COOKIE POLICY
Effective from: 03.11.2026
Avatud OÜ (registry code 12443197, address Harju county, Tallinn, Kesklinna district, Viru väljak 2, 10111, e-mail hello@avatud.ee)
1. WHAT ARE COOKIES?
Cookies are small text files stored on your device when you visit a website. The browser's local storage (localStorage) serves the same purpose. Avatud uses them only so that the Platform avatud.ee works: signing in, language preference, payment security and remembering your cookie choice. With your consent Avatud additionally uses an advertising measurement pixel (OpenAI Ads) to measure whether an ad shown in ChatGPT led to a purchase, a Paid plan subscription or a seller registration.
2. TYPES OF COOKIES
2.1. Necessary cookies — technically essential for the Platform to function. Their use does not require consent (GDPR, Electronic Communications Act).
| Cookie / entry | Purpose | Duration |
|---|---|---|
| sb-*-auth-token | Signed-in user session (Supabase) | Up to 1 year; renewed on use |
| eid-session | Temporary session hand-off after Smart-ID / Mobile-ID login | 5 minutes |
| NEXT_LOCALE | Selected language (et / en / ru) | Up to 1 year |
| __stripe_mid, __stripe_sid | Payment security and fraud prevention (Stripe) — only on checkout and subscription pages | 1 year / 30 minutes |
| cookieConsent (localStorage) | Remembering your cookie choice | Until deleted |
| __oaiq_consent, oaiq_consent (localStorage) | Remembering your ad-measurement choice (OpenAI Ads pixel) — stored also when you decline | Until deleted |
| avatud-active-seller-type, expertHub_user (localStorage) | Dashboard state: active seller profile and user cache | Until sign-out or deletion |
2.2. Analytics cookies — the Platform currently uses NO analytics or statistics cookies (such as Google Analytics). If they are added, they will be set only with your prior consent and this policy will be updated. Avatud counts visits itself and anonymously: each time a page is opened, the counter for that day and page address (e.g. /en/faq) goes up by one. No cookies are used, and no IP address, browser identifier or any other data identifying you is stored.
2.3. Marketing cookies — set ONLY if you choose "Accept all" in the cookie notice. Avatud uses the OpenAI Ads measurement pixel (OpenAI) to evaluate ads shown in ChatGPT: whether a visit led to a purchase, a Paid plan subscription or a seller registration. The pixel sends OpenAI the page address, the event type and amount (e.g. order, €20) and a random browser identifier. If you have entered an e-mail or name on the Platform, the pixel may hash them in your browser (SHA-256) before sending — raw data is not sent to OpenAI. With "Essential only" the pixel is not used and its cookies are removed.
| Cookie | Purpose | Duration |
|---|---|---|
| __obref | Random browser identifier for measuring ad results (OpenAI Ads) | 365 days |
| __oppref | Ad click identifier (oppref) from the page address when you arrived from a ChatGPT ad | 30 days |
3. CONSENT
On your first visit a cookie notice is shown with the options "Essential only" and "Accept all". "Essential only" — only the cookies listed in section 2.1 are set. "Accept all" — the OpenAI Ads measurement pixel (section 2.3) is switched on as well. Your choice is stored in your browser (cookieConsent).
Browsing the site without making a choice does NOT constitute consent.
4. CHANGING YOUR CHOICE AND DELETING COOKIES
You can change your cookie choice via the "Cookie settings" link in the Platform's footer — it shows the notice again. Cookies can also be deleted in your browser settings; deleting the necessary cookies signs you out. Questions: hello@avatud.ee.
5. THIRD PARTIES
- Stripe Payments Europe, Ltd. — payment processing and fraud prevention (cookies __stripe_mid, __stripe_sid on payment pages).
- eID Easy OÜ — Smart-ID and Mobile-ID authentication; during login eID Easy may use its own technical cookies.
- Bunny.net (BunnyWay d.o.o.) — playback of Service Providers' videos; the video player may use technical storage for playback.
- OpenAI (OpenAI Ireland Ltd. / OpenAI, L.L.C.) — measuring the results of ChatGPT ads (cookies __obref, __oppref; only with your consent).
These parties' cookies are governed by their own privacy policies. A full overview of personal data processing is in the Privacy Policy.
6. MORE INFORMATION
Questions: hello@avatud.ee. Estonian Data Protection Inspectorate: www.aki.ee. European Data Protection Board: edpb.europa.eu.
Avatud OÜ | registry code 12443197 | hello@avatud.ee | avatud.ee