Skip to main content

Cookie Policy

This Policy explains how LASERCUT s. r. o. uses cookies and similar technologies when operating the website https://lasercut.parts, the online ordering platform, the “Laser cutting” section, the e-shop with finished metal products and related online functions.

Necessary cookies are used without consent only to the extent permitted by Section 109(8) of Act No. 452/2021 Coll. on electronic communications.

Functional, analytical and marketing cookies or similar technologies are activated only after consent has been given, and consent may be withdrawn at any time.

Download PDF version

1. Introductory provisions

This Cookie Policy (the “Policy”) explains how LASERCUT s. r. o. uses cookies and similar technologies when operating the website https://lasercut.parts, the online ordering platform, the “Laser cutting” section, the e-shop with finished metal products and related online functions (together, the “Platform”).

The Policy is addressed to visitors and users of the Platform regardless of whether they merely browse it, create a price calculation, upload technical documentation, register a user account, create or submit an order, buy finished products or use any other Platform function.


2. Platform operator

The Platform is operated by:

Company name: LASERCUT s. r. o.

Seat: Gogoľova 326/18, 851 01 Bratislava, Slovak Republic

Reg. No.: 55 033 130

VAT No.: SK2121843625

Commercial register: Bratislava III City Court, section Sro, insert No. 168380/B

Web: https://lasercut.parts

E-mail: [email protected]

Phone: +421 908 789 475


3. What cookies and similar technologies are

Cookies are small text files or similar identifiers that may be stored on or read from a user’s terminal device when visiting a website. They make it possible in particular to ensure the basic functioning of the website, maintain a session, remember user choices, evaluate traffic or – where the user gives the relevant consent – measure advertising effectiveness and support remarketing.

For the purposes of this Policy, the term “cookies” also covers similar technologies, for example local storage, pixel tags or other technical identifiers, where their use is subject to the rules on storing information on, or gaining access to information stored on, the user’s terminal device. Mentioning an example technology in this Policy does not in itself mean that the Platform actually uses it at all times.


4. Legal framework and principles of cookie use

LASERCUT uses cookies in accordance in particular with Section 109(8) of Act No. 452/2021 Coll. on electronic communications, as amended, with Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”), with Act No. 18/2018 Coll. on personal data protection, as amended, and with other generally binding legal regulations applicable to the given processing.

Where a cookie or similar technology is not necessary for the transmission of a communication over a network or for providing a service expressly requested by the user, LASERCUT uses it only after obtaining the user’s demonstrable consent. Where such a technology involves the processing of personal data, the legal basis for the processing is generally consent under Art. 6(1)(a) GDPR.

Necessary cookies may be used without consent only to the extent permitted by Section 109(8) of Act No. 452/2021 Coll. Where their use involves the processing of personal data, the legal basis under the GDPR is determined by the specific purpose of the processing; this may be in particular performance of a contract or pre-contractual steps under Art. 6(1)(b) GDPR, compliance with a legal obligation under Art. 6(1)(c) GDPR or legitimate interest under Art. 6(1)(f) GDPR.


5. Categories of cookies used on the Platform

5.1 Necessary cookies

These cookies are needed for the proper and secure functioning of the Platform or for providing a service expressly requested by the user. They may serve in particular for session management, authentication, security, protection against misuse, storing the user’s cookie choice, retaining the contents of the basket or an order in progress, and technical order processing. Where they meet the statutory necessity conditions, no consent is required for them.

The user’s consent to the use of such cookies is not required only to the extent that storing them or accessing them is strictly necessary solely for the purpose of transmitting or facilitating the transmission of a communication over an electronic communications network, or is strictly necessary for providing a service expressly requested by the user.

5.2 Functional and preference cookies

These cookies allow the Platform to remember settings chosen by the user or to provide enhanced functions that are not necessary for the basic functioning of the Platform. They may concern, for example, the preferred language, the user interface or other personalised settings. Where they do not meet the conditions of a statutory exemption, they are used only on the basis of the user’s prior consent.

5.3 Analytical cookies

Analytical cookies and similar analytical technologies make it possible to measure and evaluate traffic to and use of the Platform. Under the current configuration of the Platform, Google Analytics 4 and LASERCUT’s own analytical identifiers listed in Article 7 are used for this purpose. Under the current configuration, Plausible Analytics and Cloudflare Web Analytics are used without storing analytical cookies or identifiers on the user’s device. Analytical cookies and similar technologies that store information on or access information on the user’s device and are not necessary are activated only after the relevant consent has been given.

5.4 Marketing and advertising cookies

Marketing and advertising cookies and similar technologies may serve in particular to measure and attribute conversions, evaluate advertising campaigns, personalise advertising and support remarketing. According to the current list in Article 7, these are in particular Google Ads and Google / DoubleClick technologies. Such optional technologies are used only after the relevant consent has been given.


