Which cookies Haavisa sets, why, and how to change your choice at any time.
1. Our approach
We set necessary cookies to keep the site working, and nothing else until you tell us we may. Analytics and marketing cookies are set only after you explicitly accept those categories - separately, and never on the basis of continued browsing.
2. Cookies we use
| Cookie | Category | Purpose |
|---|
| cc_cookie | Necessary | Stores your cookie choices so we do not ask on every visit. |
| next-auth.* | Necessary | Keeps you signed in and protects forms against cross-site request forgery. HttpOnly and Secure. |
| haavisa-anon-session | Necessary | Lets you start an application as a guest without creating an account. |
| _ga, _ga_<stream> | Analytics | Set by Google Analytics only after you accept analytics, to measure how the site is used. Removed automatically if you withdraw consent. No analytics request of any kind - including a cookie-less one - is sent before you accept. |
| _fbp, _fbc | Marketing | Set by Meta (Facebook) only after you accept marketing, to measure which of our ads led to a visit. Removed automatically if you withdraw consent. No request is sent to Meta before you accept. |
We set no advertising or cross-site tracking cookies unless you accept the marketing category. We do not send your name, contact details, passport details, application answers or documents to Google Analytics or Meta; the visa application wizard reports only which step was reached, never what was entered. We do not upload customer lists to Meta for ad matching.
3. Changing your choice
The consent banner appears on your first visit with equal-weight “Accept all” and “Reject all” options. You can change or withdraw your choice at any time using Cookie Preferences in the footer of every page, or by clearing cookies for this site in your browser. Withdrawing analytics or marketing consent removes that category’s cookies and stops further collection immediately.
4. Third parties
Analytics cookies are set by Google and marketing cookies by Meta. Payments are processed by Stripe and PayPal on their own domains under their own policies - we never receive your full card details. See our Privacy Policy for the full list of processors and the data we handle.
