Automatic translation for information purposes only. The Romanian version prevails.
COOKIES AND SIMILAR TECHNOLOGIES POLICY
Expatio Platform (Beta-Group) — https://expatio.ai
I. WHAT THIS IS ABOUT
Like most websites, Expatio stores and reads information on your terminal equipment, specifically the computer, phone, or tablet you use to visit us. This document explains what information we store, for what purpose, for how long, and how you can control this.
This policy should be read together with the Privacy Information Notice, available at https://expatio.ai/confidentialitate.
The data controller is MED TIMES ONLINE S.R.L., with its registered office in Bucuresti, Sectorul 3, Bd. Poet Octavian Goga Nr 4, Bloc M26 scara 3 Ap 60 camera 1, CUI 38043734, J40/13641/31.07.2017, e-mail [email protected], data protection officer [email protected].
II. LEGAL FRAMEWORK
The storage of information in the user's terminal equipment and access to information already stored are carried out under the conditions of Article 4 paragraph (5) of Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, which transposes Article 5 paragraph (3) of Directive 2002/58/EC.
The rule is that these operations are permitted only with the user's prior consent, expressed after clear and complete information. The exception concerns cases where storage or access are strictly necessary for the transmission of communication or for the provision of a service expressly requested by the user.
When the information read or stored constitutes personal data, the subsequent processing is also subject to Regulation (EU) 2016/679, and the consent must meet the conditions of Articles 4 point 11 and 7 thereof: freely given, specific, informed, and unambiguous.
For users located outside the European Union, additional local rules may apply. In the case of Switzerland, the Federal Act on Data Protection does not contain a rule equivalent to prior cookie consent, but requires transparent information and the right to object. We apply the more protective standard to all users, regardless of their location, namely prior consent for cookies that are not strictly necessary.
III. WHAT ARE COOKIES AND SIMILAR TECHNOLOGIES
A cookie is a small text file, consisting of letters and numbers, sent by a server to your browser and stored on your device. Upon a subsequent visit, the browser retransmits it to the server, which thus recognizes the device.
Session cookies are automatically deleted when the browser is closed. Persistent cookies remain stored until their duration expires or until they are manually deleted.
First-party cookies are placed by the domain you are visiting. Third-party cookies are placed by other domains, belonging to providers whose services are integrated into the page.
Similar technologies produce equivalent effects and fall under the same rules: browser local storage (local storage and session storage), local databases (IndexedDB), tracking pixels and invisible images embedded in pages or emails, development kits integrated into mobile apps, as well as device identification techniques based on a combination of technical characteristics.
Cookies are not computer programs, do not run code and cannot access files on your device.
IV. CATEGORIES USED BY US
IV.1. Strictly necessary cookies
They make the platform's operation possible. Without them, you cannot log in, you cannot post an ad and we cannot keep the session secure.
Legal basis: Article 4 paragraph (5) second sentence of Law no. 506/2004, respectively the exception for the expressly requested service. Consent is not required and they cannot be disabled from the preferences panel.
- expatio-session — Provider: Expatio (first-party) · Purpose: Maintaining the authentication session · Duration: 120 minutes of inactivity · Type: HTTP
- XSRF-TOKEN — Provider: Expatio (first-party) · Purpose: Protection against cross-site request forgery attacks · Duration: Session · Type: HTTP
- expatio_cookie_consent — Provider: Expatio (first-party) · Purpose: Remembering the choice expressed in the cookie banner · Duration: Until manual deletion · Type: Local storage
- __cf_bm, _cfuvid (possible) — Provider: Cloudflare, Inc. · Purpose: Detection of automated traffic and abuse; may be set by the Cloudflare network when protection requires it (not observed during the check on 21.09.2026) · Duration: Duration set by Cloudflare · Type: HTTP
- expatio.amprenta.trimisa — Provider: Expatio (first-party) · Purpose: The timestamp of the last transmission of the device's technical fingerprint (see the note below the table) · Duration: Until manual deletion · Type: Local storage
We do not use load-balancing cookies.
Device technical fingerprint (without cookie): for the detection of multiple accounts and abuse, the platform calculates at most once every 24 hours a technical fingerprint of the device, from stable characteristics (screen dimensions, browser language list, rendering characteristics), without third-party libraries, and transmits it to the Operator's servers. The fingerprint is a linking signal between accounts, not proof of identity, and is not used for advertising. The legal basis is the legitimate interest in fraud prevention (section VI point 7 of the Information Note).
IV.2. Functionality cookies
They remember the choices you make, so they are not requested from you on every visit.
Legal basis: this information is stored only following your explicit action (activating an option, choosing a device, writing a draft, performing a search), to provide the function you requested; it is stored exclusively in your browser, is not transmitted to third parties and is not used for tracking.
