Cookie Policy
Last updated: 15 October 2026
This page explains what we store on your device when you use this portal, why, and how to change your mind.
What cookies are
A cookie is a small text file a site asks your browser to keep. We use them to run the portal — signing you in, keeping your session alive and blocking automated abuse — and, only with your permission, to count visits with Google Analytics. We do not use them to build a profile of you and we never sell personal data.
When we ask for your consent
Strictly necessary cookies are set without asking, because the portal cannot work without them; European law allows this. Everything else needs your permission first, so no statistics or marketing cookie is stored or read until you turn that category on. Your answer — including a refusal — is kept for 6 months, after which we ask again.
The cookies we use
This is the complete list. It is generated from the portal's own code, so it cannot fall out of date.
| Name | Purpose | Category | Stored for | Set by |
|---|---|---|---|---|
| ptl_at | Keeps you signed in to your agency account. | Strictly necessary | 1 hour | This portal |
| ptl_rt | Renews your sign-in so you are not asked for your password on every visit. | Strictly necessary | 30 days | This portal |
| ptl_sub | Identifies your account to the sign-in service while the session is renewed. | Strictly necessary | 30 days | This portal |
| ptl_consent | Remembers the cookie choices you made here, including a refusal. | Strictly necessary | 6 months | This portal |
| aws-waf-tokenOnly in some situations | Set by the anti-bot check on the sign-up form to confirm you are a real visitor. | Strictly necessary | 30 minutes | Amazon Web Services (our hosting and firewall provider) |
| _ga | Tells one visitor apart from another for Google Analytics, with a random id — not your name or account. | Statistics | 2 years | Google Ireland Ltd (Google Analytics) |
| _ga_1WT3RTG5F7 | Keeps Google Analytics’ count of the current visit: when it started and which pages it covered. | Statistics | 2 years | Google Ireland Ltd (Google Analytics) |
Statistics: Google Analytics
We use Google Analytics 4, a service of Google Ireland Ltd, in Google’s consent mode. It gives us usage statistics — visits, pages viewed, which packages are looked at, roughly where visitors come from — so we can improve the catalog. Its script loads on every page, but until you choose it sets and reads no cookies and stores no identifier: Google receives only cookieless signals (the page address, the referring page, your browser type, a timestamp, a random number generated for that page view and your consent choice, plus the IP address every web request carries), used only for aggregate, modelled statistics, on the basis of our legitimate interest. Refuse statistics — or let your browser send a Global Privacy Control signal — and from then on it sends no measurement data at all; the script file itself is still fetched from Google, as any web resource is. If you allow statistics cookies, it also tells visitors apart by a random id rather than by anything that names you. It is set up for measurement only: advertising features and Google signals are switched off, and Google Analytics 4 does not log or store IP addresses. Google processes this data on our behalf and may transfer it to the United States under the EU–US Data Privacy Framework. Withdrawing your consent removes the cookies and stops the measurement.
Changing or withdrawing your choice
You can change your mind whenever you like, and withdrawing is as easy as consenting:
Controlling cookies in your browser
Every browser lets you view and delete cookies, and block them entirely. Blocking the strictly necessary ones will stop you from signing in, but the public catalog stays readable.
Global Privacy Control
If your browser sends the Global Privacy Control signal, we treat it as a refusal of everything non-essential and do not show you the banner. You can still open the settings above to allow more.
Payment pages and other external sites
When you pay an instalment, the Pay button opens a secure payment page run by Flywire, our payment provider, on Flywire's own website. That page and any other external site we link to set their own cookies under their own policies; we neither set nor read them, and the choices you make here do not apply there.
Who we are, and your rights
This portal is operated by EU DMC. How we handle personal data, how long we keep it and how to exercise your rights — including a complaint to the Finnish Data Protection Ombudsman — is set out in our Privacy policy