Cookies and storage.

What the website uses

Cookies are small pieces of information stored by your browser. Session storage keeps information temporarily within a tab. Optional advertising measurement requires your separate permission; see the sections below. The hosting platform produces visitor statistics from technical data; this processing is explained under Data protection.

Website protection: __cf_bm

This Cloudflare cookie protects access to the website from malicious bots. It was observed in responses from the public website on 8 September 2026.

• Observed domain: www.eck-immobiliere.lu; path: /.
• Data: encrypted information used to detect automated traffic. Page JavaScript cannot read the cookie value (HttpOnly); it is transmitted over HTTPS (Secure).
• Duration: expires after 30 minutes of inactivity, according to Cloudflare.
• Technical provider: Cloudflare as part of the website’s hosting. Cloudflare cookie documentation ↗

Temporary navigation storage

The navigation framework may use sessionStorage when a page needs to reload after an error. This mechanism prevents repeated reload loops.

• Technical keys: __vinext_hard_navigation_target__ and __vinext_rsc_initial_reload__.
• Data: the affected page’s address, which may include URL parameters; ECK adds no form values to this storage.
• Location: the browser tab’s session on the website address visited. These values are not automatically transmitted like cookies.
• Duration: until removed by navigation or until the tab’s session ends, depending on the browser.

Consent and your choices

Strictly necessary use requires no prior consent. Future non-essential mechanisms will remain blocked until any required consent, with simple refusal, a consent record and easy withdrawal. CNPD · cookie rules ↗

You can delete cookies and website data in your browser settings. Blocking security mechanisms may disrupt access. Visiting this page does not constitute consent to tracking.

Controller, providers and rights

The controller is ECK IMMOBILIERE S.à r.l.-S., 7, rue du Brill, L-3397 Roeser, Luxembourg. Contact: contact@eck-immobiliere.lu. Hosting is provided through ChatGPT Sites, with OpenAI Ireland Limited and technical subprocessors. Purposes, legal bases, recipients, possible transfers outside the EEA and your rights are explained under Data protection. ChatGPT Sites Data Processing Addendum ↗

Tool calculations stay within the page. Information you submit through a form is stored separately in the protected enquiry inbox; deleting cookies does not delete an enquiry already submitted.

Scope of this inventory

This inventory is based on the published code and HTTP responses from the homepage and Cookies page, checked on 8 September 2026 at www.eck-immobiliere.lu. It covers public access without signing in. Sign-in flows and conditional security checks have not been fully inventoried in a browser.

Customer area: sign-in and display preference

Code-based addition reviewed on 18 October 2026: the necessary cookie __Host-eck_session contains a random session identifier, not a password. It is limited to the website visited, path /, with Secure, HttpOnly and SameSite=Lax. It expires after 12 hours, or at most 30 days if you choose to stay signed in. A session is also invalidated after 7 days of inactivity or when you sign out.

When you dismiss the app introduction, eck-app-intro stores only the value 1 in localStorage to remember that display choice. It remains in this browser until website data is cleared and is not automatically transmitted like a cookie. Private case data is not stored offline. Details: Customer area privacy (FR / DE).

Necessary confirmation and preferences

The __Host-eck_receipt cookie displays confirmation after an enquiry has been saved: reference, category, email preparation status and a signed technical identifier, without a name, contact details or message. It expires after 10 minutes (Secure, HttpOnly, SameSite=Lax, path /). If your browser blocks this cookie, confirmation remains in the form.

The __Host-eck_consent cookie remembers your choice for 180 days (Secure, HttpOnly, SameSite=Lax, path /). On refusal or withdrawal, eck_consent_blocked also blocks measurement for 180 days. These cookies are limited to the website address visited. Each choice is stored on the server for 180 days with a random identifier, time, language and information version, to respect and document your decision. It is not linked to your customer file. Technical deletion occurs on a subsequent site request.

eck_consent_change sends only a temporary signal between tabs and is immediately removed from local storage.

Google Ads: optional enquiry measurement

If ECK enables Google Ads measurement, it starts only after your separate consent (Article 6(1)(a) GDPR). Google does not load before permission. Refusing does not restrict the forms. Property and service enquiries are measured separately; a visit or failed submission does not count as an enquiry.

After permission, Google may receive technical connection data such as IP address and browser, advertising click identifiers and an event with a technical conversion identifier. ECK does not send your enquiry reference, name, email, phone, address or message in this event. Enhanced conversions and advertising personalisation are disabled. eck_ads_sent: markers in sessionStorage prevent repeated sends during the tab session.

Google cookies starting with _gcl_ attribute conversions to ads; Google specifies a 90-day duration. Google mechanisms may vary by browser and settings. Google · cookies ↗

Google, withdrawal and rights

Measurement recipient: Google Ireland Limited and its service providers. Processing may involve transfers outside the EEA under Google’s terms and their safeguards. Google’s retention of data is separate from cookie lifetime. Google · data protection ↗ Google · data protection terms ↗

You can refuse or withdraw permission through “Cookie settings” at the bottom of every page. Withdrawal blocks further events, deletes accessible advertising cookies on this site and reloads the page if measurement was active. It does not retrospectively erase data already received by Google or affect the lawfulness of earlier processing. For your rights and complaints to the CNPD: Data protection.

The Google inventory must be checked in a browser after account configuration. This description is not evidence of active measurement.