- expatio_contrast — Provider: Expatio (first-party) · Purpose: Remembering the "high contrast" preference (set only when you activate the option) · Duration: 1 year · Type: HTTP
- expatio:contrast — Provider: Expatio (first-party) · Purpose: Local copy of the "high contrast" preference · Duration: Until manual deletion · Type: Local storage
- expatio.locatie.amanat — Provider: Expatio (first-party) · Purpose: Postponing the location permission prompt · Duration: Until manual deletion · Type: Local storage
- expatio.gps — Provider: Expatio (first-party) · Purpose: Last known position, stored locally for distance calculation (only if you allowed location) · Duration: Until manual deletion · Type: Local storage
- expatio.apel.camera, expatio.apel.microfon, expatio.apel.difuzor — Provider: Expatio (first-party) · Purpose: Audio and video devices chosen for calls · Duration: Until manual deletion · Type: Local storage
- expatio:emoji:recente, expatio:emoji:ton — Provider: Expatio (first-party) · Purpose: Recently used emojis and chosen skin tone · Duration: Until manual deletion · Type: Local storage
- expatio:ciorna:* — Provider: Expatio (first-party) · Purpose: Drafts of ads, rides and messages you haven't sent yet · Duration: Until manual deletion · Type: Local storage
- expatio.recentAddressSearches — Provider: Expatio (first-party) · Purpose: Recent address searches · Duration: Until manual deletion · Type: Local storage
- expatio.flux.vazute — Provider: Expatio (own) · Purpose: Posts scrolled past in the current session, so they are not marked twice · Duration: Current browser session · Type: Session storage
- expatio.onboarding.val — Provider: Expatio (own) · Purpose: Continuity of the introductory tour between pages on first use · Duration: Current browser session · Type: Session storage
Background maps are loaded from the OpenStreetMap Foundation (tile.openstreetmap.org), which receives the browser's IP address when the map is loaded; as of the check on 21.09.2026, this provider has not set cookies. Address searching is performed on the Operator's own servers.
IV.3. Analytics and audience measurement cookies
We currently do not use audience measurement tools based on cookies or identifiers: no Google Analytics, no Meta, no third-party cookies, and no external error monitoring services. We only use technical server logs and aggregated internal measurements without advertising identifiers. If we introduce such a tool, this policy will be updated, and the tool will be activated only after your consent, except for solutions strictly limited to aggregated statistics under the conditions of supervisory authority guidelines.
IV.4. Marketing and advertising cookies
We currently do not use marketing or advertising cookies, third-party tracking pixels, or email pixels. If we introduce such tools, they will be activated only after your consent, and this policy will be updated in advance.
V. HOW YOU EXPRESS AND WITHDRAW YOUR CHOICE
V.1. First visit banner
Upon first access, a banner is displayed allowing you to accept all categories ("Accept") or keep only strictly necessary cookies ("Only necessary").
Refusal is just as simple as acceptance: the rejection button has the same level of visibility as the acceptance one. Closing the banner, scrolling the page, or continuing to browse does not constitute consent. Until an option is expressed, only strictly necessary cookies are placed. We do not use pre-checked boxes.
V.2. Subsequent modification
The chosen option is stored in the browser's local storage (key expatio_cookie_consent). You can change it at any time by clearing the site data of expatio.ai from your browser settings, after which the banner will be displayed again on your next visit. The withdrawal of consent takes effect for the future and does not affect the legality of the processing carried out previously.
We will request your consent again no later than 6 months after you have expressed it or when the purposes or providers change.
V.3. Browser settings
You can block or delete cookies from your browser settings. Blocking strictly necessary ones makes authentication and the use of some features impossible.
- Google Chrome: Settings, Privacy and security, Cookies and other site data
- Mozilla Firefox: Settings, Privacy and security, Cookies and site data
- Safari: Preferences, Privacy, Manage Website Data
- Microsoft Edge: Settings, Cookies and site permissions
- Opera: Settings, Privacy and security
On mobile devices, advertising identifiers are managed from the operating system settings, privacy section.
V.4. Refusal of analytics tools
We do not use third-party analytics tools, so no separate opt-out is necessary.
VI. STORAGE DURATION
Durations are indicated individually in the tables in section IV. Session cookies are deleted when the browser is closed. For persistent cookies, we apply the principle of data minimization: we do not exceed the duration necessary for the stated purpose and, as a rule, we do not exceed 13 months for audience measurement cookies, and the data collected through them is not kept for more than 25 months.
Proof of consent, respectively the moment of expression, the accepted categories and the banner version, is kept for 3 years, to fulfill the obligation provided in article 7 paragraph (1) of the GDPR.
VII. TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA
The only third party that can set cookies on expatio.ai is Cloudflare, Inc., based in the United States of America, for protection against attacks. Transfers are made based on the adequacy decision regarding the EU-US Data Privacy Framework, when the provider is certified, or based on the standard contractual clauses adopted by Implementing Decision (EU) 2021/914, accompanied by additional measures where the transfer assessment indicates them as necessary.
Additional details and copies of the safeguards can be obtained at [email protected].
VIII. YOUR RIGHTS
Regarding the data collected through cookies, you have the rights provided in articles 15-22 of the GDPR: access, rectification, erasure, restriction, portability and opposition, as well as the right to withdraw consent.
Requests are sent to [email protected]. You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing, B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, Bucharest, e-mail [email protected].
IX. CHANGES
We update this policy whenever the tools used, suppliers, or legal framework change. The current version, along with the update date, is published at https://expatio.ai/cookies. Changes regarding new purposes or new suppliers require requesting a new consent.
X. CONTACT
MED TIMES ONLINE S.R.L., Bucuresti, Sectorul 3, Bd. Poet Octavian Goga Nr 4, Bloc M26 scara 3 Ap 60 camera 1, cod poștal 030982. E-mail: [email protected] | Data Protection Officer: [email protected]