This Cookie Policy explains how Crystal Cleanse uses cookies and similar technologies on crystalcleanse.app, my.crystalcleanse.app and audio.crystalcleanse.app.
It should be read together with our Privacy Policy, which explains how we handle personal data, and our Terms of Service.
1. Who we are
Crystal Cleanse is operated by:
Saluxe, Andrejka Söke s.p.
Kidričeva ulica 35
9220 Lendava
Slovenia, EU
VAT identification number: SI52303110
Company registration number: 7429355000
Email: [email protected]
2. What cookies and similar technologies are
A cookie is a small text file stored by your browser on your device. Cookies can remember settings, help a website function, distinguish browsers or sessions, measure use, and support advertising.
We also use or may use technologies that work in a similar way, including pixels, tags, local storage, software development tools, embedded content, temporary identifiers, tracking links and server-side conversion APIs. In this policy, cookies includes these similar technologies unless we explain otherwise.
Some cookies are placed by Crystal Cleanse on our own domains (first-party cookies). Others are placed or read by another provider, such as Google, Meta, TikTok or Pinterest (third-party cookies).
3. How consent works
We divide technologies into the following categories:
- Strictly necessary: required for security, network delivery, consent choices or a feature you request. These are used without optional consent because the Service cannot operate properly without them.
- Analytics: help us understand how the website and app are used.
- Advertising and measurement: help measure adverts and conversions, limit repetition, attribute visits, and create or measure advertising audiences.
- Embedded and social content: allow third-party videos or social features to load.
Except for strictly necessary technologies and the cookieless aggregate analytics described in section 5, optional technologies are disabled until you make a choice through our cookie banner. Rejecting optional cookies does not prevent you from using the Crystal Cleanse app.
You can accept or reject optional categories separately where the consent tool allows it. You can change or withdraw your choice at any time through the Cookie Settings link in the site footer. Withdrawing consent is as easy as giving it and does not affect processing that was lawful before withdrawal.
4. Strictly necessary cookies
Strictly necessary cookies support security, traffic management and your privacy choices. Depending on the security feature encountered and the configuration in use, they may include:
| Cookie or technology | Provider | Purpose | Typical lifetime |
|---|---|---|---|
| Crystal Cleanse consent-preference record | Crystal Cleanse / our consent provider | Remembers whether you accepted, rejected or customized optional technologies | Up to 12 months |
__cf_bm | Cloudflare | Distinguishes legitimate traffic from automated traffic where bot protection is enabled | 30 minutes after inactivity |
cf_clearance | Cloudflare | Remembers that a security challenge was successfully completed | Usually 30 minutes; may vary with our security configuration |
_cfuvid | Cloudflare | Distinguishes visitors sharing an IP address where rate-limiting rules require it | Session or as configured by Cloudflare |
| Session or security record | Crystal Cleanse / hosting provider | Maintains a requested session, protects forms or prevents abuse where such a feature is enabled | Session or short-lived |
The legal basis for processing personal data through these technologies is our legitimate interest in providing a secure and functioning Service (GDPR Art. 6(1)(f)) or, where applicable, taking steps you request. The rule allowing a strictly necessary cookie without consent is limited to what is genuinely required for the requested service or security function.
5. Analytics
5.1 Google Analytics 4
We use Google Analytics 4 (GA4) to understand how visitors find and use the website. GA4 is optional and is activated only after you consent to analytics.
| Cookie | Provider | Purpose | Default lifetime |
|---|---|---|---|
_ga | Google Analytics | Distinguishes browsers for statistical measurement | 2 years |
_ga_<container-id> | Google Analytics | Maintains session state for the relevant analytics property | 2 years |
Browser restrictions or our configuration may shorten these periods. Our GA4 event-level retention setting is 14 months, as described in the Privacy Policy. Cookie lifetime and server-side data retention are separate periods.
