Last updated: 08.09.2026
This document sets out what the online store spanet.ee stores in the Buyer's browser, what for, for how long, and what consent is asked for.
Throughout, Buyer means a visitor to the online store and Seller means SPA Sanitaartehnika OÜ. The Estonian original of this document is at spanet.ee/kupsised; where the two disagree, the Estonian one binds.
1. What is stored in the Buyer's browser
The list below is complete: the store stores nothing besides it. The settings dialog of the consent banner describes the three categories and links here; the list itself lives only on this page. The last two rows come into existence only once the Buyer has agreed to external content being loaded.
| Cookie or storage | Category | Purpose | Set by | Lifetime |
|---|---|---|---|---|
sp_consent |
Necessary | The consent choice itself, so the shop does not ask again on every page | spanet.ee | 6 months |
sp_vid |
Necessary | Our own statistics. A random visitor identifier the server sets without a click, under legitimate interest | spanet.ee | 13 months |
spanet.cart.v2 |
Necessary | The cart | spanet.ee, localStorage | Until the browser data is cleared |
spanet.checkout.v1 |
Necessary | The unfinished order form | spanet.ee, localStorage | 7 days, or until the order is placed |
spanet:recently-viewed |
Necessary | Recently viewed products | spanet.ee, localStorage | Until the browser data is cleared |
spanet-lang |
Necessary | The language choice | spanet.ee, localStorage | Until the browser data is cleared |
cf_chl_* |
Necessary | Robot check on the contact and checkout forms | Cloudflare Turnstile | The session |
VISITOR_INFO1_LIVE, YSC, yt-remote-device-id |
External content | Video playback. Set on youtube-nocookie.com only after the play button is pressed | YouTube | Up to 6 months; yt-remote-device-id is localStorage |
NID |
External content | The map. Set on google.com only after the “Show the map” button is pressed | Google Maps | 6 months |
The cart, the unfinished order, the language choice and the list of viewed products are on the Buyer's own device and go nowhere from there — the Seller neither sees them nor can read them. Only when the Buyer submits a form do the entered details reach the Seller. What the Seller does with the details it receives is set out in the privacy policy at spanet.ee/privaatsus. The Facebook and Instagram icons in the store's footer are ordinary links: nothing is sent to those services before the Buyer presses one.
2. When consent is asked and when it is not
No consent has to be asked to store what the store needs in order to work — that is the information without which the cart would not survive, what was typed would be lost, forms would be filled in by robots, and the consent banner would ask again on every page.
The visitor identifier is set by the store's server without consent, on the Seller's legitimate interest: the store measures for itself how it is used, and shares that with nobody. What is done with it, and how to refuse it, is in section 3.
Consent is asked for two things, and refusing either takes nothing away from the store:
- Advertising partners. If the Buyer came to the store through an advertisement, the Seller tells that advertising platform, from its own server, about a purchase or an enquiry, using the click identifier that was in the link. No advertising cookie or script runs in the store and the platform itself sets nothing on the Buyer's device; who receives the message, and on what basis, is set out in the privacy policy.
- External content. Maps and videos come from other services, which set their own cookies on the Buyer's device — the last two rows of the table. Without consent a plain block is shown in their place and nothing is loaded.
The rules of the consent banner:
- nothing is ticked in advance;
- refusing is as easy as consenting — both buttons are in the first view;
- refusing does not limit the use of the store: without giving consent the Buyer can still browse everything, fill the cart and place an order;
- the choice can be changed at any time — every page has a "Cookie settings" link in the footer, which opens the same choice again. A withdrawal applies from then on.
If the use of cookies changes — a new category or a new recipient, for instance — the banner is shown again and the Buyer's choice is asked afresh.
3. The store's own statistics: what is measured and how to refuse it
With the visitor identifier the Seller sees how the store is used: which pages and products are opened, where the visitor came from, with which device and browser and from which country. Also which search words and filters are used, and which steps lead to the cart and to an order. The technical details of the device and the browser are also used to leave robot traffic out. The IP address itself is not stored in the statistics.
What is not stored in the statistics: the Buyer's name, e-mail address, telephone number or the contents of the order form. A search word that looks like an e-mail address, a telephone number or an order number is left unstored.
The statistics are seen by the Seller alone. They are given to no other company and are used neither to profile an individual nor to advertise to one. Raw data is kept for 13 months; after that the daily summaries remain, and they hold nothing that tells one visitor from another.
How to refuse. The Buyer has the right at any time to object to the statistics, by writing to info@spanet.ee. For a Buyer who has placed an order we delete the raw data related to that order, by order number, and leave the Buyer out of the statistics from then on. The Buyer can delete the visitor identifier at any time in the browser settings (section 4).
4. How the Buyer can delete what is stored
Everything described above is in the Buyer's own browser and under the Buyer's own control. Every browser's settings allow a site's stored data and cookies to be deleted — which also removes the cart, the unfinished order form, the language choice, the list of viewed products, the cookie choice and the visitor identifier. This does not stand in the way of using the store: everything is created again when it is needed. The new visitor identifier set on the next visit is not connected to the old one.
5. Questions
Questions about this information can be addressed to:
SPA Sanitaartehnika OÜ Registry code 10921899 Rävala pst 19, 10143 Tallinn info@spanet.ee
If the Seller changes this document, the date above is updated as well.