With this cookie policy, we would like to explain what cookies and cookie-like technologies are, how we and other service provider use them on this website, what information they collect, for how long and for what purposes we use them.
Table of contents
- Controller of the website
- Addition to the privacy policy
- What are cookies and similar technologies?
- What is the legal basis for setting/reading cookies?
- What rights does the website visitor have?
- How to manage cookies in a browser?
- What types of cookies exist?
- Who can set cookies on this website?
- Which cookies are used on this website?
Controller of the website
- Provider: Heka Food Supplements, Slovenia
- Email: info@wpm.si
Addition to the privacy policy
This cookie policy is a supplement to this website's privacy policy. The cookie policy specifies how a website uses cookies and what data it collects through them, while the privacy policy is a more comprehensive overview of all data processing activities on the website and beyond.
What are cookies and similar technologies?
Cookies are small pieces of information similar to text files that can be stored and read on the end device. They serve various purposes, including maintaining basic functionalities of the website, security and privacy, providing optional functions of the website, collecting statistic data on visitor flows and providing marketing systems. Practical examples of what can be stored in cookies are the storage of login status in user accounts, the content of shopping baskets in e-commerce platforms, or a user ID for tracking behavior on the website.
The information can technically be stored in various ways. The best-known examples of this are HTTP cookies and cookie-like technologies like local storage, session storage or IndexedDB. Each type of storage has different properties, which determine the technical handling, accessibility and controllers authorized to access the information. All these types of storage are usually summarized under the term "cookies" and are therefore called as such in this cookie policy.
What is the legal basis for setting/reading cookies?
The setting and reading of cookies in the European Union (EU) and the European Economic Area (EEA) is in accordance with Art. 5 (3) ePrivacy Directive and Recital 66 ePrivacy Directive only permitted if a user has given his consent on the basis of comprehensive information about the purposes of the processing. The website operator may also set cookies if they are strictly necessary to provide you as a user with the expressly requested service, e.g. the basic content of this website or other strictly necessary cookies for basic functionality of the website to be displayed to you without your consent.
What rights does the website visitor have?
Services and their cookies can be set and read on the legal basis of your consent or a legitimate interest. When you first visited this website, you were asked for your consent and you had the opportunity to object to the use of certain services. We explained which legal basis is used for which service in our consent dialog.
You have the right to view the history of your decisions, change your privacy settings, object to the use of services and revoke your consent at any time. Below you find possibilities to exercise your rights:
How to manage cookies in a browser?
- How to remove cookies in a browser: To remove cookies from your device, you can clear the browsing data in the settings of your browser. This action will remove all cookies from all websites you've visited, potentially including saved login details and site preferences. In some browsers, you can just delete the cookies and similar data without deleting the whole browsing history.
- How to control cookies in a browser: For more granular control over cookies specific to certain websites, navigate to the privacy and cookie settings within your used browser. Here, you can adjust preferences related to individual sites' cookie usage.
- How to block cookies in a browser: It's possible to configure most modern browsers in their settings to block all cookies from being placed on your device. But blocking cookies could lead to certain services and functionalities not functioning correctly, e.g. logins as a user. You can also use extensions for many browsers which can block the setting of cookies on websites.
- How to manage cookies on this website: To tailor your preferences regarding cookies on this website, you can change your preferences at any time by clicking on the link in the section "Rights of the website visitor".
You can find more information on the handling of cookies devowl.io/rcb/cookie-handling/.
What types of cookies exist?
- Essential cookies are indispensable for the basic functionality of a website and enable functions such as saving login information or access to secure areas of the site. These include, for example, security cookies, which can identify a bot that is not wanted on the website by storing an authentication key in a cookie.
- Functional cookies improve the user experience by storing information and preferences such as language settings or appearance settings of the website to provide personalized. This includes, for example, preference cookies that store the user's preferred video quality on a website.
- Statistics cookies collect data about the use of a website to gain insights into user behavior and optimize the performance of the site. This includes, for example, a randomly assigned user ID that makes it possible to attribute whether you have visited a subpage of the website.
- Marketing cookies are used to track user behavior across different websites and to display personalized advertising based on the interests and surfing behavior of users. This includes, for example, advertising cookies that store an interaction with an advertisement on the website and pass it on to advertisers or a chat system for pre-sale questions and customer support.
Who can set cookies on this website?
On this website, both the operator of the website and third-party services which are used on this website may set cookies and access its content. Who can access which cookies and their content differs between first-party and third-party cookies. First-party cookies are created by the visited website and can only be read by the website operator and integrated third-party services on this website. Third-party cookies are set by usually third-party services on other domains, can be read on all websites on which the service that controls the domain is embedded and, for example, used by advertising networks to track user behavior across different websites and offer personalized advertising.
