Version dated: 28.10.2026. The lists of files in sections 4.1 and 4.2 come from a measurement of the kumplo.com website carried out on 27.10.2026, and the list in section 4.3 comes from the Website’s code.
1. Who is responsible for cookies and what this policy covers
This policy describes the cookies and similar technologies used on the https://kumplo.com website (the “Website”). They are the responsibility of Aggressive Marketing Ltd, a company registered in England and Wales (Companies House) under number 13010433, with its registered office at 60 White Horse Lane, Boston, PE21 8SZ, United Kingdom (“we” or “us”).
The rules for processing personal data, including data collected by means of cookies, are set out in the Website’s Privacy Policy. This policy does not replace it; it explains what we store in your browser, why, and how you can control it.
2. What cookies and similar technologies are
A cookie is a small piece of text that a website stores in your browser and reads on later visits. This policy also covers other ways of storing or reading information on your device that work in a similar way:
- local browser storage (localStorage), which keeps information until it is deleted;
- browser session storage (sessionStorage), which the browser clears when the tab is closed;
- measurement scripts, which read technical information in the browser (for example page loading time) and send it to us or to our provider.
Below, we refer to all these technologies together as “cookies”, unless they need to be distinguished.
“First-party” cookies are stored by the Website itself under the address kumplo.com. “Third-party” cookies are stored by other companies under their own addresses. In the measurement of 27.10.2026, the Website did not store any third-party cookies in the browser; the external companies your browser connects to are listed in section 5.
3. Types of cookies and when we ask for consent
Storing information on your device or reading it requires your consent, unless it is strictly necessary to provide a service you have requested. This is laid down in Article 5(3) of Directive 2002/58/EC (on privacy and electronic communications), implemented in every European Union member state by national law.
As we are a UK company, we also apply the UK Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), regulation 6. Since 5 February 2026, UK law has also allowed, without consent, cookies used solely for statistics and for adapting the appearance or functioning of a website, provided that the user receives clear information and a simple, free means of objecting. European Union law contains no such exception, so we ask all visitors for consent to statistical cookies, regardless of their country.
The exception is Cloudflare Web Analytics, the visit and page speed statistics described in section 5. It stores nothing in your browser and runs without consent, on the basis of our legitimate interest in statistics and in the security of the Website. Section 8 explains how to object.
We use four types of cookies:
- Necessary. Without them the Website will not work as you expect: they keep your cart and session, remember your cookie choice and protect the Website against abuse. They do not require consent and cannot be switched off on the Website.
- Functional. They remember your layout and language settings so that the page looks the same on later visits.
- Statistical. They allow us to count visits and see how you arrive at the Website and how you use it. They require your consent.
- Marketing. In the measurement of 27.10.2026, the Website did not use advertising cookies or pixels of advertising or social networks. If this changes, we will update this policy and ask for your consent before any such cookies start to operate.
4. List of cookies and browser storage
The tables in sections 4.1 and 4.2 cover the files measured on 27.10.2026 on a computer and a phone, on the home page, in a category, on a product page, after adding a service to the cart, on the cart page, on the checkout page (before payment) and on the sign-in page. A storage period of “session” means that the browser deletes the file when it is closed. Some files appear only in specific situations, which we note in the “Purpose” column.
4.1. Cookies (all stored by the Website under the address kumplo.com)
| Name | Purpose | Storage period | Type | Consent |
|---|---|---|---|---|
| wp_woocommerce_session_* | Cart session identifier: links your browser to the cart stored on the Website. Appears after you add a service to the cart. | 48 hours | necessary | no |
| woocommerce_items_in_cart | Indicates that the cart is not empty, so that the Website shows its current contents. Appears after you add a service to the cart. | session | necessary | no |
| woocommerce_cart_hash | Hash of the cart contents, by which the page recognises that the cart has changed. Appears after you add a service to the cart. | session | necessary | no |
| PHPSESSID | Server session identifier used by the currency selection plugin so that the cart and checkout keep the currency you have chosen. It is not used for tracking and disappears when you close the browser. | session | functional | no |
| pll_language | Selected language version of the Website. | 365 days | functional | no |
| cleafs_promo_timers_v1 | State of the promotion countdown shown next to an offer, so that the counter does not restart when the checkout page is opened again. It contains no identifier and is not sent to external companies. It appears on the checkout page. | 48 hours | functional | no |
| cleafs_vid | Random browser identifier that allows us to link successive visits and see how you arrive at the Website and how the purchase proceeds. | 400 days | statistical | yes |
| cleafs_sid | Identifier of the current visit; a new visit starts after 30 minutes of inactivity. | session | statistical | yes |
| cleafs_ft | Source of your first visit (for example a search engine, an advert or a link from another website). | 400 days | statistical | yes |
4.2. Browser storage (localStorage and sessionStorage)
| Name | Where | Purpose | Storage period | Type | Consent |
|---|---|---|---|---|---|
| cleafs_cookies | localStorage | Your choice in the cookie banner (whether you consent to statistical cookies) and its date. | until browser data are deleted | necessary | no |
| cleafs_mc_v1 | localStorage | Copy of the mini cart contents in the page header, so that they can be shown immediately on arrival. Appears after you add a service to the cart. | until browser data are deleted | necessary | no |
| top_bar_check | localStorage | Remembers whether the top bar of the page uses the phone or computer layout. | until browser data are deleted | functional | no |
| cleafs_promo_timers_v1 | localStorage | Copy of the promotion countdown state (the same information as in the file cleafs_promo_timers_v1 from section 4.1). It appears on the checkout page. | until browser data are deleted | functional | no |
| ally-supports-cache | localStorage | Technical file stored on the checkout page by the payment provider’s script (Mollie): a cache of browser capability detection needed for the payment form to work correctly. | until browser data are deleted | necessary | no |
| cid_v4 | localStorage | Random browser identifier in Google Analytics 4, which we use to count visitors. | until browser data are deleted or consent is withdrawn | statistical | yes |
| _p, _ss, sct, sid | sessionStorage | Current visit data for Google Analytics 4 (visit number and counter, measurement sending status). | until the tab is closed or consent is withdrawn | statistical | yes |
| cleafs_ev_limit | localStorage | Counter of purchase path measurement events in the current visit (at most 200 per visit). | until browser data are deleted | statistical | yes |
4.3. Files that appear only in specific situations
We determined the files in this section from the Website’s code, because an ordinary visit does not store them. Each of them appears only after the action described in the “Purpose” column, for example after signing in, arriving through a link with a discount code, or placing an order.
