Cookie Policy

1. Introduction

1.1 This Cookie Policy explains how OpsHero OOD, UIC 202862235, with registered office at Sinanishko ezero 9A str., 1680 Sofia, Bulgaria ("OpsHero", "we", "us", or "our"), uses cookies on the OpsHero website at opshero.com (the "Site").

1.2 This Cookie Policy is incorporated into and forms part of the OpsHero Privacy Policy and Terms of Service. Capitalised terms used but not defined in this Cookie Policy have the meanings set out in those documents.

1.3 On your first visit, a banner asks which optional items you allow. There are three optional categories – Embedded content, Analytics and Marketing. Nothing is selected in advance, rejecting everything is one button of the same size as accepting everything, and nothing optional runs until you choose. You can change your answer at any time from Cookie settings in the footer of every page.

2. What are cookies and similar technologies

2.1 Cookies. Cookies are small text files that are placed on your device (computer, tablet, smartphone) when you visit a website. They are widely used to make websites work, to improve user experience, and to provide information to website operators.

2.2 Similar Technologies. The Site keeps your answer to the banner in your browser's local storage, under the name oh-consent, so that you are not asked again on every page. It holds only your choices and the time you made them, and it is never sent to us. If you allow them, the analytics and marketing tools in Section 5 may also use your browser’s storage, as described there. The Site uses no pixels or web beacons of its own.

2.3 First-Party vs. Third-Party Cookies.

• First-party cookies are set on the domain of the website you are visiting. OpsHero sets none of its own. If you allow them, Google Analytics, Microsoft Clarity and the LinkedIn Insight Tag set some of their cookies on this Site’s domain, which makes those cookies first-party even though those providers operate them.
• Third-party cookies are set by external services a site integrates. The data collected by third-party cookies is processed by those third parties under their own privacy policies.

2.4 Session vs. Persistent Cookies.

• Session cookies are temporary and are deleted when you close your browser.
• Persistent cookies remain on your device for a defined period or until you delete them.

3. Legal basis for using cookies

3.1 Our use of cookies is governed by the EU ePrivacy Directive (Directive 2002/58/EC, as amended), the GDPR, and Bulgarian implementing legislation.

3.2 Cookies that are strictly necessary for the operation of the Site may be set without your consent, as they are exempt under Article 5(3) of the ePrivacy Directive.

3.3 All other cookies and similar technologies – embedded content, analytics, session replay and marketing – require your prior, explicit, opt-in consent before they are placed on your device. That consent is what the banner described in 1.3 asks for, one category at a time.

4. Categories of cookies we use

Four categories are present on the Site:

Category 1: Strictly Necessary

These cookies are essential for the Site to function and to keep it available. They cannot be disabled. No consent required. See 5.1.

Category 2: Embedded content

The Google Calendar scheduler on the booking page, which lets Google set a cookie once it loads. Consent required. See 5.2.

Category 3: Analytics

Google Analytics 4 and Microsoft Clarity, which show us how the Site is used – including, in Clarity's case, recordings of individual visits. Consent required. See 5.4.

Category 4: Marketing

The LinkedIn Insight Tag, which measures our LinkedIn campaigns and lets us show our adverts to people who have visited. Allowing Marketing also lets Microsoft Clarity share its data with Microsoft Advertising. Consent required. See 5.5.

5. Detailed list of cookies

The following sections list the cookies that may be set when you visit the Site, together with their provider, purpose, duration, and category.

How you are asked. Nothing optional loads on this Site until you allow it. The banner asks on your first visit, with each category off until you turn it on, and your answer is kept as described in 2.2. You can change it at any time from Cookie settings in the footer of every page – withdrawing is one click, in the same place and of the same weight as giving. This policy is updated before any new tool runs on the Site, not after.

5.1 Strictly necessary cookies (always active)

OpsHero sets no cookies of its own on the Site. The cookie above would be set by Cloudflare, which sits in front of the deployment, not by OpsHero. At the time of writing the Site returns no Set-Cookie header on any page, so until you allow an optional category no cookie is stored on your device at all.

