Cookie Policy
This Policy explains how Finite Software Systems Ltd. ("the Company", "we") uses cookies and similar technologies on the website finite-soft.com (the "Site"). It complements the Privacy Statement.
1. Scope
The Policy describes which cookies and similar technologies we use, why we use them, and how you can manage your consent.
It covers:
- cookies set directly by the Site (first-party);
- cookies and similar technologies set by third parties whose services we load on the Site (Google reCAPTCHA, Google Maps, Google Analytics 4, Google Ads conversion measurement, OpenAI Ads Measurement Pixel).
2. What cookies are
Cookies are small text files that a website may store in the visitor's browser. They are used for various purposes — maintaining a session, remembering choices, measuring usage, and so on.
Similar technologies include localStorage, sessionStorage, web beacons, and device fingerprinting. In this Policy, "cookies" refers to all of them unless otherwise stated.
3. Categories of cookies
We distinguish four categories. Only the first works without consent.
3.1 Strictly necessary
These cookies are required for the Site's basic functionality (session, abuse protection, recording your consent banner choice) and to fulfil your express request (for example to load the contact form).
They are set without consent under Article 5(3) of Directive 2002/58/EC, transposed into Bulgarian law through the Electronic Communications Act.
3.2 Functional
These cookies remember visitor choices and settings (for example a language preference, if managed via a cookie).
We do not currently use functional cookies. The category is exposed in the Policy and in the consent banner so it remains available if we add such cookies in future (for example if we move from URL-based to cookie-based locale switching).
3.3 Analytics
These cookies help us understand how visitors use the Site (number of visits, most-viewed pages, session duration). They are set only after your explicit consent through the cookie banner.
We currently use Google Analytics 4 (GA4) in this category.
3.4 Advertising measurement
With your consent, we measure whether our ads on Google and in ChatGPT lead to enquiries. We never send your name, email address, company or message.
With your consent, we use the OpenAI Ads Measurement Pixel and Conversions API to measure whether our ChatGPT ads lead to enquiries. After an enquiry is saved, our server may send OpenAI a conversion event with a random event identifier, available advertising/browser identifiers, IP address, browser information and the confirmation-page URL. We do not include your name, email address, company or message. Browser and server events use the same random identifier so OpenAI counts the conversion only once. You can withdraw consent through Cookie settings; the contact form remains available.
With your consent, we also use Google Ads conversion measurement to understand which of our Google ads lead to enquiries. When you arrive from one of our Google ads, Google's tag stores a click identifier in your browser and carries it between pages of the Site; if you later send an enquiry, Google is told that an enquiry occurred and may match it to that click. We do not send your name, email address, company or message. This uses the same Google Analytics tag described in section 3.3, with Google's advertising consent signals enabled; if you refuse this category, those signals stay disabled and the click identifier is not stored. You can withdraw consent through Cookie settings; the contact form remains available.
4. Cookie inventory
4.1 First-party (set directly by the Site)
| Name | Category | Purpose | Lifetime |
|---|---|---|---|
PHPSESSID | Strictly necessary | Session identifier for the Site to function correctly | Until browser close |
consent_state | Strictly necessary | Records your choice from the consent banner | 12 months |
consent_policy_version | Strictly necessary | Version of the Cookie Policy you have consented to | 12 months |
4.2 Third-party cookies
We load the following third-party services. When loaded, they may set their own cookies. The exact list of cookies set by these services is determined by the provider and may change.
| Service | Category | Purpose | Provider | Lifetime (provider-set) |
|---|---|---|---|---|
| Google reCAPTCHA | Strictly necessary | Form protection against automated abuse | Google LLC | Up to 6 months |
| Google Maps | Strictly necessary | Display of office addresses on /contact | Google LLC | Up to 12 months |
Google Analytics 4 (_ga, _ga_<id>) | Analytics | Pseudonymous usage statistics (after consent) | Google LLC | Up to 2 years |
Google Ads conversion measurement (_gcl_*) | Advertising measurement | Attribute consented enquiries to Google ads | Google LLC | Up to 90 days |
| OpenAI Ads Measurement Pixel (including __oppref, __obref) | Advertising measurement | Attribute consented enquiries to ChatGPT ads | OpenAI | Provider-set; see OpenAI documentation |
Details of Google's cookies are available at policies.google.com/technologies/cookies.
5. Third parties and international transfers
The Google services in section 4.2 involve transfers of personal data (IP address, user-agent, identifiers) to Google LLC in the USA. Such transfers are protected by the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795). For a full description see the Privacy Statement, section 5.
OpenAI processes advertising measurement data under its Ad Tools Data Processing Addendum. For EEA data, OpenAI Ireland Limited is the recipient; onward transfers outside the EEA use the safeguards described there. See the measurement documentation and Privacy Policy for provider details.
6. How to manage your consent
On your first visit, a banner appears with three buttons of equal prominence:
- Accept all — you accept all categories described in the banner.
- Reject all — you reject all non-strictly-necessary categories. The Site continues to work; analytics, functional and advertising measurement cookies are not set.
- Settings — you get granular control by category.
Your choice is recorded for 12 months. During that time the banner does not appear again, unless:
- we update the Policy (new value in
consent_policy_version); - you manually clear your cookies.
You can at any time:
- change your choice through the "Cookie settings" link at the bottom of every page of the Site;
- clear all cookies of the Site through your browser's settings — your next visit will show the banner again.
7. What happens if you reject non-strictly-necessary cookies
The Site remains fully functional. Only the following stop working:
- Google Analytics 4 — we do not record statistics about your visits.
- Google Ads conversion measurement — we do not store the click identifier and do not report enquiries as conversions.
- OpenAI Ads Measurement Pixel — we do not load it or report advertising conversions.
Google reCAPTCHA and Google Maps continue to work regardless of your choice, as they fall under Strictly necessary on the basis of legitimate interest (see Privacy Statement, sections 3.4 and 3.5).
8. Changes to this Policy
We may update this Policy from time to time — for example when adding new services or when changing retention periods. The current version is always available on this page, with the "last updated" date at the bottom.
For material changes that would require a new consent (for example a new cookie category or a new recipient), the banner reappears and we ask for a fresh choice.
9. Translation
The Policy is published in Bulgarian and English. In case of discrepancy between the two versions, the Bulgarian version prevails.
10. Contact
Questions about this Policy:
- Email: info@finite-soft.com
- GDPR requests: /dsr
- Postal: Finite Software Systems Ltd., 4 Gorotzvet Str., 1421 Sofia, Bulgaria
Last updated: 21 September 2026