Cookie Policy

Last updated: November 2, 2025

This Cookie Policy explains how Valnovo OÜ ("we", "us", "our") uses cookies and similar tracking technologies on https://bot2site.com (the "Website"). This policy is part of our commitment to transparency under the General Data Protection Regulation (GDPR) and the ePrivacy Directive.

1. What are cookies?

Cookies are small text files that are placed on your device (computer, smartphone, tablet) when you visit a website. They help websites remember your actions and preferences, improve functionality, and provide analytics.

Types of cookies:

  • Session cookies: Temporary cookies that expire when you close your browser
  • Persistent cookies: Remain on your device for a set period or until you delete them

Note on our implementation: The main bot2site landing page does not use traditional cookies. Instead, your consent preferences are stored locally in your browser using localStorage (b2s_cookie_consent_v1). This means your choice stays on your device and is not transmitted to our servers.

2. Why do we use cookies and similar technologies?

  • Ensure secure access to administrative and billing sections (essential)
  • Process payments securely through Stripe (essential)
  • Analyze how you use our Website to improve it (analytics — only with your explicit consent)
  • Remember your cookie consent preferences
  • Remember your language preference for localized content

Privacy by design: Analytics is disabled by default and will only be activated if you explicitly opt in through our consent banner.

3. Cookies and storage we use

3.1 Essential Cookies and Storage

These are necessary for the Website to function and do not require your consent under ePrivacy Directive Art. 5(3).

On the landing page (bot2site.com):

Name Type Purpose Duration Provider
b2s_cookie_consent_v1 localStorage Remembers your cookie consent choice (Accept/Reject analytics) Persistent (until you clear browser data) bot2site.com
b2s_lang localStorage Remembers your language preference (e.g. en, de) for localized content Persistent (until you clear browser data) bot2site.com

Note: These are stored locally in your browser only and are not sent to our servers.

On admin/billing pages (/admin, /billing, /stripe/*):

Name Type Purpose Duration Provider
Session ID cookie HTTP cookie Maintains your login session for secure access Session (deleted when browser closes) bot2site.com
CSRF token HTTP cookie Protects against cross-site request forgery attacks Session bot2site.com

Stripe payment cookies (on /stripe/* and /billing/* pages only):

Name Purpose Duration Provider
__stripe_mid Fraud prevention and analytics ~1 year Stripe, Inc.
__stripe_sid Session tracking for payment processing ~30 minutes Stripe, Inc.

Stripe's Cookie Policy: stripe.com/cookies-policy

3.2 Analytics Cookies (Optional — Requires Your Consent)

These cookies help us understand how visitors interact with our Website. Analytics is disabled by default and only enabled if you click "Accept" in our consent banner.

Current status: Analytics functionality is prepared but not yet active. When we activate analytics in the future, this section will be updated with specific cookie names, provider, retention periods, and data collected.

Your choice: You can enable or disable analytics at any time by clicking Cookie Settings in the footer or by adjusting your preferences in our consent banner.

Legal basis: Your explicit consent (Art. 6(1)(a) GDPR and ePrivacy Directive Art. 5(3)).

3.3 Marketing/Advertising Cookies

We do not use marketing or advertising cookies. We do not track you across third-party websites, and we do not use Facebook Pixel, Google Ads, or similar tracking technologies.

3.4 Functional Cookies

We do not use optional functional cookies. All functionality on bot2site.com works without requiring additional cookies beyond the essential ones listed above.

4. Third-party services

Stripe (Payment Processing)

Purpose: Secure payment processing and subscription management
Data processed: Payment card information, billing address, transaction details
Cookies: __stripe_mid, __stripe_sid (only on payment pages)
Privacy Policy: stripe.com/privacyCookie Policy: stripe.com/cookies-policy
Location: USA (data transfers protected by Standard Contractual Clauses under GDPR Art. 46)

Telegram (Bot Platform)

Purpose: Service delivery through Telegram bot
Data processed: Telegram username, user ID, messages
Note: Telegram is an independent data controller. We receive your content from Telegram to provide the service, but Telegram's data processing is governed by their own privacy policy: telegram.org/privacy

Hetzner (Hosting)

Purpose: Website and data hosting
Location: Germany (EU)
Privacy Policy: hetzner.com/rechtliches/datenschutz

Self-hosted resources: We do not use third-party CDNs (like Cloudflare) or Google Fonts. All fonts, scripts, and assets are hosted on our own servers in the EU.

5. Your cookie choices and consent management

5.1 How consent works on bot2site.com

When you first visit our Website, you'll see a consent banner with two options:

  • Accept: Enables analytics cookies (when/if we activate them)
  • Settings: Opens a dialog where you can customize your preferences

In Settings, you can toggle Analytics on or off and save your choice. Default: Analytics is disabled until you explicitly opt in.

5.2 Changing your preferences

  1. Click Cookie Settings in the footer of any page
  2. Adjust your preferences in the modal window
  3. Click Save Preferences

Your choice is stored locally in your browser and takes effect immediately.

5.3 Withdrawing consent

You can withdraw your consent at any time by disabling Analytics in Cookie Settings or clearing your browser's localStorage for bot2site.com. When you withdraw consent, analytics will be immediately disabled.

6. Managing cookies in your browser

You can control and delete cookies through your browser settings. Blocking essential cookies may prevent access to admin/billing areas and payments. Blocking analytics cookies does not affect normal use of the Website.

7. Do Not Track (DNT)

We do not track you across third-party websites. Our analytics (when enabled) is limited to our own Website, and we honor your explicit consent choices.

8. Consent duration and renewal

Your consent choice is stored in your browser until you withdraw it or clear your data. We may implement automatic consent expiration in the future (e.g., 12 months) and will update this policy accordingly.

9. Legal basis for processing

Category Legal Basis GDPR/ePrivacy Reference
Essential cookies/storage Legitimate interest; technical necessity GDPR Art. 6(1)(f); ePrivacy Art. 5(3) exception
Analytics cookies Your explicit consent GDPR Art. 6(1)(a); ePrivacy Art. 5(3)

10. International data transfers

Within the EU: Hosting and primary operations in the EEA (Hetzner, Germany).

Outside the EU: Stripe (USA) via SCCs; Telegram may transfer data globally under its policy.

11. Data retention

Data Type Retention Period Reason
Cookie consent choice (localStorage) Until you clear data or withdraw consent Remember your preference
Session cookies (admin/billing) Deleted when browser closes Security and session management
Stripe cookies Per Stripe policy (~1 year for __stripe_mid) Fraud prevention and payment processing
Analytics data (if enabled) To be defined when activated Will be specified in a future update

12. Children's privacy

Our Website is intended for users aged 16 and above. We do not knowingly collect data from children under 16 without verifiable parental consent.

13. Your GDPR rights

You have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Contact support@bot2site.com. You may also complain to the Estonian Data Protection Inspectorate: aki.ee/en or your local EU authority.

14. Updates to this Cookie Policy

We may update this policy to reflect changes in cookies usage, laws, or our consent mechanism. Material changes will be notified via on-site banner or email; minor changes update the date above.

15. Contact us

Email: support@bot2site.com
Company: Valnovo OÜ
Address: Narva mnt 7-557, 10117 Tallinn, Estonia
Registry code: 16470340
Response time: Within 3-5 business days

16. Related policies

Effective date: November 2, 2025
Version: 1.0