Cookie Policy
Effective date: September 24, 2026 • View previous version
1. Introduction
This Cookie Policy explains how 2 Create Ltd (the "Company", "we", "us"), acting as a data controller, uses cookies and similar technologies on the DocuMocu website and platform, and what choices you have. It complements the Privacy Policy, to which it refers for more general information on the processing of personal data.
Our marketing websites use analytics and marketing cookies (with consent), while the platform itself uses primarily strictly necessary cookies.
2. What are cookies
Cookies are small text files stored on your device when you visit a website. We also use similar technologies — tracking pixels, local storage, software components (SDKs) and device fingerprinting — which we refer to collectively as "cookies" for brevity.
Cookies are "first-party" (set by us) or "third-party" (set by a provider), and "session" (deleted when the browser closes) or "persistent" (remaining for a set period).
3. Legal basis and consent
3.1. Article 5(3) of Directive 2002/58/EC (the ePrivacy Directive), transposed into Bulgarian law through the Electronic Communications Act, requires consent to store information or gain access to information stored on the user’s terminal equipment, except where strictly necessary to provide a service explicitly requested by the user.
3.2. Strictly necessary cookies are set without consent. All others (functional, analytics and marketing) are set only after prior consent meeting the GDPR standard — freely given, specific, informed and unambiguous.
3.3. Until consent is obtained, no cookies other than strictly necessary ones are set. The "Reject all" button is as accessible as "Accept all"; no pre-ticked boxes are used; choice is granular by category; consent can be withdrawn as easily as it was given.
3.4. GDPR legal bases: strictly necessary cookies rely on our legitimate interest (Art. 6(1)(f)) or the performance of the service you requested (Art. 6(1)(b)); all others rely on your consent (Art. 6(1)(a)).
3.5. Refusing functional, analytics or marketing cookies does not restrict your access to the core functions of the service.
4. Categories of cookies
Strictly necessary: provide core functions (session, authentication, security, recording your cookie choices) and remember settings you have chosen within the platform (e.g. interface preferences). No consent required.
Functional: enable optional features such as the support chat. Consent required.
Analytics: measure usage to help us improve the services. Consent required.
Marketing: measure the effectiveness of advertising and enable retargeting. Consent required.
5. List of cookies used
| Category | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| Strictly necessary | 2 Create (first-party) | session, authentication, security, consent record, interface preferences | First-party | Session / up to 13 months |
| Strictly necessary | Stripe | payment security, fraud prevention | Third-party | 1 year |
| Analytics | Google Analytics (Google) | usage measurement | Third-party | up to 2 years |
| Marketing | Meta Pixel (Meta) | ad measurement, retargeting | Third-party | 3 months |
| Functional | Intercom | support chat | Third-party | 9 months |
| Marketing | First Promoter | affiliate & campaign attribution | Third-party | 6 months |
6. Managing and withdrawing consent
6.1. You can manage your choices at any time. On the website, use the "Cookie settings" link in the footer or in the cookie notice. On the platform, use Cookie preferences in your profile settings. Withdrawing consent is as easy as giving it and does not affect the lawfulness of processing based on consent before its withdrawal.
6.2. You can also manage cookies through your browser settings. Note that disabling strictly necessary cookies may impair the operation of the service.
6.3. We will ask for your consent again at least once every 12 months, and upon any material change to the cookies used. On the website this happens when your consent cookie expires or a new version of this Policy is published; on the platform, when your recorded consent is older than 12 months or refers to a previous version.
7. Third parties and international transfers
Some cookies are set by third parties (e.g., Google, Meta), which process data for their own purposes under their own policies. This may involve transferring personal data to the USA. Appropriate safeguards (an adequacy decision and/or standard contractual clauses) apply, as described in the Privacy Policy.
For certain third-party cookies, we and the relevant third party may be joint controllers in respect of the collection and transmission of the data; the third party’s subsequent processing is governed by its own policy.
8. Consent record
8.1. On the website, your choice is stored only in a consent cookie in your browser for up to 13 months. We do not keep a separate record of it. Deleting the cookie removes your choice, and you will be asked again on your next visit.
8.2. On the platform, the record of your consent (the choices made, the time and the version of this Policy) is linked to your account and kept for 24 months as evidence of compliance, or until you delete your account, whichever is earlier.
8.3. You can change or withdraw your choice at any time as described in section 6.
9. Changes to this policy
We may update this Policy when the technologies used or the applicable requirements change. The current version is published on the site with an effective date.
10. Contact
Controller: 2 Create Ltd, UIC 200659554, 8 Neptun Street, Varna 9000, Bulgaria.
Questions and requests: [email protected].
You have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, [email protected], www.cpdp.bg.