Cookie Policy

Last Updated: September 23, 2026

This policy names the cookies we actually set. The tables below were produced by loading the site with consent refused and then with consent given, and recording the difference — not by describing what a site like ours usually does.

Nothing beyond the strictly necessary cookies is set before you accept it. If you refuse, the optional technologies are not loaded at all, and the cookies they previously set on our domain are deleted.

1. What a cookie is here

A cookie is a small text file a site stores on your device. We also use equivalent browser storage where it serves the same purpose; where this policy says "cookie" it covers those too.

A first-party cookie is set by quote3d.com. A third-party cookie is set by another company whose code runs on the page. We can delete our own; we cannot delete a cookie another company set on its own domain, and section 6 explains what to do about those.

2. Strictly necessary — always active

These run without asking, because the service cannot work without them. They are not used to profile you or to measure your behaviour across sites.

Cookies we set

Measured on a visit with all optional categories refused. These three are the only cookies present.

  • cookie-consent — records that you made a choice, and the version of the banner that recorded it. Duration: 1 year.
  • cookie-preferences — records which categories you accepted, so the page can act on it. Duration: 1 year.
  • NEXT_LOCALE — remembers the language you are reading the site in. Duration: 1 year.
  • Session cookies — set only once you sign in, to keep you signed in and to protect the session. They are removed when the session ends or you sign out.

Google reCAPTCHA

Protects the sign-up, sign-in and password reset forms from automated abuse. It loads only on those pages and without separate consent, because without it the forms can be attacked, and it is used for security rather than to build a profile of you.

  • Set by: Google Ireland Limited and Google LLC.
  • Receives: IP address, browser and device signals, interaction signals.
  • If you block it in your browser, the protected forms will not submit.

3. Analytics — off unless you accept

Used to understand which pages are used and where the service is slow or failing. Nothing in this category loads until you accept it.

When you accept, Google Tag Manager loads Google Analytics, which sets the following first-party cookies:

Set by: Google Ireland Limited and Google LLC. Data involved: IP address, pages viewed, navigation, traffic source, and the cookie identifiers above.

If you refuse, or later withdraw, these scripts are not loaded and the two cookies above are deleted from our domain.

  • _ga — distinguishes one browser from another. Duration: 2 years.
  • _ga_<container id> — keeps the analytics session state for our specific property. Duration: 2 years.

4. Advertising — off unless you accept

Google AdSense serves advertising on parts of the public website. It is not used on the dashboard, the admin area, authentication pages or the embedded widget. Nothing in this category loads until you accept it.

When you accept, AdSense may set cookies such as __gads and __gpi on our domain, and further cookies on Google's own advertising domains, to measure ad delivery and limit repetition.

Set by: Google Ireland Limited and Google LLC. Data involved: IP address, pages viewed, advertising identifiers.

If you refuse, or later withdraw, no advertising script is loaded and the advertising cookies on our own domain are deleted. Cookies Google set on its own domains are outside our reach; section 6 explains how to remove those.

Where you accept this category, the resulting advertising may amount to "sharing" for cross-context behavioral advertising under California law. Refusing the category, or sending a Global Privacy Control signal, stops it.

5. Functional — off unless you accept

Optional conveniences that remember interface preferences beyond your language. They are not required for the service to work, so they are off by default. Refusing them costs you nothing except that some display preferences are not remembered between visits.

6. Changing or withdrawing your choice

Open the cookie banner from the link in the site footer at any time. Withdrawing is as easy as accepting: one action, same place, no account required.

When you turn a category off, two things happen. The technologies in that category stop loading, and the cookies that category set on quote3d.com are expired immediately. We verify this: turning analytics off removes _ga and _ga_<container id> from your browser.

Cookies set by a third party on its own domain cannot be deleted by us. Use your browser's site-data controls, or that company's own opt-out tools, to remove those.

Your browser's settings can also block or delete cookies entirely. Blocking the strictly necessary ones will break sign-in and the protected forms.

7. Do Not Track and Global Privacy Control

These are two different browser signals and we treat them differently. California law requires us to tell you which, whichever answer we give.

Do Not Track: we do not respond differently to a Do Not Track signal. There is no agreed standard for how a site should react to it, and we would rather say so than imply a protection we do not provide.

Global Privacy Control: we do honour it. When your browser sends a GPC signal we treat it as a refusal of the analytics and advertising categories, and those technologies are not loaded. The signal takes precedence over an earlier acceptance in our banner, because an opt-out that a previous click could override would not be an opt-out. If you want those categories enabled, turn the signal off in your browser.

8. Cookies on the embedded widget

Our widget runs on our customers' websites. On those sites the operator of the site is responsible for its own cookie notice and consent interface, and their choices govern what runs there.

If you reached a quote form through another company's website, ask that company about its cookie practices. What we do with the data itself is described in our Privacy Policy and in the Data Processing Agreement we hold with that company.

9. Where this fits with our other notices

This policy covers the technologies. What we do with the resulting personal data, on which legal basis, for how long, and with whom we share it, is in our Privacy Policy. For data subjects in Türkiye, the disclosure required by Law No. 6698 is in our KVKK Privacy Notice, and applications are made through the Data Subject Application Form.

If a change to this policy adds a category or a new third party, we will ask for your consent again rather than assume the old answer still applies.

Questions: [email protected].