5.2 Vercel Web Analytics
We use Vercel Web Analytics on my.crystalcleanse.app. It does not use cookies or build a persistent cross-site identifier. Vercel creates a temporary visitor hash from request information for aggregate measurement and discards it after 24 hours.
We rely on legitimate interests (GDPR Art. 6(1)(f)) for this limited aggregate measurement. We do not use Vercel Web Analytics custom events to send names, email addresses, crystal selections, intentions or other information intended to identify a person.
6. Advertising and conversion measurement
Advertising technologies are optional and activate only after you consent. Depending on the integrations enabled, they can receive an IP address, page URL, referring page, event name and time, browser or device information, cookie identifiers and consent status. Where enhanced matching is enabled, a platform may also receive a cryptographically hashed email address or another contact identifier after consent. Hashing does not make the information anonymous.
6.1 Meta — Facebook and Instagram
We may use the Meta Pixel and Meta Conversions API to measure advertising on Facebook and Instagram, attribute visits and conversions, control advert frequency, and create or measure audiences.
| Cookie | Provider | Purpose | Typical lifetime |
|---|---|---|---|
_fbp | Meta | Identifies a browser for advertising and site-measurement purposes | 90 days |
_fbc | Meta | Stores information associated with a visit from a Meta advert | 90 days |
Meta may use additional cookies on its own domains if you are logged in to Facebook or Instagram or interact with a Meta feature.
6.2 TikTok
We may use the TikTok Pixel and TikTok Events API to measure campaign performance, attribute conversions, optimize advertising and create or measure audiences.
| Cookie | Provider | Purpose | Typical lifetime |
|---|---|---|---|
_ttp | TikTok | Measures and improves advertising performance and supports personalization | 13 months from last use |
ttcsid_<pixel-code> / ttcsid | TikTok | Maintains an advertising measurement session for a specific TikTok pixel | 13 months from last use |
ttclid | TikTok | Stores a TikTok click identifier for attribution | 13 months from last use |
_pangle | TikTok Pangle, if used | Measures advertising and supports ad personalization through the Pangle network | 13 months from last use |
6.3 Pinterest
We may use the Pinterest Tag and Pinterest Conversions API to measure visits and conversions, optimize campaigns, and create or measure audiences.
| Cookie | Provider | Purpose | Typical lifetime |
|---|---|---|---|
_pin_unauth | Groups actions for visitors Pinterest cannot otherwise identify | 1 year | |
_epik / _derived_epik | Attributes visits from Pinterest adverts and supports matching | 1 year | |
_pin_aem | Pinterest, where enhanced match is enabled | Stores hashed matching information collected through automatic enhanced match | 1 year |
_pinterest_ct_ua / _pinterest_ct_rt | Supports identification, attribution and measurement | Up to 1 year | |
_pinterest_sess | Maintains Pinterest login or logged-out identification when a Pinterest feature is used | Up to 1 year |
Pinterest may change which of these cookies are used depending on the visitor’s region, login state and our matching settings.
6.4 Google Ads and Google tags
We may use Google Ads conversion tracking, Google tags and related advertising measurement tools to attribute visits and actions, measure campaign performance, control advert frequency, and create or measure audiences.
| Cookie | Provider | Purpose | Typical lifetime |
|---|---|---|---|
_gcl_au | Google Ads | Stores and tracks conversions | Up to 3 months |
_gcl_aw / _gcl_dc | Google Ads / Campaign Manager | Stores advertising click information for conversion attribution | Up to 90 days |
IDE / id | Google / DoubleClick, where used | Advertising, measurement and preference handling | Up to 13 months in the EEA, Switzerland and UK; potentially longer elsewhere |
test_cookie | Google / DoubleClick, where used | Checks whether the browser supports cookies | About 15 minutes |
Google Tag Manager may be used to control other tags. Tag Manager itself is a delivery tool; the cookies and data collection depend on the tags configured within it.
