Cookie Policy

1. Scope

This Policy explains our use of cookies and similar technologies, including local storage, pixels and tags, on loks.is.

2. Consent

We place only strictly necessary cookies without your consent. Every other category is placed only after you have given consent in our consent banner. Until you give it, no analytics, behavioural or marketing tool is loaded and no request is sent to those providers.

You can change or withdraw your choices at any time through the "Cookie settings" link in the footer of every page. Withdrawing consent is as easy as giving it. Refusing does not restrict your access to the service, except that features depending on the refused category will not work.

We keep a record of consent, including the date, the categories accepted and the version of the banner, for 24 months, after which it is deleted automatically. Your choice is also stored in your browser for 12 months, so that we do not ask again on every visit.

Withdrawing your consent does not delete data that was already collected lawfully before the withdrawal. If you would like to request deletion of such data, please contact support@loks.is, referring to our privacy policy at /upplysingar/privacy, which explains your right to deletion in more detail and how we handle such requests.

3. Categories

Strictly necessary: required for the service to work, including keeping you signed in, keeping form contents between steps, security and fraud prevention, and remembering your language and your cookie choices. These cannot be switched off.

Analytics: help us understand how the service is used, which pages are visited and where users abandon a process.

Behavioural analysis: heat maps and session recordings showing where users click and scroll, in aggregated and pseudonymised form, used to find usability problems.

Marketing: used to measure the effectiveness of our advertising and to show relevant advertisements on external platforms. This category includes the Meta pixel and Google advertising tags and enables Google Consent Mode signals to be transmitted according to your choice.

4. The cookies we use

Overview table of all cookies, including third-party cookies, and their storage duration:

| Category | Provider | Cookie(s) | Storage duration |

| --- | --- | --- | --- |

| Strictly necessary | Loks (first party) | Sign-in and session cookies | Session, up to 12 months |

| Strictly necessary | Loks (first party) | loks_consent | 12 months |

| Strictly necessary | Loks (first party) | loks_anon_id | 12 months |

| Strictly necessary | Loks (first party) | Language preference | 12 months |

| Analytics | Google Analytics 4, Google Ireland Ltd. | _ga, _gid, _gat | Up to 14 months |

| Behavioural analysis | Microsoft Clarity, Microsoft Ireland | _clck, _clsk, CLID, MUID | Up to 12 months |

| Marketing | Meta Pixel, Meta Platforms Ireland Ltd. | _fbp, _fbc, fr | Up to 3 months |

| Marketing | Google Ads tags, Google Ireland Ltd. | _gcl_au, _gcl_aw | Up to 13 months |

Where a cookie's exact storage duration is not disclosed by the provider, it is set by that provider under its own rules, but we never allow a longer storage period than stated in the table above for that category.

Strictly necessary (Loks, first party):

| Name | Purpose | Storage duration |

| --- | --- | --- |

| Sign-in and session cookies | Keeps you signed in and protects the session | Session, up to 12 months |

| loks_consent | Stores your cookie choices and the banner version | 12 months |

| loks_anon_id | Links your consent record to your browser without identifying you | 12 months |

| Language preference | Remembers the interface language you selected | 12 months |

Analytics, placed only after consent:

| Provider | Cookies | Storage duration |

| --- | --- | --- |

| Google Analytics 4, Google Ireland Ltd. | _ga, _gid, _gat | Up to 14 months |

Behavioural analysis, placed only after consent:

| Provider | Cookies | Storage duration |

| --- | --- | --- |

| Microsoft Clarity, Microsoft Ireland | _clck, _clsk, CLID, MUID | Up to 12 months |

Marketing, placed only after consent:

| Provider | Cookies | Storage duration |

| --- | --- | --- |

| Meta Pixel, Meta Platforms Ireland Ltd. | _fbp, _fbc, fr | Up to 3 months |

| Google Ads tags, Google Ireland Ltd. | _gcl_au, _gcl_aw | Up to 13 months |

The live list, including which of these tools is currently switched on, is shown in the cookie settings panel. When you withdraw consent for a category, we delete the cookies of that category and reload the page.

5. Third parties

Some cookies are set by third parties who process the resulting data for their own purposes as independent controllers, in particular Meta Platforms Ireland Ltd., Google Ireland Ltd. and Microsoft Ireland. Their processing is governed by their own privacy policies, linked in the cookie settings panel.

6. Browser controls

You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies will prevent parts of the service from working.

7. Supervisory authority

You have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd) if you believe our processing of personal data in connection with cookies breaches the law. Further information about our processing of personal data, including your rights and how to contact us, can be found in our privacy policy at /upplysingar/privacy.

8. Language

This Policy was originally drafted in Icelandic. The Icelandic version is binding. Versions in other languages are informational translations, and in case of any discrepancy between versions, the Icelandic version prevails.

Version 1.2.