Cookie policy.

1. What the site stores in your browser

No cookies. You can check for yourself: no page on stupenergie.ro sends the Set-Cookie header.

The site may use two keys in localStorage, your browser's storage space:

• stup-notice-ack - remembers that you closed the privacy notice, so it doesn't appear again.
• arsc-strip-closed-… - appears only if you close the ARSC network announcement bar at the top of the page, so the same campaign doesn't appear again.

Both stay on your device, go nowhere and do not identify you. You can delete them whenever you like, from your browser's site data settings.

2. What loads from other addresses

Three things, nothing more:

• Plausible Analytics, from plausible.arsc.ro - ARSC's own server, not an external service. It counts how many visits each page gets, without cookies and without tracking individual visitors across sites.
• Cloudflare Turnstile, from challenges.cloudflare.com - loads only on the six pages with a form. It checks that you are human, so bots don't flood us with fake sign-ups. It is the only third-party provider on the site and may store its own data within its own domain.
• The forms send what you fill in to api.arsc.ro, ARSC's internal system. What happens to the data after that is set out in the GDPR policy.

The site is delivered through a Cloudflare network. In anti-bot protection situations, Cloudflare may set a technical cookie of its own, strictly for the security of delivery.

3. The English version

Every page has an English counterpart, written by us, under /en/. The RO | EN button in the menu takes you to the same page in the other language. Your choice is not saved anywhere: the language is given by the page address.

If your browser does not list Romanian among its languages and you connect from outside Romania, we send you straight to the English version when you arrive on the site. The server makes this decision, from your browser's request and the country reported by Cloudflare, with no cookie and without keeping anything about you. The RO button takes you back at any time. We use no automatic translation service, so the content of the pages you read is not sent anywhere.

4. What we don't use

To be clear, since older versions of this page said otherwise:

• No Google Fonts. The four font files are hosted on our own server. Your browser makes no call to Google when it opens the site.
• No advertising or social media cookies. No Meta pixel, no Facebook or LinkedIn button that tracks you.
• No automatic translation. Neither Google Translate nor any other service. Where a translation exists, it is written by a person.
• No Netlify. The site was moved away from it in June 2026.

5. Why you don't see a cookie banner

Because there are no cookies for which we would need your consent. The ePrivacy Directive requires consent for storage that is not strictly necessary for the site to work; the keys in localStorage only remember which notices you have closed, and traffic is measured without cookies and without identifying you.

The notice that appears on your first visit is for information, not a request for consent. If we ever add a technology that does require consent, you will see a real banner, with the option to refuse as easy as the option to accept.

6. How to delete what has been stored

The keys in localStorage are deleted from the same place where you delete cookies:

• Chrome: Settings → Privacy and security → Delete browsing data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions → Manage and delete cookies

After deletion, the privacy notice appears again. Nothing else is lost.

7. Contact

Questions about cookies: [email protected].