Cookie Policy

This policy explains how maah.nl uses cookies and similar storage/access technologies. It should be read together with the Privacy Policy.

MAAH uses first-party technologies that are necessary to operate the website. Depending on your interaction with the site these include:

• a session cookie used by Django to maintain the server-side session, including functionality such as cart/session state;
• a CSRF security cookie used to protect forms and state-changing requests against cross-site request forgery;
• language/site-preference state where the site stores a visitor's selected language or equivalent functional preference.

These technologies support functionality requested by the visitor and security of the service. Under Dutch cookie rules, strictly necessary functional cookies can generally be used without prior consent, but visitors must still be informed about their use.

Purpose: maintain the authenticated or anonymous server-side session and functionality that depends on that session. Category: strictly necessary / functional. Duration: normally a browser session unless the application/account flow sets a longer session lifetime. Provider: MAAH / maah.nl.

Purpose: security; helps verify that state-changing form submissions originate from the MAAH website. Category: strictly necessary / security. Duration: controlled by the website's Django security configuration. Provider: MAAH / maah.nl.

Purpose: remember a language or other functional site preference where such storage is used. Category: functional. Duration: according to the relevant preference/session configuration. Provider: MAAH / maah.nl.

The application can maintain cart and account-related state through the server-side session and database. The fact that a cart exists does not by itself mean MAAH uses advertising or cross-site tracking cookies.

The supplied MAAH application does not configure a third-party analytics, advertising pixel or cross-site tracking service as part of its default storefront setup.

If MAAH later enables a privacy-sensitive analytics service, advertising technology, social-media tracking, personalization technology or another non-essential storage/access technology, it must update this policy and the consent interface before that technology is activated for visitors who have not given the required consent.

Where Dutch law requires consent, optional technologies must remain off until the visitor makes an active choice. Consent must not be inferred from scrolling, continued browsing or inactivity, and optional choices must not be preselected.

If only exempt strictly necessary/low-impact technologies are active, MAAH may inform visitors without asking them to consent to technologies for which consent is not legally required.

If consent-requiring technologies are enabled, the consent interface must explain the relevant purposes before consent, allow a genuine choice, keep optional technologies disabled by default, and provide a way to withdraw or change consent as easily as it was given.

Payment providers or other external services opened as part of a customer-requested flow may operate their own domains and technologies. Their use of cookies on their own services is governed by their applicable notices. MAAH must not load optional third-party tracking into maah.nl before the consent required for that technology.

You can remove or block cookies using browser controls. Blocking strictly necessary cookies can prevent functions such as sign-in, cart/session continuity or secure form submission from working correctly.

Where MAAH offers a cookie-preference control for optional technologies, you can use it to change or withdraw your choice.

MAAH will update this policy when the technologies used on maah.nl materially change. A newly enabled consent-requiring technology must not be treated as covered merely because this policy has broad wording; the policy and consent configuration must identify its actual purpose and relevant third parties.

Questions about cookies or privacy can be sent through the contact/privacy channels published on maah.nl.