Terms, privacy and cookies — in plain sight.

planograma.com sets no cookies until you say it may. On a first visit every request the page makes goes to this site, nothing is written to your device, and the only thing kept there is the answer you give the banner — which is not a cookie either. The next section describes it in full.

Cookies are small files a website asks your browser to keep, so it can recognise you on the next page or the next visit. The site you are on can set them itself — those are first-party cookies — or let another company set them from its own domain, which are third-party cookies. Local storage does a similar job in a different place. This page covers all of it, for planograma.com, the site you are reading now.

Accept, and a Google Tag Manager container loads and brings eight measurement and advertising tools with it. They are named further down, with every cookie they set, what it is for and how long it lasts. Refuse, or leave the banner alone, and none of it loads: the pages, the forms and the links work exactly the same either way.

This site is run by Planograma S.R.L., 41 Mehadia Street, District 6, 060541 Bucharest, Romania — tax identification number 25520068, trade register number J2009005627409. “We” on this page means that company.

The Planograma WMS application is a separate product with its own sign-in, and this website does not link to it. Whatever it keeps in your browser while you work in it is outside this page.

When you answer the cookie banner, the answer is written to local storage under the key planograma.consent. It holds your three yes or no answers, the moment you answered, and a version number. There is no name in it, no visitor number and no IP address.

Local storage is not sent with requests, so this entry never reaches our servers or anyone else's. Only the page running in your browser can read it, and it carries no expiry date of its own — it stays until you clear it, or until the categories change and your answer stops counting. It exists for one reason — to honour the answer you gave, so the banner does not ask twice — and that is why it needs no consent of its own.

If your browser blocks storage, nothing is written and the banner asks again next time. In a private window the answer is kept only until you close the window.

Nothing else is stored until you accept. There is no sign-in cookie, because there is nothing to sign in to here; no security token; and no cookie that remembers your language, because the language is part of the address, as in /en/cookie-policy.

The banner offers three optional categories alongside one that is always on. Everything optional starts switched off and stays off until you switch it on.

Analytics and marketing work as a pair today, and we would rather explain that than let you think a half-answer does something it does not. All eight tools live in one container. Until each of them checks your answer for itself, loading that container for someone who accepted only one of the two categories would start the tools from the other one as well — so we load it only when both are accepted. Accept just one and nothing runs at all. When each tag carries its own check, the categories will work separately and this page will say so.

If we add a tool, or move one from one category to another, we will describe it here and ask you again, and your previous answer will not carry over. That has already happened once: everyone who answered the banner before Google Tag Manager arrived was asked again, because what they had answered was a question about a site that loaded nothing.

Accepting both optional categories loads Google Tag Manager — container GTM-NBXDVLH — from googletagmanager.com. Tag Manager sets nothing of its own; it is the box the following come out of.

• Google Analytics 4 (G-6Z6164LZ4J) — counts visits and pages and reports them to us as totals, so we can see which pages are read and which are not. Run by Google.
• Google's advertising side — because Analytics is linked to it, a visit is also reported to Google Ads — the requests to doubleclick.net and to google.com or google.ro you would see in a network panel — so that a campaign can be measured and an audience built from the people who have been here.
• Meta pixel (823637826312509) — tells Meta that a page here was opened, so that advertising on Facebook and Instagram can be measured and aimed.
• LinkedIn Insight Tag (partner 2888282) — the same, for advertising on LinkedIn.
• Microsoft Clarity (mk000q0m3n) — records how a page is used and can play the visit back: the movement of the pointer, the clicks, how far it was scrolled. What is typed into a form is masked by the tool.
• Hotjar (site 2285288) — the same kind of recording, with heat maps of where people click and how far down they read.
• theMarketer (KGPHRD6B) — marketing automation, run from Bucharest: it follows what is opened here so that campaigns can be built on it.
• Lead Forensics (account 797265) — takes the IP address a visit came from and matches it against a database of business networks, to tell us which companies have been reading the site. Its script is served from a domain that changes from time to time; at the time of writing it is www.365inspiredperceptive.com.

These are the cookies they leave. The first rows are set on planograma.com; the last two are set by those companies on their own domains, which is why this site cannot delete them for you — the last section says what to do instead.

