Welcome to lootkey.org (“LootKey”, “we”, “our”, “us”). This Cookie Policy explains how we use cookies and similar technologies to provide, secure, and improve our services. It should be read in conjunction with our Privacy Policy (https://lootkey.org/privacy-policy). By clicking “Accept All” in the cookie banner, you consent to our use of non-essential cookies as described here. You can change or withdraw your consent at any time through our Cookie Settings or your browser.

This Policy is compliant with the EU ePrivacy Directive (2002/58/EC as amended by 2009/136/EC) and Regulation (EU) 2016/679 (GDPR). Consent for cookies must be freely given, specific, informed, and explicit, with no pre-ticked boxes or default settings. Our practices align with guidance from the European Data Protection Board (EDPB) and the Estonian Data Protection Inspectorate (AKI).

Cookies are small text files placed on your device (computer, phone, tablet) by websites. They store information such as preferences or session IDs to make websites work efficiently and improve user experience. We also use similar technologies (e.g., local storage, tracking pixels, SDKs) that perform equivalent functions.

We categorize our cookies as follows:
- **Strictly Necessary Cookies** – Required for core site functionality (e.g., authentication, payment processing, fraud prevention). These do not require consent.
- **Functional Cookies** – Remember user preferences such as language or region.
- **Performance & Analytics Cookies** – Collect aggregated statistics to improve website functionality (e.g., Google Analytics).
- **Marketing Cookies** – Used by us or trusted partners to deliver personalized advertising and measure ad effectiveness.

We maintain an up-to-date inventory of all cookies used on lootkey.org, including their names, providers, purpose, and retention periods. This inventory is available to auditors and regulators upon request. Below are examples of typical cookies:

We use a compliant Cookie Consent Management Platform (CMP) to capture and record consent from users in accordance with IAB TCF 2.2. Non-essential cookies (Analytics, Marketing) are disabled until explicit consent is provided. Consent records (timestamp, user ID/session, consent version) are securely stored for at least 12 months for audit purposes. Users can update or withdraw consent via the “Cookie Settings” link available at the bottom of each page.

Some third-party services (e.g., analytics, advertising, content embedding) may set their own cookies. Where these involve transfers of personal data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or participation in the EU–US Data Privacy Framework. Users can view third-party privacy notices via our CMP or partner links.

We apply technical and organizational measures to protect cookie-related data, including encryption, pseudonymization, and access control. Cookie data is retained only for as long as necessary for its purpose and deleted or anonymized once expired.

You can manage or delete cookies using browser settings. Please note that disabling certain cookies may impact website functionality.
Browser resources:
- Chrome: https://support.google.com/chrome/answer/95647
- Safari: https://support.apple.com/en-us/HT201265
- Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies
- Edge: https://support.microsoft.com/en-us/help/4468242/microsoft-edge-browsing-data-and-privacy
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies

We may update this Policy periodically to reflect legal, technical, or operational changes. The latest version will always be available on this page with the effective date updated accordingly.

Data Controller: ________
Registry Code: _______
Address: __________
Email: support@lootkey.org

For supervisory concerns, you may contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local data protection authority.