| Name | Where | Purpose | Storage period | Type | Consent |
|---|---|---|---|---|---|
| wordpress_logged_in_*, wordpress_sec_* | cookie | They confirm that you are signed in to your account. They appear after you sign in or create an account (with a PIN code from an e-mail, a link in an e-mail, a password, through Google, Facebook or Apple, or with a passkey). | 14 days or until the browser is closed, depending on the sign-in method | necessary | no |
| cleafs_did | cookie | Random browser identifier stored in the account event log (signing in, including failed attempts, creating an account, requesting a code, signing out, placing an order, payment, changing sign-in details). It allows the same browser to be recognised at later events and abuse to be detected, for example creating new accounts to get around a block. It appears at the first such event. | 400 days | necessary | no |
| __Host-cleafs_oauth_wiazanie, __Host-cleafs_oauth_czeka | cookie | Technical files for secure sign-in through Google, Apple or Facebook. The first links the return from the provider to your browser so that nobody can substitute someone else’s account for yours; the second points to data from the provider that is waiting for the e-mail address to be confirmed with a code. They appear after you click the Google, Apple or Facebook sign-in button. | 15 minutes | necessary | no |
| cleafs_oauth_provider | sessionStorage | Remembers which sign-in provider (Google, Apple or Facebook) you used, so that the right message can be shown when you return to the page. It appears after you click a sign-in button. | until the tab is closed | functional | no |
| wp-resetpass-* | cookie | Short-lived technical file that allows a new password to be set securely after you click the link in an e-mail. It appears only while a new password is being set. | until the browser is closed | necessary | no |
| cleafs_order_email_verified_*, cleafs_thankyou_key_verified_* | cookie | They record in this browser that it placed a given order, so that the thank-you page can show it without asking for the e-mail address again. They appear after an order has been placed. | 7 days | necessary | no |
| cleafs_coupon | cookie | The discount code from the link you used to enter the Website, so that it is applied once a service is added to the cart. It appears after you arrive through a link with a discount code. | 7 days | functional | no |
| cleafs_landing | cookie | The name of the campaign or page you came from (a link with a discount code or an advertising landing page). We attach it to the order so that the order can be attributed to the campaign; it is not used to show advertising. It appears after you arrive through such a link. | 30 days | partner | no |
| promoVariants, promo_variants_upgrades_* | cookie and localStorage | They remember the promotional extras and order upgrades you have chosen, so that they stay visible in the cart and at checkout after the page is refreshed. They appear after you choose such an extra. | 30 days (cookie), until browser data are deleted (localStorage) | functional | no |
| buba-username | cookie | The account name you entered in the service form and the Website checked successfully, so that the field can be filled in on your next visit. It appears after the account name has been checked. | 90 days | functional | no |
| cleafsRoutingSrc | sessionStorage | Remembers the type of referral link (profile, comment, group, event or media item) that took you to the service form, so that the order can be attributed to it. It appears after you arrive through such a link. | until the tab is closed | statistical | no |
| cleafs_banner_closed, cleafs_vat_suggest_dismissed_*, cleafs_country_switch_dismissed_*, cleafsQupRetencja | sessionStorage | They remember in the current tab that you closed or dismissed a window or suggestion (the discount code banner, a VAT number or country change suggestion at checkout, the offer window shown when you untick an option), so that they are not shown again during this visit. | until the tab is closed | functional | no |
| ty_v2_expires_* | localStorage | The end time of the offer countdown on the thank-you page, so that the counter does not restart when the page is refreshed. It appears after an order has been placed. | until browser data are deleted | functional | no |
| cor_exit_shown | sessionStorage | Remembers that we showed the window displayed when you leave the order payment page, so that it is not shown again during this visit. It appears on the order payment page. | until the tab is closed | functional | no |
Opening the checkout page and filling in the order fields before payment does not store any additional files in your browser beyond those described in sections 4.1 and 4.2.
