Cookie notice
Document version: 2026-10-15. The current version is always available on the Website.
The casali-energy.com website uses cookies necessary for its operation and — only with your consent — measures visits with two tools: PostHog and Google Analytics. On your first visit you choose in the consent box what you agree to; without your consent we measure nothing. We use no advertising cookies.
Cookies we set
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
ce_sid | session identifier: keeps your cart, your login and the protection of forms against forged requests | 90 days from the first visit; a new one is created after it expires | necessary |
add_to_order | remembers which order you are adding catalogue items to | 30 minutes | necessary |
ce_cur | remembers the currency in which you want to see prices (EUR, PLN, CZK or USD); it is created only when you choose one yourself | 90 days from choosing the currency | necessary — a setting you chose |
ce_consent | remembers your choice from the consent box: which measurement tools are switched on, or that none are; it is created only after you click in the box | 365 days from your choice | necessary — a setting you chose |
_ga | Google Analytics: distinguishes your browser from others in visit statistics; created only after you consent to Google Analytics | up to 2 years | analytics — with consent; set and read by Google |
_ga_… | Google Analytics: keeps the state of the measurement session; created only after you consent to Google Analytics | up to 2 years | analytics — with consent; set and read by Google |
The cookies ce_sid and add_to_order and the cookie with your consent choice are set with the HttpOnly and Secure attributes — they are not accessible to scripts and are sent only over an encrypted connection. The cookie ce_cur holds only the three-letter currency code and has no HttpOnly attribute. No third party has access to these four cookies — they are read only by our server. The cookies _ga and _ga_… are set in your browser by the Google script and read by Google; they exist only if you consent to Google Analytics.
What is not there
- Without your consent the Website loads no scripts, fonts or images from external servers and does not measure visits: your browser connects only to our server, and our server sends no data to any measurement tool.
- After your consent only the tools named in the consent box run — PostHog (server-side, without a file in your browser) and Google Analytics (the Google script and the
_gacookies). There are no advertising cookies and no social network cookies; in Google Analytics the advertising features are permanently switched off.
Visit measurement — only with your consent
We measure visits only if you agree to it in the consent box on your first visit. The legal basis is your consent (Art. 6(1)(a) GDPR), given separately for each tool: you can consent to one tool, to both or to none.
PostHog — server-side measurement, without a file in your browser. The visit identifier is generated on our server as an irreversible hash of the IP address, the browser name and a random key that changes every day; the previous day’s key is deleted, so after midnight nobody — including us — can reconstruct yesterday’s identifier. The IP address is neither stored nor passed to the measurement tool. In practice, your visits are linked within one day, not across days. We record the page visited, the language, the referring page and campaign parameters in the address; campaign parameters are kept on the server for one day at most. After login the identifier in the statistics is the e-mail address of your account. The data goes to PostHog on servers in the European Economic Area. Without consent our server sends no event to PostHog — also after login.
Google Analytics 4 — measurement in the browser. Only after your consent does the page load the Google script, which sets the cookies _ga and _ga_… and sends Google information about the pages visited, the language, the referring page, the browser and the device. The IP address is anonymised and Google’s advertising features are permanently switched off: we measure traffic, we do not advertise. Without consent the Google script is not loaded and your browser does not connect to any Google server.
How to withdraw consent. Click “Cookie settings” in the footer of any page — the consent box opens again with your current choice. After you switch to “Only necessary”, our server stops sending events to PostHog, the Google script is no longer loaded, and the cookies _ga and _ga_… are deleted. Withdrawing consent does not affect the lawfulness of measurement carried out before the withdrawal.
Managing cookies
You can change your choice from the consent box at any time via the “Cookie settings” link in the footer. You can also delete or block cookies in your browser settings: after deleting the cookie with your consent choice the consent box appears again on your next visit, and if ce_sid is blocked you cannot log in or use the cart.