Website operation clarification - 16 October 2026
This clarification supplements points 5, 9-11 and 14 of the supplied policy below. Contrary to the statement in point 5 that the website itself sets no cookies, the website sets metalekspo_consent when you save a privacy choice. It remembers the notice version, external-media permission, choice time and expiry time for 180 days. It is a first-party, host-scoped preference cookie, with no name, email or advertising identifier.
__cf_bm is a Cloudflare security cookie with a 30-minute inactivity lifetime. cf_clearance records a successful security check; a public-site browser check on 14 October 2026 found an expiry of approximately one year. The supplied policy also lists _cfuvid for rate limiting when that feature is enabled. Lifetimes and availability depend on the hosting configuration.
The Sites hosting platform also sets __Host-appgarden-visitor, a Secure, HttpOnly, host-scoped identifier. The public deployment checked on 14 October 2026 gave it an expiry of approximately 90 days. It is set by the hosting service before the Metalekspo consent window is used, and our optional-media control cannot block it. The hosting provider's precise purpose and lawful classification require confirmation; this disclosure is not a claim that every hosting identifier is exempt from consent.
The optional YouTube player uses youtube-nocookie.com. Before external-media consent and an explicit Play action, the website shows a local photograph and does not load YouTube, its thumbnails or resources. Once enabled and played, Google / YouTube receives technical and viewing information and may use cookies or local storage under its own policy. Privacy-enhanced mode does not guarantee anonymous viewing. Provider identifiers and lifetimes may vary. Google and hosting providers may process data outside the EEA; applicable safeguards are described in the Privacy Policy. No analytics or advertising trackers are installed in the website code.
Manage or withdraw your choice
Accept all, Reject optional and Save selection are available in the privacy window. External media is off by default. Accepting does not start the video; a separate Play action is still required. Rejecting leaves the rest of the website available.
Use Cookie settings in the footer or below to review your choice. Withdraw optional consent immediately disables the embedded player. Withdrawal does not erase information already processed by Google or delete cookies on another domain; browser settings can remove existing third-party storage. A missing, corrupt, outdated or expired choice is treated as no optional consent. If browser settings prevent saving the preference cookie, your choice applies only to the current visit.
For cookie questions, contact metalekspo@metalekspo.com.
Company Cookie Policy - full text
Source page 1 of 2
SIA METALEKSPO – Cookie Policy | 1 / 2
COOKIE POLICY
Effective from 2 October 2026. Replaces the Cookie Policy of 27 July 2018.
I. GENERAL PROVISIONS
1.This Cookie Policy (the “Policy”) explains how SIA METALEKSPO, registration No. 40003440140, registered address: Rencenu iela 32, Riga, LV-1073, Latvia (the “Company”, “we”, “us”) uses cookies and similar technologies on the website www.metalekspo.com (the “Website”).
2.For questions about cookies, please contact us at metalekspo@metalekspo.com. More information about the processing of personal data is provided in the Company’s Privacy Policy, available on the Website.
II. WHAT COOKIES ARE
3.A cookie is a small text file that a website stores on a visitor’s device (computer, tablet or mobile phone) through the browser. Other technologies, such as the browser’s local storage, work in a similar way. In this Policy, all of these technologies are referred to as cookies.
4.Under Section 7.1 of the Latvian Information Society Services Law, information may be stored on, or accessed from, a user’s device only with the user’s consent, unless this is strictly necessary to provide a service the user has requested.
III. COOKIES USED ON THE WEBSITE
5.The Website itself does not set cookies and does not use analytics, advertising, social media or other visitor tracking tools.
6.Our hosting and security provider, Cloudflare, Inc., may set strictly necessary cookies that protect the Website against automated attacks and malicious traffic. They do not identify the visitor and are not used for any other purpose. These cookies are set only when the relevant security feature is active:
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| __cf_bm | Cloudflare, Inc. | Identifies and mitigates automated (bot) traffic. | 30 minutes after the last activity | Strictly necessary |
| cf_clearance | Cloudflare, Inc. | Records that the visitor has passed a security check, so that it is not repeated. | Period set in the Website’s security settings | Strictly necessary |
| _cfuvid | Cloudflare, Inc. | Distinguishes visitors sharing the same IP address in order to limit excessive requests. | End of the browsing session | Strictly necessary |
7.Strictly necessary cookies do not require consent, because the Website cannot be operated securely without them.
IV. EMBEDDED YOUTUBE VIDEO
8.The “About Us” section of the Website contains a video of the Company’s production, shown through YouTube (Google Ireland Limited) in privacy-enhanced mode (youtube-nocookie.com).
9.The video player is not loaded until the visitor clicks the play button. Until then, no data are sent to YouTube and no YouTube cookies are stored on the device.
Source page 2 of 2
SIA METALEKSPO – Cookie Policy | 2 / 2
10.Once you click the play button, YouTube may store cookies and local storage entries on your device and receive your IP address and device technical information in order to operate the player, compile statistics and prevent abuse. Google processes these data as an independent controller under the Google Privacy Policy (https://policies.google.com/privacy).
11.By clicking the play button, you consent to the video being loaded from YouTube and to the storage of these cookies (Section 7.1 of the Latvian Information Society Services Law; Article 6(1)(a) GDPR). If you do not wish to do so, do not play the video – this does not affect the rest of the Website.
V. TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA
12.Cloudflare, Inc. and Google LLC (the parent company of Google Ireland Limited) may also process data in the United States. Both companies are certified under the EU–US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Article
45 GDPR).
VI. MANAGING AND DELETING COOKIES
13.You can delete cookies stored on your device at any time and set your browser to block all or some cookies, or to warn you before they are stored. Instructions are available in your browser’s help section.
14.You can withdraw your consent to YouTube cookies by deleting them in your browser settings. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
15.If you block strictly necessary cookies, the Website’s security checks may be shown repeatedly or parts of the Website may not work correctly.
VII. FINAL PROVISIONS
16.If the Company decides to use cookies that require consent on the Website (for example, analytics cookies), they will be set only after the visitor has given active consent through a cookie consent tool, and this Policy will be updated accordingly.
17.The current version of this Policy, with its effective date, is available on the Website at www.metalekspo.com.
18.This Policy takes effect on 2 October 2026. From that date the Cookie Policy of 27 July 2018 ceases to apply.