1. What Cookies Are

1.1.A cookie is a small text file that a website stores in your browser and reads on later visits. Similar technologies include the browser’s local storage. Under the ePrivacy Directive (art. 5(3)) and the GDPR, storing or reading information on your device requires consent unless it is strictly necessary to provide a service you have requested.

1.2.First-party cookies are set by the Platform’s domain; third-party cookies are set by other companies’ domains (here: Microsoft).

2. Strictly Necessary Cookies

These cookies are set by the Platform itself (first-party cookies); they need no consent and are not used for tracking or advertising.

2.1.Deleting eb_session ends your session. If you block all cookies, public pages remain available but you cannot sign in to the dashboard.

3. Browser Local Storage

Some features keep data only in your browser’s local storage; it is not sent to us automatically:

• the list of Projects selected for comparison (the “Compare” feature for Investors);
• whether you collapsed the pre-submission checklist in the project editor.

3.1.These entries are created only when you use the feature, are necessary for it to work and stay until you clear them in your browser.

4. Analytics (Only With Your Consent)

To understand how visitors use the Platform (which pages they open, where they come from, where they run into difficulties) and to improve it, the Operator uses:

• Google Analytics 4 — visit statistics (pages viewed, referral source, device type, approximate location at country or city level);
• Microsoft Clarity — analysis of how pages are used: clicks, scrolling, heatmaps and de-identified session recordings (text you type into form fields is masked);
• Google Tag Manager — a Google tool through which these two services are added to the pages; it sets no cookies of its own.

4.1.Analytics is not used for advertising, remarketing, profiling with legal effects or selling data. Permissions for advertising storage, sharing user data for advertising and ad personalisation (ad_storage, ad_user_data, ad_personalization) are always set to “denied”.

4.2.How consent works. Before you choose, Google Tag Manager is loaded in Google Consent Mode (v2) with every storage type set to “denied”: analytics cookies are neither set nor read. In this mode Google may receive cookieless signals (that a page was viewed, the time, the browser type, an approximate location derived from the IP address) for aggregate statistics.

4.3.If you click “Accept”, or switch on “Analytics” under “Customise” and save your choice, Google Analytics and Microsoft Clarity may set the cookies listed in the next section. If you click “Reject” or make no choice, no analytics cookies are set. Microsoft Clarity receives the same consent signal.

4.4.Instead or in addition, the Operator may enable cookie-less analytics (Plausible or Umami); its script is also loaded only after your consent.

4.5.Current status on this Platform: Google Analytics 4 and Microsoft Clarity are enabled through Google Tag Manager in Google Consent Mode (v2); analytics cookies are set only after your consent.

5. Analytics Cookies

Set only after your consent:

5.1.Durations are the providers’ defaults and may be changed by the provider. While Clarity runs, Microsoft may also set short-lived auxiliary third-party cookies (up to 7 days).

6. Providers and Transfers Outside the EEA

6.1.For analytics data, Google and Microsoft act as processors of the Operator under their data processing terms, and as independent controllers for certain purposes of their own (for example security and service improvement).

6.2.Retention in the services: Google Analytics event data — no longer than 14 months; Clarity session recordings — up to 30 days, aggregated heatmaps — up to 13 months.

6.3.The providers’ privacy policies: Google, Microsoft.

7. Legal Bases

7.1.Strictly necessary cookies — necessity for providing the service you requested and the Operator’s legitimate interest in the secure operation of the Platform (art. 5(3) of the ePrivacy Directive; art. 6(1)(b) and (f) GDPR).

7.2.Analytics cookies and the related data processing — your consent only (art. 5(3) of the ePrivacy Directive; art. 6(1)(a) GDPR; art. 11 of the Law of Ukraine “On Personal Data Protection”). Consent is voluntary: if you do not give it, every feature of the Platform remains available.

8. Third-Party Content

8.1.The project map loads map tiles from OpenStreetMap servers. When you open the map, your browser sends your IP address and standard browser data to these servers; they do not set cookies on the Platform’s behalf. External links (for example to donation sites) lead to sites with their own cookie policies.

9. How to Change or Withdraw Your Consent

9.1.You can change or withdraw your consent at any time with the “Cookie settings” link in the footer of every page (shown when analytics is enabled): click “Reject”, or switch off “Analytics” under “Customise” and save your choice. Withdrawing consent is as easy as giving it. Withdrawal does not affect the lawfulness of processing before it.

9.2.After withdrawal the Platform deletes the analytics cookies from its own domain (_ga, _ga_*, _clck, _clsk) and reloads the page; from then on the analytics tags run only in “denied” mode. Third-party cookies (CLID, MUID) are stored on Microsoft’s domains and the Platform cannot delete them — you can do so in your browser settings.

9.3.You can also delete or block cookies in your browser settings or install Google’s Google Analytics opt-out browser add-on. Blocking strictly necessary cookies may prevent signing in.

9.4.Your choice is kept for 12 months, after which the banner appears again. If the list of providers or purposes changes materially, we will update this Policy and, where required, ask for your consent again.

10. Changes and Contacts

10.1.We update this Policy when the cookies used by the Platform change; each edition has a version number and date. Questions: compliance [at] eurobridge [dot] online.