1. About this notice
This notice applies to www.paulioskos.com and should be read with the Website Privacy Notice. “Cookies and similar technologies” includes cookies, local or session storage, scripts, tags, pixels and other technology that stores or accesses information on a device.
2. Current consent position
No cookie or consent-management banner is currently deployed because the public website is intended to use only technologies necessary for security and service operation. Paulioskos does not currently use analytics, advertising, remarketing, behavioural profiling, session replay or marketing pixels.
Ordinary public visitors are not intentionally assigned a Paulioskos application session cookie merely by viewing the site. A secure session cookie is used only after an authorised administrator signs in to the protected administration service.
| Future optional technology. If analytics, chat, embedded media, scheduling, advertising or other non-exempt technology is introduced, it will be assessed and, where consent is required, blocked until a visitor makes a choice. Rejecting optional technology will be as easy as accepting it. |
|---|
3. Cookie and storage inventory
| Name or key | Provider / domain | Type | Purpose | Duration | Necessary? |
|---|---|---|---|---|---|
| paulioskos.admin.v2 | Paulioskos / paulioskos.com | HTTP cookie | Maintains the authenticated session for authorised administrators. The browser cookie contains a session identifier; authentication state and the CSRF token are held server-side. | Rolling maximum eight hours; expires on logout or session expiry. | Yes - admin users only |
| __cf_bm | Cloudflare / Paulioskos domain | Conditional HTTP cookie | May be used by Cloudflare for bot detection and protection where the relevant security function is active or triggered. | Short-lived and provider-controlled. | Yes where used for security |
| cf_clearance | Cloudflare / Paulioskos domain | Conditional HTTP cookie | May record successful completion of a Cloudflare browser or security challenge to avoid repeated challenges. | Controlled by the Cloudflare challenge configuration. | Yes where a challenge is triggered |
| Other Cloudflare security storage | Cloudflare / Paulioskos domain | Conditional cookie or browser signal | May support rate limiting, traffic integrity, load balancing or another enabled Cloudflare security function. | Provider and configuration dependent. | Only where technically required |
| Microsoft Entra authentication cookies | Microsoft domains, including login.microsoftonline.com | Admin sign-in cookies | Used by Microsoft to authenticate named administrators and protect the sign-in transaction. They are not used during ordinary public browsing. | Controlled by Microsoft and the Entra session policy. | Yes - admin sign-in only |
| Public-site localStorage | Paulioskos | Browser storage | No key is intentionally created by the current public site. | Not applicable. | No storage used |
| Public-site sessionStorage | Paulioskos | Browser storage | No key is intentionally created by the current public site. | Not applicable. | No storage used |
| IndexedDB, Cache Storage and service-worker storage | Paulioskos | Browser storage | No public-site database, application cache or service worker is intentionally deployed. | Not applicable. | No storage used |
| Analytics, advertising and remarketing storage | None | Cookie or browser storage | No analytics, advertising, cross-site tracking, remarketing, session replay or automated lead-scoring storage is currently deployed. | Not applicable. | No |
4. External scripts, fonts and embedded content
Google Fonts. The site currently requests font CSS from fonts.googleapis.com and font files from fonts.gstatic.com. This creates a browser request to Google infrastructure. Self-hosting the approved fonts is planned as a privacy and Content Security Policy improvement.
Self-hosted assets. The main stylesheet, JavaScript, brand images, team photographs and operational background video are served from Paulioskos-controlled website paths, although Cloudflare may cache and deliver them at the security edge.
No current embeds. No Google Analytics, Google Tag Manager, Meta Pixel, LinkedIn Insight Tag, YouTube, Vimeo, Google Maps, booking widget, live-chat widget or third-party session replay is currently intended.
Cloudflare Turnstile. The server supports optional Turnstile anti-spam verification, but it is not treated as active until a widget and related external resources are deliberately deployed and tested.
5. Managing browser choices
Browser controls can delete or block cookies and site storage. Blocking strictly necessary security or authentication technology may prevent protected sign-in, forms or other functions from working correctly. Because no optional public-site technology is currently used, there is no preference centre at launch.
6. Current and future releases
Website release 6.8.0 adds self-hosted company videos. Native video playback and WebVTT caption tracks do not add cookies, browser storage, third-party embeds or tracking. The five technical tools continue to use bounded, rate-limited server-assisted diagnostics. Microsoft Teams chat remains deferred to a possible version 7 platform overhaul and will not be enabled until its cookies, storage, accessibility, retention, international transfers and consent requirements have been assessed.
7. Changes and verification
Paulioskos will review browser storage and third-party network requests after material website changes. The inventory will be updated where observed behaviour differs from this notice. Conditional provider security cookies may appear only when the corresponding protection is triggered.
Contact
| Route | Details |
|---|---|
| Website | https://www.paulioskos.com |
| Cookie and privacy questions | [email protected] |
| Accessibility assistance | [email protected] |
Reference framework
These references explain the legal and good-practice framework used when preparing this document. They do not represent certification, accreditation, endorsement or legal advice.