Which cookies are used on this website?
| Category | Technical cookie name | Technical cookie host | Service | Duration | Type | Purpose |
|---|---|---|---|---|---|---|
| Essential | wp-wpml_current_language | heka-supplements.com | WPML | 1 day | HTTP Cookie | Current language. |
| Essential | wp-wpml_current_admin_language_* | heka-supplements.com | WPML | - | IndexedDB | Language of the WordPress admin panel. |
| Essential | _icl_visitor_lang_js | heka-supplements.com | WPML | Session | HTTP Cookie | Language from which the redirect was made. |
| Essential | wpml_browser_redirect_test | heka-supplements.com | WPML | Session | HTTP Cookie | Checks whether cookies can be set or not. |
| Essential | wp-settings-time-* | heka-supplements.com | WordPress User Login | 1 year | HTTP Cookie | Timestamp of the login process (in Unix format) |
| Essential | wordpress_test_cookie | heka-supplements.com | WordPress User Login | Session | HTTP Cookie | Tests whether cookies can be set or not |
| Essential | wp-settings-* | heka-supplements.com | WordPress User Login | 1 year | HTTP Cookie | Individual user interface settings, such as admin interface layout, color scheme, or enabling the toolbar. |
| Essential | wordpress_sec_* | heka-supplements.com | WordPress User Login | Session | HTTP Cookie | WordPress username, cookie expiration timestamp, authentication token for securing access to the admin panel, and secure hash. |
| Essential | wordpress_logged_in_* | heka-supplements.com | WordPress User Login | Session | HTTP Cookie | WordPress username, cookie expiration timestamp, authentication token for securing access to the admin panel, and secure hash |
| Essential | wfwaf-authcookie-* | heka-supplements.com | Wordfence | 12 months | HTTP Cookie | Authentication token for recognizing logged-in users and thus reducing firewall load |
| Essential | wf_loginalerted_* | heka-supplements.com | Wordfence | 12 months | HTTP Cookie | Unique value for detecting logins and suspicious activity from new devices or unknown locations |
| Essential | wfCBLBypass | heka-supplements.com | Wordfence | 12 months | HTTP Cookie | Unique value that allows users to access the website despite regional restrictions |
| Essential | wfls-remembered-* | heka-supplements.com | Wordfence | 30 days | HTTP Cookie | Token for recognizing users after two-factor authentication (2FA) for a certain period of time. |
| Essential | wc_fragments_* | https://heka-supplements.com | WooCommerce | SESSION | Session Storage | - |
| Essential | wc_cart_hash_* | https://heka-supplements.com | WooCommerce | SESSION | Session Storage | - |
| Essential | wc_cart_hash_* | heka-supplements.com | WooCommerce | - | Local Storage | Shopping cart session ID with hash, used to track cart contents and properly synchronize changes |
| Essential | woocommerce_cart_hash | heka-supplements.com | WooCommerce | Session | HTTP Cookie | Hash representing the shopping cart contents and the total amount |
| Essential | wp_woocommerce_session_* | heka-supplements.com | WooCommerce | 2 days | HTTP Cookie | Session ID and tracking of the user’s shopping cart and other activities during the website visit. |
| Essential | woocommerce_items_in_cart | heka-supplements.com | WooCommerce | Session | HTTP Cookie | Indicates whether something is in the shopping cart or not |
| Essential | wc_cart_hash | heka-supplements.com | WooCommerce | Session | HTTP Cookie | Shopping cart hash, used to track the cart contents and properly synchronize changes |
| Essential | wordpress_logged_in_* | heka-supplements.com | WooCommerce | Session | HTTP Cookie | WordPress username, cookie expiration timestamp, authentication token for securing access to the admin panel, and secure hash |
| Essential | wordpress_sec_* | heka-supplements.com | WooCommerce | Session | HTTP Cookie | WordPress username, cookie expiration timestamp, authentication token for securing access to the admin panel, and secure hash |
| Essential | comment_author_* | heka-supplements.com | WooCommerce | 1 year | HTTP Cookie | Name of the review author |
| Essential | comment_author_email_* | heka-supplements.com | WooCommerce | 1 year | HTTP Cookie | Email address of the review author. |
| Essential | woocommerce_recently_viewed | heka-supplements.com | WooCommerce | Session | HTTP Cookie | Recently viewed products, to display a list of recently viewed items to the user |
| Essential | store_notice* | heka-supplements.com | WooCommerce | Session | HTTP Cookie | Whether the store message was closed/dismissed |
| Essential | wc_cart_created | https://heka-supplements.com | WooCommerce | SESSION | Session Storage | Shopping cart creation time, to track when the cart was created |
