in the language you chose, not being asked the same cookie question twice — needs no consent. All three technologies in the table fall here.
Any optional technology needs your prior consent, given by a clear affirmative act. That is exactly what the Cookie Settings panel is for: nothing in the functional, analytics or marketing categories loads before you agree, and withdrawing agreement is as easy as giving it.
Where these technologies also involve processing personal data, the GDPR bases are those set out in the privacy policy: performance of the contract and pre-contractual steps, the legitimate interest in keeping the platform secure, and — for any optional technology — consent, Article 6(1)(a).
Managing your consent
On your first visit a notice appears offering to accept all optional categories, reject them all, or open Cookie Settings and choose individually. Rejecting is as visible and as easy as accepting, and the site works in full if you reject.
Your choice is remembered and can be changed at any time under Cookie Settings, a link available permanently in the footer of every page and at the end of this document. You can switch a category on today and off again tomorrow.
Switching a category off does more than change a saved value: the technologies in it are stopped and the cookies they created are cleared, as far as the browser allows.
Browser settings
Independently of the panel on this site, your browser lets you see, delete and block cookies, in general or for one site. The controls are usually under privacy settings, and clearing this site's data also removes the record of your cookie choice — you will be asked again on your next visit.
Note that deleting centeri_session signs you out of the platform, and blocking first-party cookies outright makes signing in impossible, because the session cannot be held without them.
Updates to this policy
This policy changes when the technologies the site uses change. If an optional technology is added, the table above is completed before it is switched on, and your consent is asked for again.
The version published here is the one in force, and the date of the last update is shown at the top of the page.
Contact
For any question about this policy or about how cookies are used, write to centerimiklos@gmail.com.
This document is provided for information purposes and does not constitute legal advice.
Back to the site