Cookie Policy
Last updated: April 13, 2026
1. What are cookies?
Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit a website. They allow the site to "remember" your actions and preferences (such as preferred language, font size, or other display preferences) over a period of time, so you don't have to re-enter them each time you return to the site or browse from one page to another.
2. Why we use cookies
DoctorADHD.com uses cookies exclusively for:
- Essential functionality: enabling proper site operation (e.g., remembering language preference)
- Security: detecting and preventing fraudulent activities or abuse (bot protection, DDoS prevention)
We do not use analytics, marketing, or tracking cookies. This site does not use Google Analytics or any other web analytics service that places cookies.
3. Applicable legislation
This cookie policy complies with the following regulations:
- For users in the EU/EEA (including Romania):
- General Data Protection Regulation (GDPR) - Regulation (EU) 2016/679
- ePrivacy Directive 2002/58/EC (amended by Directive 2009/136/EC)
- Law No. 190/2018 (Romania) on GDPR implementation measures
- For users in the United Kingdom:
- UK GDPR and Data Protection Act 2018
- Privacy and Electronic Communications Regulations (PECR) 2003
- Data (Use and Access) Act 2025
Note: Although the data controller (Andrei Hodorog) is established in the United Kingdom, our platform primarily serves users in Romania and the EU. Therefore, we apply EU GDPR and ePrivacy standards for all users, ensuring the highest level of protection.
4. Cookies used on this site
All cookies used on DoctorADHD.com are strictly necessary for the operation of the site. We do not use analytics, marketing, or advertising cookies.
| Cookie Name | Purpose | Duration | Legal Basis |
|---|---|---|---|
NEXT_LOCALE | Remembers language preference (ro/en/hu/fr) | 1 year | Legitimate interest (Art. 6(1)(f) GDPR) - site operation |
__cf_bm | Cloudflare Bot Management - bot traffic detection | 30 minutes | Legitimate interest - site security |
__cfruid | Cloudflare - session identification for rate limiting applications | Session | Legitimate interest - site security |
auth-token | Administrator authentication, used exclusively for the admin panel | Session | Legitimate interest - site administration |
5. Third-party services
5.1. Cloudflare
Cloudflare provides security, performance, and CDN services for our site. Cloudflare cookies (__cf_bm, __cfruid) are strictly necessary for secure site operation (bot detection, DDoS prevention). Details: Cloudflare Privacy Policy
5.2. OpenStreetMap
We use OpenStreetMap-based maps (via the Leaflet library) to display medical office locations. When you view a map, tile images are loaded from OpenStreetMap Foundation (OSMF) servers, a non-profit organisation based in the EU. No cookies are placed and no data is stored in your browser. The only data transmitted is standard HTTP requests (IP address, for loading map tiles). Details: OSMF Privacy Policy
5.3. YouTube (privacy-enhanced mode)
Embedded videos use the youtube-nocookie.com domain, which does not place tracking cookies until the user clicks to play a video. Details: Google Privacy Policy
5.4. Cloudflare Turnstile
We use Cloudflare Turnstile as a CAPTCHA verification mechanism for forms (e.g., reviews). Turnstile may place strictly necessary session cookies for its operation. Details: Cloudflare Privacy Policy
6. Why no consent banner is displayed
Under Art. 5(3) of the ePrivacy Directive 2002/58/EC, consent is not required for the storage of or access to information that is "strictly necessary in order to provide an information society service explicitly requested by the subscriber or user."
All cookies used on DoctorADHD.com fall within this exemption:
- NEXT_LOCALE: remembers the language you selected - strictly necessary to deliver content in your requested language
- __cf_bm, __cfruid: Cloudflare security protection - strictly necessary for secure site operation
- auth-token: administrator authentication - strictly necessary for admin panel access
Because we do not use analytics, marketing, or other non-essential cookies, a consent banner is not required under EU and UK cookie legislation.
7. How to control cookies via browser
Most browsers allow you to control cookies through their settings. You can configure your browser to reject all cookies or only third-party cookies.
Instructions for common browsers:
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Cookies and website data
- Microsoft Edge: Settings → Privacy, search, and services → Cookies and site permissions
Warning: Completely disabling cookies may affect site functionality. For example, we won't be able to remember your language preference and you'll need to select it each visit.
8. Session vs. persistent cookies
- Session cookies: temporary, deleted when you close your browser (e.g.,
__cfruid,auth-token) - Persistent cookies: remain on your device for a specified period (e.g.,
NEXT_LOCALE- 1 year,__cf_bm- 30 minutes)
9. First-party vs. third-party cookies
- First-party cookies: placed by DoctorADHD.com (e.g.,
NEXT_LOCALE,auth-token) - Third-party cookies: placed by third-party domains (e.g., Cloudflare -
__cf_bm,__cfruid)
10. Data protection and international transfers
Cloudflare may process data on servers outside the European Economic Area (EEA). Cloudflare is certified under the EU-U.S. Data Privacy Framework and complies with standard contractual clauses approved by the European Commission.
The Cloudflare cookies used on our site do not collect personal data for profiling or tracking purposes - they serve exclusively security functionality.
11. Your rights
Regarding data processed through cookies, you have the following rights under GDPR:
- Right of access: you can request what data was collected through cookies
- Right to erasure: you can request deletion of collected data
- Right to portability: you can receive data in a portable format
- Right to lodge a complaint: with ANSPDCP (details in Privacy Policy)
To exercise your rights, contact us at: [email protected]
12. Cookies and UK legislation
In the United Kingdom, cookie usage is regulated by:
- UK GDPR and Data Protection Act 2018
- Privacy and Electronic Communications Regulations (PECR) 2003
- Data (Use and Access) Act 2025
- ICO guidance on cookies and similar technologies
Supervisory authority: Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Email: [email protected]
13. Changes to cookie policy
We reserve the right to update this policy to reflect changes in our practices or legal requirements. Any significant changes will be communicated through a notice on the site.
Last updated: April 13, 2026
14. Contact
For questions about this cookie policy, contact us:
Email: [email protected]
Data Controller: Andrei Hodorog
Address: United Kingdom
Summary: key information
- ✓ This site uses only strictly necessary cookies for operation and security
- ✓ We do not use analytics, marketing, or tracking cookies
- ✓ No consent banner is required because all cookies are strictly necessary (Art. 5(3) ePrivacy Directive)
- ✓ Cookies expire automatically after specified periods (max 1 year)
- ✓ We comply with GDPR, ePrivacy, and UK cookie legislation
