Privacy and cookie information

Core functions may use browser storage without an advertising or analytics purpose. This includes Firebase Authentication persistence when you sign in, service-worker and cache storage for the installable/offline experience, remembering that you dismissed the install hint, remembering your privacy choice, and an admin-only navigation preference. Necessary storage cannot be disabled through the privacy controls because those functions would otherwise not work reliably.

If you allow analytics, Hala Harchi may use Google Analytics 4 to measure page visits, scroll milestones and outbound or contact clicks. Google Consent Mode v2 starts optional storage as denied; Google Analytics may send cookieless measurement pings while denied, and may set identifiers such as _ga and _ga_* only after analytics storage is granted. With analytics permission, our own API also receives first-party product events, Core Web Vitals and technical error reports. These reports set no cookie and are used only to run and improve this site. The product-event reports record, per visit: the pages you open on this site and the listings you interact with; a random key held in your tab's session storage, which is discarded when you close the tab; a random visitor key held in your browser's local storage, so we can tell a returning browser from a new one; your account, only while you are signed in; the address (IP) your browser connected from, and an approximate, network-level location derived from it; the domain of the website that sent you here, if your browser reports one; and, read from your browser's user-agent string when the report arrives, only the device class (phone, tablet or desktop), the operating-system family and the browser family — never the user-agent string itself, a version or a device model. The location is derived on our own server from an offline geolocation database; the IP address is not sent to any third party. None of this is collected unless you allow analytics, and you can withdraw that permission at any time below; clearing your browser's site data removes the stored keys. Without any analytics permission, our server still counts page views by page and by approximate location (city, region and country), derived from the IP address your browser connects from at the moment of the request; the address itself is not stored, no cookie or identifier is used, and nothing links these views to a person. Individual product events are kept for 90 days; only aggregate counts are kept beyond that. We never keep your browser's user-agent string in these reports, and we never sell or share them with advertisers.

The current site serves Hala Harchi's own local promotions, which make no advertising request to a third party. If Google AdSense is enabled, Google's certified Privacy & Messaging consent platform will ask eligible visitors in the EEA, UK and Switzerland for advertising choices through the IAB Europe Transparency and Consent Framework. Google and the advertising partners disclosed in that message may use cookies or local storage according to the choices made there. Hala Harchi does not treat its own stored preference as AdSense consent.

You can reopen privacy controls at any time. Necessary storage remains active. Analytics is optional. When AdSense is active, the same control opens Google's consent-revocation flow for advertising and related analytics choices.