6. Cookie consent and its management

On a first visit to the Platform without the user’s prior consent, only the necessary technologies required for the secure functioning of the Platform, authentication, protection against misuse and storing the user’s cookie choice are used. Analytical, functional and marketing technologies that are not necessary for providing a service expressly requested by the user are activated only after consent to the relevant category has been given.

The user may accept all optional categories, refuse them or make a more granular choice by category. The banner contains equivalent “Accept all” and “Reject all” buttons.

The user may change or withdraw consent at any time through the permanently available “Cookie settings” link.

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. After consent is withdrawn, LASERCUT stops using the relevant optional cookies or similar technologies. Cookies already stored on the device may remain there until they expire or until the user deletes them, where they cannot be removed technically through the Platform itself.


7. Overview of the specific cookies used on the Platform

This section sets out the current list of the specific cookies and similar technologies used on the Platform.

7.1 Cookies

  • __Host-next-auth.csrf-token (lasercut.parts) — Necessary, lifetime: until the end of the browser session. Purpose: protects login and authentication forms against Cross-Site Request Forgery (CSRF) attacks.
  • __Secure-next-auth.callback-url (lasercut.parts) — Necessary, lifetime: until the end of the browser session. Purpose: stores the address the user is to be redirected to after a successful login.
  • __Secure-next-auth.session-token (lasercut.parts) — Necessary, lifetime: 30 days. Purpose: maintains the user’s authenticated session and provides access to user account functions.
  • auth_customer_id (lasercut.parts) — Necessary, lifetime: 7 days. Purpose: stores the customer identifier needed for user account functions after login.
  • cf_clearance (Cloudflare / .lasercut.parts) — Necessary, lifetime: according to the current Cloudflare settings. Purpose: confirms that the Cloudflare security check has been passed and helps protect the website against automated or malicious access.
  • cookie-consent (lasercut.parts) — Necessary (consent management), lifetime: 12 months. Purpose: stores the user’s choice regarding cookies and similar technologies, including the time of the choice, the policy or consent mechanism version and the choice per category.
  • active_theme (lasercut.parts) — Functional, lifetime: 12 months. Purpose: stores the interface theme chosen by the user. Activated only after consent to functional technologies.
  • color_mode (lasercut.parts) — Functional, lifetime: 12 months. Purpose: stores the light or dark interface mode chosen by the user. Activated only after consent to functional technologies.
  • _ga (Google Analytics / lasercut.parts) — Analytical, lifetime: 13 months. Purpose: distinguishes visitors for the purpose of measuring traffic to and use of the website.
  • _ga_P3B8ESH0D5 (Google Analytics / lasercut.parts) — Analytical, lifetime: 13 months. Purpose: stores Google Analytics 4 session state information for the purpose of measuring use of the website.
  • _gcl_au (Google Ads / lasercut.parts) — Marketing, lifetime: 3 months. Purpose: used to measure and attribute conversions from Google advertising campaigns.
  • IDE (Google / .doubleclick.net) — Marketing, lifetime: 13 months. Purpose: used for advertising purposes, in particular measuring advertising effectiveness, personalising advertising and remarketing.

7.2 Local storage keys (localStorage / sessionStorage)

In addition to cookies, localStorage and sessionStorage technologies are used, which store information in the user’s browser. Although technically these are not cookies, the rules on storing information on, or accessing information on, the terminal device apply equally.

  • nextauth.message (localStorage / lasercut.parts) — Necessary, retention: for the period needed for the authenticated session; deletion on logout or at the end of the session is recommended. Purpose: synchronises authentication state between open browser tabs.
  • auth_customer_id (localStorage / lasercut.parts) — Necessary, retention: for the period needed for the user account to work; deletion on logout is recommended. Purpose: stores the customer identifier needed for the user account after login.
  • _cfPre_tabId (sessionStorage / Cloudflare) — Necessary, retention: until the browser tab is closed. Purpose: stores a technical browser tab identifier used in connection with Cloudflare security mechanisms.
  • theme (localStorage / lasercut.parts) — Functional, retention: until the setting is changed or removed. Purpose: stores the interface theme chosen by the user. Activated only after consent to functional technologies.
  • dashboard-onboarding-seen (localStorage / lasercut.parts) — Functional, retention: until the data are deleted or the setting is reset. Purpose: records that a logged-in user has already seen the introductory information or onboarding in the user account.
  • lc:visitor-id (localStorage / lasercut.parts) — Analytical, retention: until deleted; activated only after consent to analytical technologies. Purpose: stores a pseudonymous visitor identifier for LASERCUT’s own traffic measurement and view statistics.
  • lc:session-visitor-id (sessionStorage / lasercut.parts) — Analytical, retention: until the tab is closed; activated only after consent to analytical technologies. Purpose: stores a temporary pseudonymous identifier linking views within a single visit.
  • _gcl_ls (localStorage / Google Ads) — Marketing, retention: until deleted; activated only after consent to marketing technologies. Purpose: stores auxiliary data for the attribution and measurement of conversions from advertising campaigns.