| Essential | storeApiNonce | https://heka-supplements.com | WooCommerce | - | Local Storage | Timestamp and nonce (unique number) for verifying the security of API requests and preventing attacks on the website |
| Essential | wc-blocks_mini_cart_totals | https://heka-supplements.com | WooCommerce | - | Local Storage | Total amount for the mini shopping cart |
| Essential | real_cookie_banner* | .heka-supplements.com | Real Cookie Banner | 365 days | HTTP Cookie | Unique identifier for the consent, but not for the website visitor. Hash for auditing the cookie banner settings (texts, colors, functions, service groups, services, content blockers, etc.). Identifiers for the services and service groups that have been consented to |
| Essential | real_cookie_banner*-tcf | .heka-supplements.com | Real Cookie Banner | 365 days | HTTP Cookie | Consents collected according to TCF, stored in TC String format, including TCF vendors, purposes, special purposes, features, and special features |
| Essential | real_cookie_banner*-gcm | .heka-supplements.com | Real Cookie Banner | 365 days | HTTP Cookie | Consents by consent type (purposes), collected according to Google Consent Mode, stored for all services compatible with Google Consent Mode |
| Essential | real_cookie_banner-test | .heka-supplements.com | Real Cookie Banner | 365 days | HTTP Cookie | Cookie set to test the functionality of HTTP cookies. It is deleted immediately after the test |
| Essential | real_cookie_banner* | https://heka-supplements.com | Real Cookie Banner | - | Local Storage | Unique identifier for the consent, but not for the website visitor. Hash for auditing the cookie banner settings (texts, colors, functions, service groups, services, content blockers, etc.). Identifiers for the services and service groups that have been consented to. Stored only until the consent is recorded on the website’s server |
| Essential | real_cookie_banner*-tcf | https://heka-supplements.com | Real Cookie Banner | - | Local Storage | Consents collected according to TCF, stored in TC String format, including TCF vendors, purposes, special purposes, features, and special features. Stored only until the consent is recorded on the website’s server |
| Essential | real_cookie_banner*-gcm | https://heka-supplements.com | Real Cookie Banner | - | Local Storage | Consents collected according to Google Consent Mode, stored by consent type (purposes) for all services compatible with Google Consent Mode. Stored only until the consent is recorded on the website’s server |
| Essential | real_cookie_banner-consent-queue* | https://heka-supplements.com | Real Cookie Banner | - | Local Storage | Local caching of the choice in the cookie banner until the consent is recorded on the server; recording is done periodically or when attempting to change the page if the server is unavailable or overloaded |
| Functional | woocommerce_geo_hash | heka-supplements.com | WooCommerce Geolocation | 1 hour | HTTP Cookie | - |
| Functional | __Secure-3PSIDCC | .google.com | Google Maps | 1 year | HTTP Cookie | - |
| Functional | __Secure-1PSIDCC | .google.com | Google Maps | 1 year | HTTP Cookie | - |
| Functional | SIDCC | .google.com | Google Maps | 1 year | HTTP Cookie | - |
| Functional | __Secure-3PAPISID | .google.com | Google Maps | 13 months | HTTP Cookie | - |
| Functional | SSID | .google.com | Google Maps | 13 months | HTTP Cookie | - |
| Functional | __Secure-1PAPISID | .google.com | Google Maps | 13 months | HTTP Cookie | - |
| Functional | HSID | .google.com | Google Maps | 13 months | HTTP Cookie | - |
| Functional | __Secure-3PSID | .google.com | Google Maps | 13 months | HTTP Cookie | - |
| Functional | __Secure-1PSID | .google.com | Google Maps | 13 months | HTTP Cookie | - |
| Functional | SID | .google.com | Google Maps | 13 months | HTTP Cookie | - |
| Functional | SAPISID | .google.com | Google Maps | 13 months | HTTP Cookie | - |
| Functional | APISID | .google.com | Google Maps | 13 months | HTTP Cookie | - |
| Functional | CONSENT | .google.com | Google Maps | 13 months | HTTP Cookie | - |
| Functional | __Secure-ENID | .google.com | Google Maps | 13 months | HTTP Cookie | - |
| Functional | _c;;i | https://www.google.com | Google Maps | - | Local Storage | - |
| Functional | LH;;s-* | https://www.google.com | Google Maps | - | Local Storage | - |
| Functional | sb_wiz.zpc.gws-wiz. | https://www.google.com | Google Maps | - | Local Storage | - |
| Functional | sb_wiz.ueh | https://www.google.com | Google Maps | - | Local Storage | - |