5.2 Embedded content: Google Calendar

One page on the Site, Book a consultation, offers a Google Calendar appointment-scheduling frame so you can pick a time. It is the only third-party embed on the Site.

It does not load until you allow it. You can allow it through the Embedded content category in the banner, or on the booking page itself, which shows a panel in the frame's place explaining that loading the scheduler sets a Google cookie, with a button to load it and a link to open the scheduler on Google instead. Nothing is requested from Google, and no cookie of theirs is set, until you do. Both record the same answer; the panel carries a control to stop loading the scheduler, which takes effect immediately and makes the page ask again next time.

Any cookies or similar storage set inside that frame once it is loaded are set by Google under Google's own privacy policy, not by OpsHero, and OpsHero does not control them – including after you withdraw, because a cookie Google has already placed is removed through your browser rather than by this Site.

5.3 Google Tag Manager

Google Tag Manager is the script that loads the analytics and marketing tools below. It loads on every page, including before you have made a choice, with analytics and advertising consent refused, and runs none of those tools until you allow the category that covers it. If you refuse both Analytics and Marketing, the Site stops loading it for as long as your answer is kept in your browser (see 2.2); if that record is cleared or cannot be saved, you are asked again and it loads until you answer. If you later allow either category, it loads again straight away. Google states that Tag Manager “does not collect, retain, or share any information about visitors to our customers’ properties, including page URLs visited”, other than data in standard HTTP request logs, which it deletes within 14 days. Google's statement.

Loading it sends your IP address and browser details to Google, as any request to a website does. Once you have refused both Analytics and Marketing, it is not loaded on later pages while your answer is kept in your browser, so it no longer receives even that request.

5.4 Analytics (with your consent)

These run only if you allow Analytics.

5.4.1 Google Analytics 4

Provided by Google Ireland Limited. Google acts as our processor under the Google Ads Data Processing Terms.

What it is for. Counting visits and seeing which pages are read, how people arrive, and where they leave.

What it collects. The pages you view, the page that referred you, your browser, device, screen size and language, your approximate location (city), and the time and length of your visit, tied to a random identifier. Google states that Analytics does not log or store IP addresses; for visitors in the EU, your IP address is used on EU servers to work out your approximate location and then discarded.

How we have it set. We keep Analytics data for 2 months, and Google signals is switched off.

How long the provider keeps the data. 2 months for data about individual visits; aggregated reports are kept longer.

How Google uses information from sites that use its services · Google Privacy Policy · Google Analytics opt-out browser add-on

5.4.2 Microsoft Clarity

Provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft and OpsHero are each an independent controller of this data under Clarity’s terms, and Microsoft may use it for its own purposes, including to provide Microsoft Advertising, as its privacy statement describes.

What it is for. Seeing how visitors use a page – where they click, how far they scroll, and where a page fails them – through heatmaps and recordings of individual visits.

What it collects. A recording of what the page showed you and what you did on it – mouse movements, clicks, scrolling and page changes – which is a reconstruction of the page, not a video. Text you type into forms is never recorded, and numbers and email addresses on the page are masked in your browser before anything is sent. Also your browser, device and approximate location (from your IP address).

How we have it set. Clarity masks sensitive content in your browser before it is sent (its “Balanced” mode). If you also allow Marketing, Clarity shares its data with Microsoft Advertising.

How long the provider keeps the data. Recordings are kept for 30 days; heatmaps and a sample of recordings for up to 13 months.

Microsoft Privacy Statement · Microsoft third-party advertising settings · Opt out of Clarity (choose Microsoft)

5.5 Marketing (with your consent)

These run only if you allow Marketing.

5.5.1 LinkedIn Insight Tag

Provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn is the controller of the data it collects through the tag, under LinkedIn’s Independent Controller Addendum. OpsHero receives only aggregated reports that do not identify anyone.