The Website’s protection against attacks (Cloudflare) may store its own technical file if it detects suspicious traffic; no such file appeared in the measurement of 27.10.2026.
5. External companies your browser connects to
When you use the Website, your browser also connects to the servers of external companies. Each such connection passes your IP address and technical information about your browser to that company. In the measurement of 27.10.2026 these were:
- Google (Google Analytics 4), address www.google-analytics.com: sending visit measurement data with the cid_v4 identifier. Only after your consent to statistical cookies.
- Cloudflare (Cloudflare Web Analytics, visit and page speed statistics), address static.cloudflareinsights.com and the address /cdn-cgi/rum on the Website: Cloudflare itself adds this script to the pages of the Website for every visitor. The script sends Cloudflare the address of the page you are viewing, the address of the page you came from and the page loading times; we only see aggregated reports based on this. It does not store cookies or anything else in the browser. It runs without consent, including after you choose “Reject” (section 3).
- Cleafs Technologies L.L.C-FZ (Dubai), address cleafs.com: after you enter an account name in the service form, the browser downloads the profile picture from there to show whether the account entered is the right one. It does not store cookies in the browser.
- Mollie (payment provider), address js.mollie.com: on the checkout page the browser downloads the payment provider’s script that handles the payment form, so the provider receives your IP address and technical information about your browser. The script stores one technical file in the browser storage, described in section 4.2.
Where these companies process data and on what basis we transfer it outside the European Economic Area and the United Kingdom is described in the Privacy Policy. Payment gateways (for example a card or cryptocurrency operator) may store their own cookies on their pages, which you go to when paying; the rules of those operators apply to them.
6. Purchase path measurement on the Website
The files cleafs_vid, cleafs_sid, cleafs_ft and the counter cleafs_ev_limit are used by our own measurement. It records how you arrive at the Website (for example from a search engine, an advert or a link from another website), which pages you view and which stage of the purchase you are at. It sends the names of form fields and the number of changes, never the content of what you type. The data go only to the Website under the address kumplo.com, not to external companies. They are used for sales statistics and to assess which traffic sources work, so we treat them as statistical cookies, which require your consent.
When an order is placed, a script on the checkout page reads characteristics of your device and browser, which serve to protect against fraud, and sends them together with the order form. It stores nothing in your browser in the process (it does not set cookies or browser storage). The scope of these data is described in the Privacy Policy.
7. How to give, change and withdraw consent
On your first visit, the Website shows a banner with the buttons “Accept” and “Reject” and a “settings” link. Until you make your choice, the Website stores only necessary and functional cookies in your browser and does not load Google Analytics or our purchase path measurement.
- “Accept” means consent to statistical cookies.
- “Reject” means no consent: the Website works normally, just without Google Analytics and without our purchase path measurement (section 6).
- In the “Cookie settings” window you can see the types of cookies. Necessary cookies are always active. You switch statistical cookies on and off with a toggle and confirm your choice with the “Save settings” button.
Your choice in the banner does not apply to Cloudflare Web Analytics (section 5), which runs independently of it.
You can change your choice at any time using the “Cookie settings” link in the footer of every page of the Website. Withdrawing consent is as easy as giving it and does not affect the lawfulness of what took place before withdrawal. After you withdraw consent, from the next page the Website does not load Google Analytics or our purchase path measurement and deletes from your browser the identifiers they stored.
Refusing or withdrawing consent does not limit access to the services or the prices on the Website.
8. Objecting to functional and statistical cookies
You can delete or block functional cookies (page layout, language) in your browser settings (section 9); the Website will then work, just without remembered settings. You can object to statistical cookies free of charge using the same toggle in the “Cookie settings” window. You can also write to us at [email protected].
You cannot switch off Cloudflare Web Analytics (section 5) with the toggle in the banner. If you do not want it to cover your visits, block the address static.cloudflareinsights.com in your browser (for example with a content blocking extension); the Website will work normally.
9. Browser settings
Every popular browser lets you delete stored cookies and site data and block them from being stored, for all websites or only for selected ones. You will find instructions in your browser’s help. Deleting the Website’s data also deletes the record of your choice in the banner, so we will ask you again on your next visit. Blocking necessary cookies may stop the cart and sign-in from working.
10. How long we remember your choice
We store your choice only in your browser, in local storage under the name cleafs_cookies, together with the date on which you made it. It stays there until you change your choice or delete your browser data. We do not send it to our server. On another device or in another browser, we will ask for your consent separately.
11. Changes to this policy and contact
We update this policy when a new cookie, script or external company appears on the Website, and we give the date of the latest version at the top. If the change concerns cookies that require consent, we will ask you for it again.
Please send questions about cookies to [email protected] or by post to: Aggressive Marketing Ltd, 60 White Horse Lane, Boston, PE21 8SZ, United Kingdom.