1. Summary
LOVEBOSNIA uses a small number of strictly necessary cookies and nothing else. We run no analytics and no advertising cookies, and we do not use cookies to profile you or to follow you across other websites.
Because every cookie we set is strictly necessary to deliver a service you have asked for, we do not ask for consent to set them — the ePrivacy Directive (and Art. 5(3) of its national implementations) exempts cookies whose sole purpose is carrying out a transmission or providing a service you explicitly requested. This is also why you do not see a cookie banner. If we ever add non-essential cookies, we will ask for your opt-in consent first, and update this page.
One exception is worth stating plainly: our contact and migration inquiry pages load Google reCAPTCHA v3 to keep spam out. It is a third-party script from Google and is described in section 5. It runs on those two pages only.
2. What cookies are
A cookie is a small text file a website asks your browser to store. On each subsequent request the browser sends it back, which is how a site can recognise that a series of requests comes from the same visitor. A session cookie is erased when you close your browser; a persistent cookie stays until it expires or you delete it.
3. The cookies we set
| Name | Purpose | Type | Expires |
|---|---|---|---|
lovebosnia-session |
Identifies your browsing session so the Platform can keep you signed in and remember state between pages. Contains only an opaque session identifier — no personal data is stored in the cookie itself. | Strictly necessary | 120 minutes of inactivity |
XSRF-TOKEN |
Carries an anti-forgery token that lets us confirm a form submission genuinely came from you. This is a security control against cross-site request forgery. | Strictly necessary | 120 minutes of inactivity |
remember_web_* |
Set only if you tick "remember me" at sign-in, so you stay signed in after closing your browser. Holds a random token, not your password. | Strictly necessary (opt-in) | 5 years, or until you sign out |
All three are first-party cookies — set by this site, readable only by this site. The session and
remember-me cookies are flagged HttpOnly, so page scripts cannot read them, and all three use
SameSite=Lax, which stops them being sent on most cross-site requests. On HTTPS they are also flagged
Secure.
4. Cookies we do not set
- No Google Analytics, or any other analytics or measurement product.
- No advertising, retargeting or conversion-tracking cookies.
- No social media pixels or share-button trackers.
- No cross-site or cross-device tracking of any kind.
The one third-party script we do load is Google reCAPTCHA, and only on the two form pages named in section 5.
Job listings shown on the Platform are fetched server-side from pronadjiposao.ba. Your browser never contacts that board while browsing our pages, so it cannot set cookies on your device. That changes only if you click a listing and leave our site.
5. Third parties
If you choose Sign in with Google, you are taken to Google's own domain to authenticate. Google may set cookies there under its own privacy policy, which we do not control. If you never use Google sign-in, this never happens.
reCAPTCHA on our forms
Our contact and migration inquiry pages are protected by Google reCAPTCHA v3, which tells automated spam apart from real people. It loads a script from Google and may read a Google cookie already on your device, together with your IP address and how you interact with the page, in order to produce a score. Google uses this under its own privacy policy and terms.
We load it only on those two pages, never across the rest of the site, and we use it solely to block spam — not to profile you or to measure your visit. We receive only a score, never the underlying data.
6. Related technologies
Your browser may also keep small amounts of data in localStorage or sessionStorage — for
example to remember your language preference. This is not a cookie and is never transmitted to us automatically;
clearing your browsing data removes it.
7. How to control cookies
You can block or delete cookies in your browser settings. Be aware that blocking our strictly necessary cookies will break sign-in — without them we cannot keep you authenticated or protect forms against forgery, so the Platform will not work while signed in.
Signing out clears the session and remember-me cookies immediately.
8. Changes
If we start using cookies beyond those listed here, we will update this page and — for anything that is not strictly necessary — ask for your consent before setting them. The "last updated" date at the top shows the current version.
9. Contact
Questions about this policy: privacy@lovebosnia.com. See also our Privacy Policy.