Cookie Policy

Effective date: 3 November 2026 · Version: 3.2

This policy explains how SALTPIXEL Ltd (trading as M A L A K A, Cyprus reg. no. HE 484960) uses cookies and similar technologies on www.malaka.cy, its sub-domains and the customer project portal (the "Website"), and in our Apps. It forms part of our Privacy Policy.

1.1 What cookies are. Cookies are small text files a website stores in your browser. "Similar technologies" includes:

  • local and session storage;
  • pixels and tags;
  • software development kits (SDKs) in apps;
  • scripts that read information from your device, such as screen size or graphics renderer.

In this policy, "cookies" covers all of them.

1.2 The law. Under the ePrivacy rules, as implemented in Cyprus by Law 112(I)/2004 and applied by the Commissioner for Personal Data Protection, we may store or read information on your device only:

  • when it is strictly necessary to provide the service you asked for; or
  • with your prior, informed and freely given consent.

Where cookies collect personal data, the GDPR (and Cyprus Law 125(I)/2018) also applies: our legal basis for strictly necessary cookies is the performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR) and our legitimate interest in running a secure, functional Website (Art. 6(1)(f) GDPR); for all other cookies, our legal basis is your consent (Art. 6(1)(a) GDPR).

1.3 Our approach.

  • Strictly necessary cookies are always on.
  • Every other category is off by default and loads only after you click "Accept" or switch it on in "Cookie settings".
  • Equal choice. "Reject all" is as easy as "Accept all".
  • Your choice is remembered for 6 months, then we ask again.

2. Cookies we use

2.1 Categories

Category

What it does

Consent

Strictly necessary

Security, bot protection, load balancing, your quote and portal session, your cookie choice, the WordPress login for our staff

Not required (always on)

Preferences

Remember language and display choices

Required

Statistics (Analytics)

Count visits and measure how pages perform, so we can improve the Website

Required

Marketing

Measure our advertising, load marketing media and show M A L A K A ads to past visitors on other platforms

Required

Embedded content

Videos, maps and social posts from other providers, which may set their own cookies

Required, or loaded only when you click

2.2 Cookie list

Name

Provider

Purpose

Duration

Category

__cf_bm

Cloudflare

Distinguishes humans from bots

30 minutes

Strictly necessary

cf_clearance

Cloudflare

Records that a security check was passed

Up to 1 year

Strictly necessary

Turnstile (no cookie; reads browser signals)

Cloudflare

Bot protection on the quote form

Session

Strictly necessary

iqa_* (local storage)

SALTPIXEL

Keeps your quote, chat and project-portal session

Session to 7 days

Strictly necessary

wordpress_*, wp-settings-*

SALTPIXEL (WordPress)

Staff login and admin settings; not set for visitors

Session / 1 year

Strictly necessary

malaka_consent

SALTPIXEL (MALAKA GDPR)

Stores your cookie choices

180 days (6 months)

Strictly necessary

trp_language

SALTPIXEL (TranslatePress)

Remembers your selected language

30 days

Preferences

_ga, _ga_*

Google Analytics 4

Distinguishes users for statistics

2 years

Statistics

_gid

Google Analytics

Distinguishes users for 24-hour statistics

24 hours

Statistics

vuid

Vimeo

Assigns a unique ID for embedded video player analytics and preferences

2 years

Marketing / Embedded content

2.3 Google Consent Mode. We use Google Consent Mode v2 to pass your consent status to Google tags. Until you give consent for Statistics or Marketing, no analytics or advertising cookies are set on your device.

2.4 Third-party cookies and international transfers. Providers marked as third parties process data under their own privacy policies and, for marketing tools, may act as independent or joint controllers. Because providers such as Google, Vimeo and Cloudflare are based in the United States, data collected via their cookies may be transferred outside the European Economic Area (EEA) under the EU–US Data Privacy Framework (DPF) and/or the European Commission's Standard Contractual Clauses (SCCs). Their policies:

3. Device information and our Apps

3.1 Device information on the Website. With your consent only, the quote calculator and chat read technical details from your browser. These are device type and approximate model, operating system, browser, screen size and pixel density, memory and processor cores, graphics renderer and touch support. Our technical team uses them to tailor your quote and, mostly in aggregated form, to improve our designs, technical services and products.

This is not a cookie, but it is reading information from your device, so the same consent rules apply. You give consent with the "Tailor my quote" box or the chat consent statement. Nothing is read if you don't. You can withdraw consent at any time by emailing omar@emarketing.cy (or privacy@malaka.cy).

3.2 SDKs in our Apps. Our Apps use these software development kits.

SDK

Purpose

Consent

Firebase Cloud Messaging / Apple Push Notification service

Delivers notifications

Your device's notification permission

Stripe SDK

In-app deposits and payments

Not required (needed for the payment you request)

Apps do not use browser cookies, but the same principles apply. Non-essential SDKs stay off until you agree, and you can change your choice in the App's Settings → Privacy.

4. Managing your choices

  • On the Website: click the "Cookie settings" button at any time (or use the controls below) to accept, reject or change each category. Withdrawing consent is as easy as giving it.
  • In your browser: you can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop the quote tool or portal from working.
  • For ads: you can also manage ad personalisation at adssettings.google.com and in your Meta and LinkedIn ad preferences, and opt out through youronlinechoices.eu.
  • In Apps: change permissions and tracking choices in your device settings, or in the App's Privacy settings.

5. Changes and contact

We update this policy when we add or remove cookies or tools. The effective date shows the current version. If a change needs new consent, the banner asks you again.

Under the GDPR, you have the right to request access to, rectification or erasure of, or restriction of processing of personal data collected via cookies, as well as the right to data portability, the right to object to processing based on legitimate interests, and the right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). See our Privacy Policy or contact us to exercise these rights.

Questions: omar@emarketing.cy (or privacy@malaka.cy) · SALTPIXEL Ltd, Demokratias 2, Adreas Kourt, Flat 304, 7060 Larnaca, Cyprus. You may complain to the Commissioner for Personal Data Protection, www.dataprotection.gov.cy.

M A L A K A
MALAKA and eMarketing Cyprus are brands of SALTPIXEL Ltd (reg. no. HE 484960), Demokratias 2, Livadia 7060, Larnaca, Cyprus (EU).
CYPRUS EU UNIT

Trust & Security

EU GDPR Compliant
Care Plan: Backups & Monitoring
Human Sign-Off Clause
You Own the Code
© 2026 SALTPIXEL Ltd · MALAKA. All rights reserved.