Cookie policy

These are the only cookies ElevenPro sets today, and they don't require consent because the service doesn't work without them.

authjs.session-token: keeps you signed in. It lasts seven days and is deleted when you sign out. authjs.csrf-token and authjs.callback-url: protect the sign-in form against forged requests; they last as long as the browser session. ep-consent: remembers your choice in this notice, so we don't ask again. Strictly speaking it isn't a cookie but an entry in your browser's local storage — it doesn't travel with every request — but we list it here because the law treats both the same and because what matters is that you know what is stored.

Analytics. We use Google Analytics 4, operated by Google Ireland Limited, and only on public pages: the home page, the per-profile pages and these legal documents. Inside your network — the feed, your profile, your messages — there is no third-party measurement at all.

It sets two cookies, and only if you accept: _ga, which tells one browser from another, and _ga_ followed by our property identifier, which holds the state of the visit. Both last two years and you can delete them from your browser whenever you like.

They serve one purpose: knowing how many people arrive, from where, and which pages they look at, in aggregate. We don't use them for advertising, Google Signals and personalised advertising are switched off, and we don't join that data to your account: visiting the site without registering does not turn you into an identified user.

None of this loads before you accept it. That isn't a courtesy: the script simply isn't on the page until you say yes, so if you choose "necessary only" your browser never contacts Google at all.

Marketing. None. There are no social media pixels and no advertising tools. The notice lets you choose in case there ever are; today choosing "no" and choosing "yes" have the same effect, which is none.

Clear the site data in your browser and we'll ask again. We keep a record of each consent (date, policy version and IP hash) so we can demonstrate it, as GDPR art. 7(1) requires.