Cookie Notice
Effective edition: 2026-10-16.2

OptiNext Kft. · 1143 Budapest, Stefánia út 71., Magyarország / Hungary · Cégjegyzékszám / Company registration: 01-09-411805 · Fővárosi Törvényszék Cégbírósága / Company Court of the Budapest-Capital Regional Court · Adószám / Tax number: 32203044-2-42 · info@optinext.hu · https://publsy.com/

Purposes and lifetimes of cookies and other browser storage, measurement providers and how to grant or withdraw consent. Effective 16 October 2026.

1. Your choice and measurement
Storage necessary for the requested service works without optional measurement permission. Analytics and marketing are separate and off by default. The first layer offers both necessary-only and accept-all choices. Acceptance is not a condition of registration or client work. Cookie settings can be reopened throughout the service.

Google Tag Manager (GTM-TP4W4DDZ) starts only after an explicit current analytics or marketing choice. Google Analytics 4 (G-DH6N34VF9R) requires analytics permission; Meta Pixel (1128191556812868) requires marketing permission. One category does not authorise the other. Google ad storage, ad personalisation and Google Signals remain disabled in this configuration; no server-side Meta Conversions API is connected.

Only approved public marketing pages and a sanitised registration page view can be measured. Client areas, posts, media libraries, approval links, OAuth and payment-return URLs cannot. Legal notice pages also do not start optional measurement. Unknown/duplicate URL parameters, fragments and a private internal referrer disable measurement. Tags do not receive form fields, names or email addresses; automatic advanced matching is not used.

2. Cookies and lifetimes
sf_token – necessary Publsy sign-in cookie, up to 4 hours. sf_csrf – necessary request protection, browser session / up to 4 hours after sign-in. sf_review_csrf – request protection on approval pages, browser session. sf_registration_resume – resuming interrupted registration, 7 days.

publsy_locale and publsy_theme remember language and selected appearance for up to 1 year. A legacy publsy_design preference may remain for up to 1 year, although there is no view selector. These are functional preferences, not advertising profiles. publsy_consent stores category choice, timestamp and policy edition for 180 days as necessary storage, without email/client IDs. Expired, malformed or old-version choices cannot permit measurement; material changes request a new choice.

_ga and _ga_* – Google Analytics 4 visitor/session identifiers, only with analytics permission, configured by Publsy for up to 180 days and potentially renewed on use. _fbp and, where actually created by the provider, _fbc – Meta browser identification/ad attribution, only with marketing permission, typically 90 days and renewable. Not every visitor receives every cookie. Cookie expiry is different from Google/Meta server-side retention, which follows provider policies and property settings.

3. Other local storage and external sites
The web app may cache necessary static files in browser/service-worker storage. The publsy-offline-v1 IndexedDB may hold offline drafts and an encryption key; a draft can be saved for up to 7 days. These are not used for advertising. Browser recovery and offline limits mean you should not rely exclusively on a local copy.

CSV import may use localStorage to resume a current job, with job-related technical identifiers rather than analytics profiles. Job completion, logout or browser site-data deletion may remove that state depending on the storage mechanism. Use the browser’s Publsy site-data deletion to remove all device-side storage.

Stripe Checkout, social login and other providers’ own sites use separate notices/choices. Publsy cookie choice does not grant consent for those sites. Publsy fonts are self-hosted; the homepage does not require automatic external stock-photo loading.

4. Withdrawal, transfers and rights
Change your choice in Cookie settings at any time. Withdrawal stops the relevant measurement, removes accessible Publsy-domain measurement cookies and reloads the page where necessary to unload existing tags. Other open Publsy tabs receive the change through a supported browser signal or on their next activation.

This does not automatically delete earlier provider data or cookies on other domains. Browser deletion of all cookies can also affect sign-in and local drafts. Choices are separate for different devices/browsers. If choice storage fails, measurement stays disabled.

Google/Meta may process technical/browsing data outside the EEA. See the Privacy Notice for recipients, safeguards, rights and complaints. Contact info@optinext.hu; complain to a competent authority, including NAIH.
Google Privacy: https://policies.google.com/privacy
Meta Privacy: https://www.facebook.com/privacy/policy/