ITCore
Legal information

Cookie Policy

Which cookies itcore.md sets, on what basis, and how you can control them.

Last updated:

1. What cookies are

Cookies are small files a website stores in your browser. They let the site remember, for example, the language you chose. General data processing rules are in the Privacy Policy.

The controller is "GARM INC" SRL (IDNO 1017600028014); itcore.md is the website of ITCore. Data protection officer (DPO): dpo@itcore.md.

2. Strictly necessary cookies

The site does not work properly without them, so we do not ask for consent: this is permitted by Article 5(3) of Directive 2002/58/EC (ePrivacy) and Law of the Republic of Moldova No. 195/2024.

CookieSet byPurposeLifetime
NEXT_LOCALEitcore.mdremembers the site language (Russian, Romanian or English)until the browser is closed
itcore_consentitcore.mdremembers your choice in the cookie window180 days
__cf_bmCloudflaretells requests from people apart from automated bot traffic30 minutes

These cookies do not track you on other websites and send no data to advertising networks.

3. Contacts form protection

The Contacts form is protected by Cloudflare Turnstile, a check that the request is sent by a person and not a script. Turnstile runs in its own frame on challenges.cloudflare.com and sets no cookies of its own on the itcore.md domain. What data Cloudflare receives is described in section 4 of the Privacy Policy.

4. Analytics — only with consent

If you click "Accept" in the cookie window, the site loads two analytics services: Google Analytics 4 through Google Tag Manager, and Microsoft Clarity. We use them to understand which pages people read, where visitors come from and where the site is hard to use.

CookieSet byPurposeLifetime
_gaGoogle Analytics 4tells visitors apart using a pseudonymous identifierup to 2 years
_ga_*Google Analytics 4keeps session state for statisticsup to 2 years
_clckMicrosoft Claritykeeps the pseudonymous Clarity ID and preferences, so that visits to itcore.md from the same browser are linked1 year
_clskMicrosoft Clarityjoins page views into a single session recording1 day
CLIDMicrosoft Clarity (clarity.ms domain)records when Clarity first saw this browser on any site that uses Clarity1 year
MUIDMicrosoft (clarity.ms and bing.com domains)browser identifier shared across Microsoft servicesup to 13 months

The Google Analytics provider is Google Ireland Limited (Ireland); some data is transferred to Google LLC (USA), which is certified under the EU–US Data Privacy Framework. The statistics collected are kept by Google for 14 months. What exactly Google receives is described in section 6 of the Privacy Policy.

Microsoft Clarity produces heatmaps (where people click and how far they scroll) and session recordings — a replay of how a visitor used the page: clicks, scrolling, mouse movements, window resizing. Along with these, Clarity receives details of the device, browser, operating system and screen size. Text in input fields and choices in drop-down lists are always masked by Clarity and never reach Microsoft; in the default masking mode, numbers and email addresses on the pages are hidden as well. The provider is Microsoft Ireland Operations Limited (Ireland) and Microsoft Corporation (USA); the data is stored in the Microsoft Azure cloud, including in the USA. Microsoft Corporation is certified under the EU–US Data Privacy Framework, and the transfers are also covered by the European Commission's standard contractual clauses. Session recordings are kept for 30 days; click data, heatmaps and labelled or favourited recordings for 9 months, after which Microsoft deletes them together with backups. Microsoft sets the CLID and MUID cookies on its own domains, not on itcore.md; together with MUID, Microsoft's technical cookies MR, SM, ANONCHK and SRM_B may appear. How Microsoft processes data: https://www.microsoft.com/privacy/privacystatement

Until you answer in the cookie window, and if you click "Decline", the Google Analytics, Google Tag Manager and Microsoft Clarity scripts are not loaded on the page at all and the cookies in the table above are not set.

You can opt out of Google Analytics on all websites at once with Google's browser add-on: https://tools.google.com/dlpage/gaoptout

5. Marketing and advertising

There are currently no marketing or advertising cookies, pixels or counters on the site. If we add any, before they go live we will describe the service in this policy (provider, cookies, purpose, lifetime, where the data goes), update the version date and ask for your consent again.

6. How you consent and change your choice

On your first visit the site shows a cookie window with two identical buttons: "Accept" and "Decline". "Accept" allows analytics (Google Analytics 4 and Microsoft Clarity); "Decline" refuses everything that is not strictly necessary. The window does not block the site: you can keep browsing without answering, and optional cookies and scripts are not loaded in the meantime.

You can change your choice at any time: the "Cookie settings" button in the footer of any page opens the window again. If you withdraw consent, the site deletes the _ga, _ga_*, _clck and _clsk cookies itself, tells Clarity that consent was withdrawn and reloads the page; from then on Google Analytics and Clarity are no longer loaded. The CLID and MUID cookies live on Microsoft domains and the site cannot delete them — you can do that in your browser settings.

Your choice is kept for 180 days. After that, or after a new version of this policy, the site will ask you again. If you delete cookies in your browser, you will need to choose again.

7. Record of decisions

Every decision in the cookie window, including a refusal, is recorded on the website server. This lets us demonstrate that consent was given, as Article 7(1) GDPR requires. A record contains:

  • your decision (allowed or declined);
  • the version of the cookie policy in force at the time;
  • the site language;
  • the IP address with its last octet zeroed, which cannot identify a specific device;
  • the browser type (user agent);
  • the date and time.

Records are kept for 3 years and then deleted. The record holds no name, email or other data that identifies you directly.

8. Questions

Write to our data protection officer at dpo@itcore.md or to info@itcore.md. Your rights and how to complain to the CNPDCP are described in the Privacy Policy.

Cookie Policy | ITCore