Cookie Policy

Version 2.0 — last updated 9 September 2026

This Cookie Policy explains how eecaplatform.org, operated by Eurazijos žalos mažinimo asociacija (Eurasian Harm Reduction Association, EHRA, Gedimino pr. 45-4, LT-01110 Vilnius, Lithuania), uses cookies and similar technologies. It supplements our Privacy Policy, which describes your rights and how to exercise them.

1. What cookies are

Cookies are small text files that a website stores on your device. “Similar technologies” include browser local storage and scripts or images loaded from third-party servers that can read or store information on your device. First-party cookies are set by eecaplatform.org; third-party cookies are set by other companies (here: Google) when their content is loaded on our pages.

2. Legal framework and legal basis

Storing information on, or accessing information from, your device requires your prior consent under Article 73(4) of the Law of the Republic of Lithuania on Electronic Communications and Article 5(3) of Directive 2002/58/EC, unless it is strictly necessary to provide the service you asked for. Any subsequent processing of personal data collected through cookies is based on your consent (Article 6(1)(a) GDPR) for statistics and embedded-content cookies, and on our legitimate interest in operating the Website (Article 6(1)(f)) for strictly necessary cookies.

3. How we ask for and record consent

• On your first visit a banner offers Accept all, Reject all and Cookie Settings. Accept and Reject have equal prominence; no optional category is pre-selected.
• Until you choose, only strictly necessary cookies are set and no analytics script or third-party embed is loaded. Closing the banner without choosing sets nothing and we ask again on the next page.
• Your choice is stored in the kncc_consent cookie for 12 months; after that we ask again. We also keep a server-side log (hashed IP address and browser signature, the choice, the categories and the date) for 13 months so we can demonstrate that consent was given, as Article 7(1) GDPR requires.
• You can change or withdraw consent at any time — as easily as you gave it — via the Cookie Settings link in the footer or the button at the end of this page. Withdrawal does not affect the lawfulness of processing before withdrawal.
• If we materially change which cookies we use, we ask for your consent again.

4. Categories we use

Strictly necessary (no consent required)

First-party cookies used to honour your language and consent choices:

• pll_language — remembers whether you use the Website in English or Russian, 12 months.
• kncc_consent — remembers your cookie choices and the date you made them, 12 months.
• wp_consent_functional, wp_consent_statistics, wp_consent_statistics-anonymous, wp_consent_marketing and wp_consent_preferences — share those choices with compatible WordPress plugins, 30 days.

Statistics (consent required)

We use Google Analytics 4 (Google Ireland Ltd; measurement ID G-NQR7RZC93D) to understand, in aggregate, which pages and resources are used. The Google script is served from our own domain and does not run at all until you accept statistics cookies. Google Signals, advertising features and ad personalisation are switched off. Raw IP addresses are used transiently as described in the Privacy Policy, then discarded and not logged or stored in Google Analytics. Event-level data are retained for 14 months. When loaded, Google Analytics sets the first-party cookies _ga and _ga_NQR7RZC93D (2 years by default; browsers may shorten this).

Embedded content (consent required)

Some pages embed YouTube videos and Google Forms (for example, technical-assistance request forms). Until you allow embedded content, we show a placeholder with an “Allow embedded content” button instead of the embed. Please note that the YouTube placeholder loads a preview image from Google’s image server (i.ytimg.com); this transmits your IP address to Google but sets no cookies. Once you allow embedded content, Google loads the player or form and may set the third-party cookies listed in the table below (for example YSC, VISITOR_INFO1_LIVE, __Secure-YEC, __Secure-YNID, __Secure-YENID, __Secure-ROLLOUT_TOKEN, PREF, NID, __Secure-ENID, AEC, SOCS). Google processes this data under its own privacy policy and cookie information; Google LLC (USA) is certified under the EU–US Data Privacy Framework.

What we do not use

We do not deploy our own advertising, remarketing or social-media tracking tags, and we do not sell or share data for advertising. If you allow embedded content, Google/YouTube may use its cookies for security, preferences, measurement and advertising under Google’s policies. Our page-view counter works without cookies. Newsletter sign-up forms set no cookies; if you subscribe, Mailchimp records your email address as described in the Privacy Policy.

5. Browser controls

You can also delete or block cookies in your browser settings (Chrome, Firefox, Safari, Edge each provide instructions in their help pages). Blocking strictly necessary cookies means the Website will not remember your language or your cookie choices. Browser “Do Not Track” and “Global Privacy Control” signals are not yet uniformly standardised; our banner remains the primary control, and rejecting cookies there has the same effect.

6. Contact and complaints

Questions about cookies or personal data: eecaplatform@harmreductioneurasia.org. You may lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania (VDAI), L. Sapiegos g. 17, LT-10312 Vilnius, ada@ada.lt, vdai.lrv.lt.

7. Cookie declaration

The table below is generated by our consent tool and lists the cookies currently observed or documented for these services, with their provider, purpose, category and typical maximum lifetime. Google and browsers may vary or shorten lifetimes. Use the button under the table to change your choices.