Cookie Policy

Version 3 · in effect since October 3, 2026

Last updated: 3 October 2026

This policy explains which cookies the Lumara platform (lumara.md), run by SRL "BALAN PRO" (IDNO 1013600015807), the controller of personal data, uses and how you can change your choice, in accordance with Law No. 195/2024 on the protection of personal data. For the rest of your personal data, see the Privacy Policy.

1. What cookies are

Cookies are small text files that a website saves in your browser. Some are needed for the site to work (for example, to keep you signed in); others help with statistics or advertising. Similar technologies, such as the browser's local storage, are treated in the same way.

2. The categories we use

  • Strictly necessary — always on; the Platform cannot work without them. They do not require consent.
  • Analytics — statistics about how the Platform is used (Google Analytics 4). Only with your consent.
  • Marketing — measuring the effectiveness of ads (Meta Pixel). Only with your consent.

The analytics and marketing scripts do not load at all until you accept them in the cookie banner.

The Platform currently uses only strictly necessary cookies: Google Analytics 4 and Meta Pixel are not enabled, so the banner only informs you about these cookies. If we enable them, the banner will ask for your consent before they load.

3. List of cookies

On secure connections (HTTPS), the names of the sign-in cookies start with the prefix __Secure- (for example, __Secure-better-auth.session_token).

Strictly necessary

  • better-auth.session_token — keeps you signed in. Duration: 7 days, extended automatically while you use your account.
  • better-auth.session_data — a signed copy of the session data, so pages load faster. Duration: 5 minutes.
  • better-auth.two_factor — keeps a two-step authentication step in progress. Duration: 10 minutes.
  • better-auth.trust_device — set only if you choose "Remember this device" during two-step authentication. Duration: 30 days.
  • better-auth.state — protects sign-in with Google, Apple or Facebook. Duration: 5 minutes.
  • lumara_consent — remembers your cookie choice (the categories accepted, the policy version, the date and an anonymous identifier). Duration: 180 days.
  • NEXT_LOCALE — remembers the language you chose (Romanian, Russian or English). Duration: until the browser is closed.

In addition, the request form temporarily saves drafts in the browser's session storage (lumara:request-draft:v1), which is cleared when the tab is closed.

Analytics (only with consent)

  • _ga — Google Analytics 4: distinguishes visitors. Duration: 2 years.
  • _ga_* (the suffix is the GA4 property identifier) — Google Analytics 4: keeps the session state. Duration: 2 years.

Marketing (only with consent)

  • _fbp — Meta Pixel: identifies the browser for ad measurement. Duration: 90 days.
  • _fbc — Meta Pixel: set when you reach the site from a Meta ad. Duration: 90 days.

4. Third-party cookies

The analytics and marketing cookies are set by Google and Meta, who use them under their own privacy policies. Meta may also use cookies set on its own domains (for example, facebook.com) if you are signed in there. These companies may process data outside the Republic of Moldova, including in the USA.

The payment page of maib bank is a separate website with its own cookies, for which maib is responsible.

5. How to change your choice

  • While we use only strictly necessary cookies, the banner only informs you about them. If we enable analytics or marketing, the banner will let you accept or refuse them with equally prominent buttons.
  • As soon as there is a choice to make, the "Cookie settings" link in the footer of any page lets you change it or withdraw all consent at any time, as easily as you gave it.
  • You can also delete or block cookies in your browser settings. If you block the strictly necessary cookies, signing in will not work.

Withdrawing consent stops the analytics and marketing scripts from loading from the next page on. Cookies already set by Google or Meta can be deleted from the browser.

When we change this policy in a way that affects your choice, the banner will ask for your consent again.

6. Contact

Questions about cookies: a written request to SRL "BALAN PRO", MD-4829, Măgdăcești village, Criuleni district, Republic of Moldova.