7.3 Services that store no cookies or identifiers on the device

The fact that a service stores no cookies or other identifiers on the user’s terminal device does not exclude the processing of personal data when that service is provided. The legal bases, purposes and further information about such processing are set out in the LASERCUT Privacy Policy.

  • Plausible Analytics (provider: Plausible Analytics) — storage on the device: no. Purpose: measuring traffic to and use of the website without storing identifiers on the user’s device under the current website configuration.
  • Cloudflare Web Analytics (provider: Cloudflare) — storage on the device: no. Purpose: measuring traffic, performance and technical parameters of the website without storing analytical cookies or identifiers on the user’s device.
  • Google Tag Manager (provider: Google) — storage on the device: no. Purpose: technical management and firing of tags and services used on the website; it is not itself an analytical or advertising cookie.
  • YouTube (provider: YouTube) — storage on the device: no, until playback starts or the relevant consent is given. Purpose: a video preview without storing cookies under this configuration; playing a video may result in YouTube setting its own cookies or other technologies.

7.4 How consent is obtained

On a first visit to the website without the user’s prior consent, only the necessary technologies required for the secure functioning of the website, authentication, protection against misuse and storing the user’s cookie choice are used. Analytical, functional and marketing technologies that are not necessary for providing a service expressly requested by the user are activated only after consent to the relevant category has been given. The user may accept all optional categories, refuse them or change their choice in the settings.


8. Third-party cookies and technologies

Where the user gives the relevant consent, the Platform may use third-party services that, through cookies or similar technologies, may obtain online identifiers and data on the use of the Platform. According to the current list in Article 7, technologies that store information on the device are in particular Google Analytics 4, Google Ads and Google / DoubleClick.

The Platform also uses or may make available third-party services that, under the current configuration, do not themselves store cookies or identifiers on the user’s device, in particular Plausible Analytics, Cloudflare Web Analytics and Google Tag Manager. Details are set out in Article 7.3.

Third parties may, when providing their services, process personal data as separate controllers, joint controllers or processors, depending on the specific service and its configuration. More detailed information about the processing of personal data is set out in the LASERCUT Privacy Policy and in the information provided by the relevant providers.


9. Transfers of personal data outside the EU/EEA

When third-party analytical or advertising services are used, personal data or online identifiers may, depending on the technical and contractual configuration of the given service, also be processed outside the European Union or the European Economic Area. Where personal data are transferred to a third country, LASERCUT proceeds in accordance with Chapter V GDPR, in particular on the basis of an adequacy decision of the European Commission, standard contractual clauses or another applicable mechanism under the GDPR.

For providers in the United States of America, the adequacy decision for entities certified under the EU–U.S. Data Privacy Framework may apply depending on the circumstances; if it does not apply, another valid mechanism under the GDPR is used. The specific mechanism is assessed according to the relevant provider and the service configuration.


10. Cookie retention periods

How long a specific cookie is stored on the user’s device depends on its purpose and technical configuration. Session cookies are generally deleted at the end of the browser session; persistent cookies remain stored until the configured lifetime expires or until the user deletes them earlier.

The specific cookie lifetimes and the retention periods for data in localStorage or sessionStorage are stated in the relevant lists in Article 7.


11. Browser settings and deleting cookies

The user may also manage cookies through their web browser settings, in particular to display them, delete them or restrict their storage. However, blocking or deleting necessary cookies may cause some Platform functions not to work correctly, for example login, security mechanisms, the basket or an order in progress.

Browser settings do not replace LASERCUT’s obligation to obtain consent where the law requires it.


12. Personal data and user rights

Where data obtained through cookies or similar technologies constitute personal data, the user has the rights under the GDPR to the extent that the statutory conditions are met, in particular the right of access to personal data, rectification, erasure, restriction of processing, data portability, the right to object to processing and the right to withdraw consent at any time.

Details on the processing of personal data, recipients, retention periods, international transfers, the exercise of rights and the possibility of lodging a complaint with the supervisory authority are set out in the LASERCUT Privacy Policy published on the Platform.


13. Users from other countries

LASERCUT provides services to customers in Slovakia, in other EU/EEA member states and in third countries. This Policy is prepared primarily under the law of the European Union and the Slovak Republic. Where mandatory legislation of another state applies to a specific user or to the use of the Platform, LASERCUT also respects the obligations arising from that legislation to the extent applicable.


14. Changes to this Policy

LASERCUT may update this Policy as appropriate, in particular where legal regulations, the technical solution of the Platform, the providers used or the specific cookies change. The current wording will always be published on the Platform together with the date of the last update.

Where a change affects the scope or purposes of consent-based cookie use so that the consent originally given is no longer sufficient, LASERCUT will request new consent before activating the technologies concerned.


15. Contact

Questions about this Policy or the use of cookies may be addressed to LASERCUT s. r. o. at [email protected] or through the other contact details given in Article 2. Requests concerning the processing of personal data are handled in accordance with the Privacy Policy and the GDPR.

This Policy takes effect on 7 September 2026.


© 2026 LASERCUT — All rights reserved.

Cookie Policy | LASERCUT