What it is for. Measuring whether our LinkedIn campaigns lead to visits and enquiries, understanding the professional make-up of our visitors in aggregate, and showing our adverts on LinkedIn to people who have visited this Site.

What it collects. The address of the page you visit, the page that referred you, your IP address, your browser and device, and the time of the visit. LinkedIn truncates or hashes the IP address.

How we have it set. We use LinkedIn’s conversion tracking and website retargeting.

How long the provider keeps the data. LinkedIn removes direct identifiers within 7 days, making the data pseudonymous, and deletes it within 180 days.

LinkedIn states that the Insight Tag uses a subset of the cookies in its Cookie Table without saying which, and that which ones are set depends on whether you are a LinkedIn member and signed in. These are the ones it lists for advertising and analytics on other sites.

LinkedIn Privacy Policy · LinkedIn Cookie Table (the full list) · LinkedIn advertising settings, for members · LinkedIn retargeting opt-out, for non-members

6. Third-party data transfers

6.1 Some of the providers above process data outside the European Economic Area (EEA). Cloudflare operates a global edge network that includes locations outside the EEA, and Google, Microsoft and LinkedIn process data in the United States.

6.2 Where international transfers occur, we and our providers rely on appropriate safeguards under Chapter V GDPR, including:

6.3 You may request more information about transfer safeguards by contacting [email protected].

7. How to manage cookies

7.1 Cookie settings on this Site

Cookie settings, in the footer of every page, reopens the banner with your current choices. Turning a category off takes effect at once: its tools stop from the next page. The Site also deletes the cookies those tools set on its own domain (listed in Section 5 as “This Site”), and tells Microsoft Clarity, which then deletes its own. Cookies that Google, Microsoft or LinkedIn set on their own domains cannot be removed by this Site; your browser can remove them, as described in 7.3.

7.2 Opting out with the providers

• Google Analytics: the Google Analytics opt-out browser add-on.
• Microsoft Clarity: choose Microsoft at optout.aboutads.info. Clarity also honours the Global Privacy Control signal.
• LinkedIn: members, through LinkedIn's advertising settings; non-members, through LinkedIn's retargeting opt-out.

7.3 Browser-level controls

Most browsers allow you to control cookies through browser settings. You can:

• Block all cookies
• Block only third-party cookies
• Delete existing cookies
• Be notified when a cookie is set

Browser-specific instructions:

• Google Chrome: support.google.com/chrome/answer/95647
• Mozilla Firefox: support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• Apple Safari: support.apple.com/guide/safari/manage-cookies-sfri11471/mac
• Microsoft Edge: support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge

Note that disabling strictly necessary cookies through your browser may affect the functionality of the Site.

7.4 Do Not Track

The Site does not read the browser “Do Not Track” (DNT) signal. It does not need to: nothing optional runs unless you allow it in the banner. Note that neither Microsoft Clarity nor LinkedIn responds to DNT themselves.

8. Consequences of rejecting cookies

8.1 Rejecting any optional category changes nothing you can do on the Site. The one difference is on the booking page: without Embedded content the scheduler does not load, and the page links to the same scheduler on Google instead.

8.2 If you block all cookies in your browser, including strictly necessary ones, the functionality of the Site may be affected.

9. Children

9.1 The Site is not intended for children. We do not knowingly collect personal data from children through the Site.

10. Changes to this Cookie Policy

10.1 We may update this Cookie Policy from time to time to reflect changes in the cookies we use, in technology, or in legal requirements. The current version is identified by version number and effective date at the top of this document.

10.2 If we introduce a new non-essential cookie or tool, we will update this Cookie Policy first and obtain your prior, explicit consent before it runs.

10.3 Previous versions of this Cookie Policy are available upon request to [email protected].

11. Contact us

For questions about this Cookie Policy or our use of cookies:

OpsHero OOD
Sinanishko ezero 9A str.
1680 Sofia, Bulgaria
UIC: 202862235

• Privacy enquiries: [email protected]

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни – КЗЛД):

• Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
• Email: [email protected]
• Website: www.cpdp.bg