Cookie and Browser Storage Notice
The website uses limited session and storage mechanisms for security, language and chat. Optional analytics is disabled by default and, when validly configured, does not load Google’s tag before explicit acceptance.
Storage currently used
- Application session: The server uses a session for security tokens, selected language, form feedback and other functions needed for a visitor request. Cookie name and duration depend on the active configuration; the default application session expires after a limited period of inactivity.
- CSRF protection: A security token or related cookie may be used to protect forms and interactive requests against forged requests.
- Language preference: The site_lang value is stored in browser localStorage to remember the selected language. It remains until the browser, user or website removes it.
- AI chat history: Limited chat history and state are stored in sessionStorage to continue the conversation within the browser tab or session. You can remove them by resetting the chat, closing the session or clearing this site’s browser data.
- Analytics choice: Only when a valid GA4 measurement ID is deliberately configured, your accept or reject choice is stored in localStorage as unlucky_analytics_consent_v1. Privacy settings let you reopen that choice.
- GA4 after acceptance: Only after acceptance is Google’s tag loaded and Google Analytics 4 may set analytics cookies. Advertising storage and signals remain denied, and events do not contain enquiry content or contact details.
Optional analytics, disabled by default
Without a valid configured GA4 measurement ID, analytics is completely disabled, there is no choice interface and Google’s tag is not requested. When an ID is validly configured, equally available controls offer analytics acceptance or essential functions only; no Google tag request occurs before acceptance.
After acceptance, only limited events such as opening a contact option or successfully submitting an enquiry are measured, with page key, locale and call-to-action label. Advertising storage, ad personalisation and Google signals remain denied. Meta Pixel and other advertising pixels are not enabled.
Information you deliberately enter and send through a form or chat is not a cookie; its handling is described in the Privacy Notice.
External resources and links
Some pages may display or provide an external image, post or link from Instagram/Meta platforms or equipment manufacturers. If your browser loads or you activate that resource, it connects to the external provider. Google is contacted for GA4 only after you accept validly configured analytics. A provider may receive the IP address and request data and use its own storage technologies under its rules.
An external link opens a separate service. Its settings, cookies and processing are not controlled by this website.
Managing browser storage
Browser settings let you inspect or delete cookies, localStorage and sessionStorage and block future storage. Blocking the essential session or CSRF protection can prevent forms, sign-in or other security functions from working.
Deleting site_lang returns language selection to the current URL or default setting. Clearing chat sessionStorage removes history saved in that browser, but it does not delete a conversation that you have already sent to the UnLucky team as an enquiry. If analytics is configured, the Privacy settings button in the footer lets you change the choice; rejection stops future events and attempts to remove known analytics cookies.
Changes and questions
If another analytics, advertising or optional-storage tool is introduced, this notice and the method for managing choices must be updated before activation. Email questions to info@unlucky.hr.
Related page
Read the Privacy Notice for information about forms, AI chat, technical records, providers and your rights.
Have a browser-storage question?
Tell us which page and browser you use so that we can provide specific technical information.