Privacy and cookies.

Settings → Privacy and cookies decides when tracking and marketing codes may run. The built-in statistics need no consent. Google Analytics, Matomo and marketing codes wait until the visitor agrees.

Cookie bar

Choose one of three modes:

• Built-in banner – recommended and on by default. It appears only when there is something to consent to. Tracking starts only after consent.
• External service – Cookiebot, CookieYes, Usercentrics and similar. Paste their script into External service code under Codes and records. It loads first, and Kaleta marks Google Analytics, Matomo and marketing codes so that the service runs them after consent.
• None – tracking codes run immediately. Use it only if you handle consent another way. The site audit warns when analytics or marketing codes run without a cookie bar.

Write your own Banner text. In Link to the policy, enter the address of your privacy policy, for example /privacy-policy. The bar then shows a More information link.

What visitors see

The built-in bar has Accept all, Only necessary and Settings. Settings lists the categories: Necessary is always on, Analytics appears when Google Analytics or Matomo is set, and Marketing appears when there are marketing codes or lead attribution is on. The choice is kept for six months. A small Cookie settings button in the corner lets visitors change their mind at any time.

Global Privacy Control: when the visitor's browser sends this signal, Kaleta treats it as “Only necessary” and does not show the bar. The Cookie settings button stays, so the visitor can still opt in.

Codes and records

• Marketing codes – Meta Pixel, Sklik retargeting, Google Ads and the like. They run only after marketing consent.
• Remember where leads came from – with marketing consent, the first page of the visit, its campaign and the site that sent the visitor go with enquiries and newsletter sign-ups. You see them in Statistics. This is kept only in the visitor's browser tab and sent with the form. Turning this on adds the Marketing choice to the bar.
• Log consents – records the time, a random identifier and the chosen categories, without an IP address. This is your evidence in case of an audit. It works with the built-in banner.
• Keep consent records (months) – older records are deleted automatically. The default is 36; 0 keeps them.

Below the form you see how many consents of each kind were given in the last 30 days.

Privacy policy page

Go to Pages → New page and under Start from a template choose Privacy policy. Kaleta writes an outline based on what your site really uses: enquiries, newsletter, statistics, Google Analytics, Matomo, Plausible, marketing codes, the consent log, maps and a CRM webhook. Company details from Settings → Company are filled in. The rest stays in square brackets for you to complete.

The outline is a starting point, not legal advice. Check it against how you really process data and the rules of your country. Then publish the page and put its address into Link to the policy.