Two more appear when the tool that sets them runs. Hotjar writes a pair on the same pattern as Clarity's — one lasting about a year, one about half an hour — and Google's advertising side writes _gcl_au for 90 days once an advert has been clicked.

Two things in that list are worth saying plainly. Clarity and Hotjar record a session, which is closer to watching than to counting; what they capture is movement and clicks, with the contents of form fields masked by the tools themselves. And Lead Forensics works from the IP address rather than from a cookie, which is why it appears above without one.

We do use Google Search Console. It reports which searches showed planograma.com in Google's own results, and how often people clicked. Those are Google's aggregated figures about its search engine, reported to us as the owner of the site. It runs no code on these pages, stores nothing on your device and reads nothing from it, so there is nothing to consent to.

Nothing else loads from anywhere else. There is no live chat widget, no embedded video and no map on any page of this website, and the two typefaces are served from our own domain, so opening a page asks Google for nothing at all until you have accepted.

The tools above are contracted through European companies: Google Ireland Limited, Meta Platforms Ireland Limited, LinkedIn Ireland Unlimited Company and Microsoft Ireland Operations Limited; Hotjar Ltd in Malta; theMarketer in Bucharest; Lead Forensics in the United Kingdom. Where what they collect reaches the United States, the transfer relies on the EU–US Data Privacy Framework for the companies certified under it and on the European Commission's standard contractual clauses otherwise. Write to [email protected] and we will tell you how it stands for your data.

With the Meta pixel and the LinkedIn Insight Tag, we and those companies decide together what is collected on this site and sent to them — joint control, art. 26 GDPR. What they do with it afterwards is theirs alone, and their own privacy notices govern it.

Links out are a different matter. The site links to LinkedIn and Facebook, to our help site, to press articles and to a few partner sites. Nothing is requested from any of them until you click. Once you are on their site, their cookies and their notices apply, not this one. Some links to partners carry a tag in the address so they can see the visit came from us — that reaches them only if you click. None of it gives us access to your account on LinkedIn, Facebook or anywhere else, and we have no way to get any.

The share button under a blog article works the same way: it opens LinkedIn in a new tab with the address of the article, and only when you press it. The copy-link button puts that address on your clipboard and sends it nowhere.

• Change your answer — Open Cookie settings: the button at the end of this page, or the same link in this page's contents list. Saving replaces the stored answer straight away.
• From any other page — Once you have answered the banner, a small cookie button sits in the bottom-right corner of every page and opens the same dialog. It is not shown on phones — on a phone, use the two controls on this page.
• Refuse everything — Choose Only necessary on the banner, or Reject all inside Cookie settings; they do the same thing. Optional categories start off, so refusing on a first visit leaves the site exactly as it is.
• Take it back after accepting — Reject all then does three things at once: the cookies those tools set on planograma.com are deleted, the page reloads, and the container is not loaded again. A script already running cannot be pulled out of an open page, so the page is replaced by one that never loads it.
• What that cannot reach — Cookies another company set on its own domain — LinkedIn's, Microsoft's — belong to that domain, and no page here is allowed to delete them. Clear them in your browser, or through those companies' own settings.
• Delete what is stored — Clear site data for planograma.com in your browser. Every browser can do this for one site: open the padlock or site-information icon next to the address and look for cookies and site data, or find the same list under the browser's privacy settings. That erases the planograma.consent entry as well, and the banner asks again on your next visit.
• Block storage in your browser — Nothing here breaks. The site needs no cookie to work, and with storage blocked the banner simply asks again each time.

Each of those companies has its own controls too, and they work wherever you meet that company rather than only here: Google's advertising settings and its Analytics opt-out add-on, the advertising preferences in your Facebook and LinkedIn accounts, and Hotjar's opt-out page. A browser's “do not track” setting is not one of them — none of these tools acts on it.

If we ever add a cookie, or a script that needs consent, we will describe it on this page before it runs and ask you again. The date at the top of this page shows when this text was last revised, and the version number changes with each approved revision.

A question about this page is a data protection question, so it goes to our data protection officer at [email protected]. [email protected] reaches us too, and is the address to use for anything else.