| Functional | NID | .google.com | Google Maps | 6 months | HTTP Cookie | Unique identifier for storing preferred settings such as language, number of results per search results page, or enabling the Google SafeSearch filter |
| Functional | AEC | .google.com | Google Maps | 6 months | HTTP Cookie | Unique identifier used to detect spam, fraud, and abuse |
| Statistics | sbjs_session | heka-supplements.com | Woocommerce Order Attribution | 30 minutes | HTTP Cookie | Number of page views in this session and the current page path |
| Statistics | sbjs_udata | heka-supplements.com | Woocommerce Order Attribution | Session | HTTP Cookie | Visitor’s user agent, visitor’s IP address, browser, and device type |
| Statistics | sbjs_first | heka-supplements.com | Woocommerce Order Attribution | Session | HTTP Cookie | Traffic source information from the visitor’s first visit to the store (applies only if the visitor returns before the session expires) |
| Statistics | sbjs_current | heka-supplements.com | Woocommerce Order Attribution | Session | HTTP Cookie | Traffic source information from the visitor’s current visit to the store |
| Statistics | sbjs_first_add | heka-supplements.com | Woocommerce Order Attribution | Session | HTTP Cookie | Timestamp, referrer URL, and landing page from the visitor’s first visit to the store (applies only if the visitor returns before the session expires) |
| Statistics | sbjs_current_add | heka-supplements.com | Woocommerce Order Attribution | Session | HTTP Cookie | Timestamp, referrer URL, and landing page from the visitor’s current visit to the store |
| Statistics | sbjs_migrations | heka-supplements.com | Woocommerce Order Attribution | Session | HTTP Cookie | Technical data that helps with migrations between different versions of the tracking feature |
| Statistics | last_pys_landing_page | heka-supplements.com | PixelYourSite | 7 days | HTTP Cookie | - |
| Statistics | pys_session_limit | heka-supplements.com | PixelYourSite | 7 days | HTTP Cookie | - |
| Statistics | pbid | heka-supplements.com | PixelYourSite | 7 months | HTTP Cookie | - |
| Statistics | pys_start_session | heka-supplements.com | PixelYourSite | Session | HTTP Cookie | - |
| Statistics | pys_landing_page | heka-supplements.com | PixelYourSite | 7 days | HTTP Cookie | - |
| Statistics | last_pysTrafficSource | heka-supplements.com | PixelYourSite | 7 days | HTTP Cookie | - |
| Statistics | pysTrafficSource | heka-supplements.com | PixelYourSite | 7 days | HTTP Cookie | - |
| Statistics | pys_first_visit | heka-supplements.com | PixelYourSite | 7 days | HTTP Cookie | - |
| Marketing | lastExternalReferrerTime | https://heka-supplements.com | Meta Pixel (former Facebook Pixel) | - | Local Storage | - |
| Marketing | lastExternalReferrer | https://heka-supplements.com | Meta Pixel (former Facebook Pixel) | - | Local Storage | - |
| Marketing | spin | .facebook.com | Meta Pixel (former Facebook Pixel) | 1 day | HTTP Cookie | - |
| Marketing | _fbp | .heka-supplements.com | Meta Pixel (former Facebook Pixel) | 3 months | HTTP Cookie | Identifies your browser for the purpose of providing advertising services and website analytics services. |
| Marketing | c_user | .facebook.com | Meta Pixel (former Facebook Pixel) | 12 months | HTTP Cookie | Authenticates you and keeps you logged in while you navigate between pages |
| Marketing | fr | .facebook.com | Meta Pixel (former Facebook Pixel) | 3 months | HTTP Cookie | Delivers, measures, and improves the relevance of ads |
| Marketing | datr | .facebook.com | Meta Pixel (former Facebook Pixel) | 13 months | HTTP Cookie | Identifies your browser and helps recognize browsers used by malicious actors, as well as prevent cybersecurity attacks |
| Marketing | dpr | .facebook.com | Meta Pixel (former Facebook Pixel) | 1 hour | HTTP Cookie | Provides an optimal experience for your device’s screen |
| Marketing | wd | .facebook.com | Meta Pixel (former Facebook Pixel) | 7 days | HTTP Cookie | Provides an optimal experience for your device’s screen |
| Marketing | presence | .facebook.com | Meta Pixel (former Facebook Pixel) | Session | HTTP Cookie | Supports the use of Messenger chat windows |
| Marketing | xs | .facebook.com | Meta Pixel (former Facebook Pixel) | 12 months | HTTP Cookie | Authenticates you and keeps you logged in while you navigate between pages |
| Marketing | sb | .facebook.com | Meta Pixel (former Facebook Pixel) | 13 months | HTTP Cookie | Securely identifies your browser |
| Marketing | oo | .facebook.com | Meta Pixel (former Facebook Pixel) | 1 month | HTTP Cookie | Advertising preferences |
| Marketing | __kla_id | heka-supplements.com | Klaviyo | 2 years | HTTP Cookie | - |
The cookie policy was last updated on 06/02/2026.