7. Embedded video and social features
YouTube videos and other social features are blocked until you consent to the relevant optional category. Once loaded, the platform may receive your IP address, the page you are viewing, browser or device information, and information stored in its cookies. If you are logged in to that platform, it may associate your interaction with your account.
Cookies that YouTube may use after a video or feature is loaded include:
| Cookie | Provider | Purpose | Typical lifetime |
|---|---|---|---|
YSC | YouTube | Security, session integrity and video interaction measurement | Browser session |
VISITOR_INFO1_LIVE / __Secure-YNID | YouTube | Preferences, analytics, advertising and service reliability, depending on configuration | About 6 months |
PREF | YouTube | Stores playback and page preferences | About 8 months |
__Secure-YENID / __Secure-YEC | YouTube | Preferences, analytics, advertising and service reliability, depending on configuration | About 13 months |
__Secure-ROLLOUT_TOKEN | YouTube | Supports feature rollout and related measurement | About 6 months |
Platform cookie names and lifetimes can change as providers update their services.
8. Server-side conversion APIs
The Meta Conversions API, TikTok Events API, Pinterest Conversions API and similar tools can transmit conversion events from our systems rather than directly from browser code. They do not necessarily place a browser cookie themselves, but they can use cookie IDs, click IDs, event IDs or hashed contact identifiers to match and deduplicate events.
We treat these APIs as optional advertising technology. We do not send event data to them until you have given the relevant consent, and withdrawing that consent stops future optional event transmission from your browser and our systems.
We do not send advertising platforms the contents of contact-form messages or information about the crystals or intentions you select in the app. We do not upload bulk newsletter subscriber lists for advertising.
9. Saluxe Newsletter Measurement
Saluxe Newsletter emails may contain a small tracking pixel or tracked links that tell our newsletter provider whether an email was delivered or opened and whether a link was clicked. These technologies operate in email rather than through the website’s browser cookies. Privacy Policy §5.4 explains subscriptions made through crystalcleanse.app.
We use newsletter measurement only where permitted and with consent where required. You can stop future newsletter measurement by unsubscribing through the link in any newsletter or by writing to [email protected]. Your email application may also allow you to block remote images, which can prevent an open-tracking pixel from loading.
10. Your choices
You can manage optional technologies through the Cookie Settings link in the footer. You may:
- accept all optional categories;
- reject optional categories;
- change individual category choices where available; or
- withdraw consent later.
You can also delete or block cookies through your browser. Blocking all cookies may affect strictly necessary security or preference functions, but rejecting optional cookies does not prevent use of the Crystal Cleanse app.
Where applicable law requires it, we treat a recognized browser-based opt-out signal, including Global Privacy Control, as a request to opt out of sale or sharing for cross-context behavioral advertising.
11. Third-party processing and international transfers
Google, Meta, TikTok, Pinterest, YouTube, Cloudflare and our other providers process information under their own privacy terms and, depending on the activity, may act as our processor, a joint controller or an independent controller.
Some of these providers are established in or process data in the United States or other countries outside the EEA. The safeguards used for those transfers—including the EU–US Data Privacy Framework where the provider is certified, and otherwise the European Commission’s Standard Contractual Clauses—are explained in our Privacy Policy.
12. The live cookie list
This policy lists the main cookies and similar technologies associated with the features we use or plan to enable. A provider may add, rename or remove a cookie, and a particular cookie may not appear for every visitor because this depends on consent, browser settings, location, login state, campaign source and the features enabled at that time.
The Cookie Settings panel shows the categories currently available on Crystal Cleanse. We review the deployed site and update this policy when a material technology, purpose or provider changes.
13. Changes to this policy
We may update this Cookie Policy when our website, app, providers or legal obligations change. We record material policy changes when updating this page.
If a change materially affects an optional purpose for which consent is required, we will update the consent choices and ask again before using the technology for that new purpose.
14. Contact
Questions about cookies, consent or your personal data:
Saluxe, Andrejka Söke s.p.
Kidričeva ulica 35, 9220 Lendava, Slovenia, EU
[email protected]