> For the complete documentation index, see [llms.txt](https://legal.norppa.co/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://legal.norppa.co/cstplus/cookies.md). # Cookies Policy **Product:** CST+ **Controller:** Martin Nikiforov, a private individual trading as NorppaMedia, of Leksankuja 3, 01700 Vantaa, Finland ("NorppaMedia", "we", "us", "our") **Effective date:** 21.06.2026 **Canonical location:** {% hint style="warning" %} This Cookies Policy explains how NorppaMedia uses cookies and similar technologies on our websites and on the CST+ customer panel, what choices you have, and how to exercise them. It supplements our Privacy Policy at . {% endhint %} *** ### 1. What cookies are 1.1 Cookies are small text files placed on your device when you visit a website. Similar technologies, such as local storage and pixels, work in comparable ways. We refer to all of these as "cookies" in this Policy. 1.2 Cookies may be set by us (first party cookies) or by third parties whose services we use (third party cookies). They may last only for your browsing session (session cookies) or for a set period (persistent cookies). *** ### 2. Legal framework 2.1 In Finland, the use of cookies is governed by the Act on Electronic Communications Services (Sahkoisen viestinnan palvelulaki 917/2014) and by the guidance of the Finnish Transport and Communications Agency (Traficom). Where cookies process personal data, the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Finnish Data Protection Act (Tietosuojalaki 1050/2018) also apply, and the Office of the Data Protection Ombudsman supervises the consent. 2.2 Strictly necessary cookies may be used without consent. All other cookies, including analytics cookies, are used only with your prior consent. *** ### 3. Your choices and consent 3.1 When you first visit our websites, we present a cookie banner that lets you accept or decline non essential cookies. In line with Traficom guidance, declining is as easy as accepting, and you can change or withdraw your choice at any time without detriment and free of charge. 3.2 You can withdraw or change your consent at any time through the cookie settings link on our websites, or by adjusting or deleting cookies in your browser settings. Withdrawing consent does not affect processing that already took place while consent was valid. 3.3 Declining non essential cookies does not reduce access to our websites. We do not use cookie walls. 3.4 You can also control cookies through your browser, including blocking or deleting them. If you block strictly necessary cookies, parts of the websites or the customer panel may not work. *** ### 4. Categories of cookies we use 4.1 **Strictly necessary cookies.** Required for the websites and the customer panel to function, including keeping you signed in, maintaining your session and protecting security. These do not require consent. 4.2 **Analytics cookies.** Help us understand how the websites are used so we can improve them. We use Google Analytics for this purpose. Analytics cookies are set only after you give consent. 4.3 **Payment and fraud prevention cookies.** When you make a purchase, our payment provider Stripe may set cookies that are necessary to process the payment securely and to help prevent fraud. *** ### 5. Cookies we use 5.1 The table below lists the main cookies we use. Exact names and durations may vary as services are updated, and the current set is always reflected in our cookie banner settings. | Name | Provider | Purpose | Category | Duration | | -------------------- | ------------------------- | ------------------------------------------------------------------ | ---------------------------- | ---------------- | | cstp\_sess | NorppaMedia (first party) | Keeps you signed in to the customer panel and secures your session | Strictly necessary | Up to 7 days | | Cookie preference | NorppaMedia (first party) | Stores your cookie consent choice | Strictly necessary | Up to 12 months | | \_\_stripe\_mid | Stripe | Fraud prevention during payment | Payment and fraud prevention | Up to 1 year | | \_\_stripe\_sid | Stripe | Fraud prevention during payment | Payment and fraud prevention | Up to 30 minutes | | \_ga | Google | Distinguishes users for analytics | Analytics (consent) | Up to 2 years | | *ga*\ | Google | Maintains analytics session state | Analytics (consent) | Up to 2 years | 5.2 Our content delivery provider, Bunny CDN, is used to deliver website assets and downloads and generally does not set cookies on your device. *** ### 6. Third party cookies and international transfers 6.1 Some cookies are set by third parties whose services we use, namely Google (analytics) and Stripe (payments). These providers process the data they collect through their cookies in accordance with their own privacy terms. 6.2 Google and Stripe may process personal data outside the European Economic Area, including in the United States. Where this happens, the transfer is protected by appropriate safeguards under Chapter V of the GDPR, namely the European Union and United States Data Privacy Framework where the recipient is certified, and the European Commission's Standard Contractual Clauses as an additional or alternative safeguard. More detail is in our Privacy Policy. *** ### 7. How we use cookie data 7.1 Strictly necessary cookies are used on the basis of our legitimate interest in operating the websites and the customer panel securely. 7.2 Analytics cookies are used on the basis of your consent. The personal data collected through cookies, the purposes, retention and your rights are described in full in our Privacy Policy at . *** ### 8. Changes to this Policy 8.1 We may update this Cookies Policy from time to time, for example when the cookies we use change. The current version is always available at . The effective date at the top shows when it was last updated. *** ### 9. Contact **Martin Nikiforov, trading as NorppaMedia** Leksankuja 3, 01700 Vantaa, Finland Email: (subject line: "CST+") You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), website , postal address P.O. Box 800, FI-00531 Helsinki, or with Traficom in respect of the Act on Electronic Communications Services. *** *This document is the Cookies Policy for CST+, a product of NorppaMedia. Effective 21.06.2026. It supplements the CST+ Privacy Policy.* --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://legal.norppa.co/cstplus/cookies.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.