Cookie notice

This Cookie Policy describes what cookies are, how and why we use them, as well as how to choose your cookie settings and control the use of cookies.

Read more about cookies

In addition to Cookie Policy, our Privacy Notice applies and complements this Cookie Notice.

We use cookies and other similar technologies on websites operated by If Skadeförsäkring AB (publ), including all local branches, that maintain domains such as if-insurance.com. You can at any given time withdraw your consent for processing cookies and other identifiers.

We may change this Cookie Notice at any time. The "last revised" date at the bottom of this page indicates when this Cookie Notice was last revised. Any change in this cookie policy will become effective when a new version is published on our websites.

What is a cookie?

A cookie is a small piece of data sent from a web page and stored in a user's web browser, mobile phone or another device. This data is stored on the user's device and can be used to remember information about the user's visit to the website. Cookies are commonly used to provide personalized user experiences and to enable certain functionalities on websites, as well as for other purposes such as advertising 

There are also other technologies, such as pixel tags, web bugs, web storage and other similar files and technologies can also be used for the same or similar purposes as cookies. In this Cookie Policy, we use the term "cookies" to refer to cookies and all other similar technologies. 

We classify the cookies that we use based on the purpose. Some cookies are essential for our website to operate, while others measure the performance & provide personalized user experiences. We also use cookies that help us deliver targeted advertising. 

We use the term "first-party cookies" for cookies set by us and the term "third-party cookies" for cookies set by third-party technology vendors. With first party cookies we mean cookies that are stored by the domain (including all sub-domains) you are visiting directly, or any domain (including all sub-domains) owned and operated by us, such as if.eu. With third party cookies we mean cookies that are stored by any other domain than described above. 

Data that we collect via first-party cookies can be shared with third-party technology vendors who process data on behalf of If Skadeförsäkring AB (publ), including all local branches. More information about processing these data can be found in our Privacy Notice

Information collected through a third-party cookie is subject to the privacy policy of that third party, and not our privacy policy. However, we respect your privacy and allow such third-party cookies only if you have given your consent, except security related cookies.

Below we list different categories of cookies that we use on our websites, based on their purpose - Essential cookies, User experience, Advertising & targeting cookies and Advanced analytics & targeting. See the full list of used cookies.

Please note that the same tool can be used for various purposes, hence we control that the cookies’ use are in line with your privacy settings. For each category, we also list most often used tools.

List of cookies

Cookie / Responsible party Category Name Purpose Lifespan Type of Cookie
Consent cookies / If
Essential OptanonConsent, OptanonAlertBoxClosed Cookies related to the OneTrust cookie compliance solution. Used to store visitor preferences related to cookies and other trackers. 1 year 1st Party
Security cookies / If
Essential TSxxxxxxxxxxx, TS01xxxxxx, AspNetCore.Antiforgery.LN7Cd5AFAG0:, .AspNetCore.OpenIdConnect.Nonce.*, __RequestVerificationToken TS cookies are used to validate domain cookies and qualifying subdomain cookies to ensure cookies are not modified or for load balancing. AspNetCore cookies are used to prevent Cross-Site Request Forgery (CSRF) and replay attacks.

_RequestVerificationToken is created by ASP.NET MVC platform. This is so-called anti-forgery cookie which helps to secure that forms on MyPages get submitted in the original form. That the forms are not injected or forged in any way.
AspNetCore.Antiforgery.LN7Cd5AFAG0, _RequestVerificationToken: Session, others 10 min,  1st Party, _RequestVerification 3rd Party
Customer service cookies / If
Essential vngage.vid , vngage.id, psCurrentState, vngage.lkvt , ps_pQ These are cookies related to our chat application. vngage.lkvt 90 days, others: chat session 1st Party
Load balancing cookies / If
Essential ARRAffinity, ARRAffinitySameSite, LBSESSION Created by Microsoft Azure and helps to direct requests to the correct instance in load-balanced environments. Session 1st Party
Content cookies / If
Essential EPi:StateMarker, EPi:UrlReferrerKey, cultureCode, _currentCustomer, _salesCode EPI cookies are created by Optimizely (CMS) for anonymous visitor segmentation to be used for dynamic content on pages. Other cookies (_cultureCode, _currentCustomer, _salesCode) cookies is used to display content on our Employee Pages platform. _currentCustomer and _salesCode: 34 min, others: Session 1st Party
Statistics cookies (Google Analytics) / If
Essential FPID, FPLC, _gcl_au, _gcl_dc, pageviewCount, _gid, _gaxxxxxxxxxx, _ga_xxxxxxxxxx,_gac_xxxxxxxxxx _gat_UA-xxxxxxxx-x Google Analytics cookies register a unique ID and collect statistical information about how the visitor uses the website. Under this category ”Essential” Google Analytics is used solely for the purpose of fraud detection and to compile anonymous or  aggregated statistics. FPID, _ga, _gaxxxxxxxxxx: 2 years, _gcl_au, _gcl_dc, _gacxxxxxxxxxx: 90 days, _gid: 1 day, FPLC: 20 hours, pageviewCount: 30 minutes, _gat_UA-xxxxxxxx-x: session 1st Party
Statistics cookies (Microsoft Application Insights) / If
Essential ai_session, ai_user We use these cookies to ensure the stable performance of our websites, detect technical errors, and troubleshoot any issues. All information collected through these cookies is done on an anonymous basis. Session 1st Party
Authentication cookies / If
Essential .AspNet.Cookies, ASP.NET_SessionId, .AspNetCore.Cookies, .AspNetCore.CookiesC1, .AspNetCore.CookiesC2, .AspNetCore.CookiesC3, __BFFx Created to authenticate customers as well as to keep them logged in for the duration of their session. Session or 2 hours 1st Party
Advertising / Meta (Facebook)
Advertising & Targeting sb, datr, oo, _fbp, fr, xs, c_user, wd, dpr, locale, presence, sb Created by Meta, collects statistical usage and activity. Its also used for visitor segmentation for customizing advertising on Facebook and Instagram. It's also used for optimizing media buying, analyzing and reporting on media investment in the Meta system. sb and datr: 2 years, oo: 5 years, _fbp 90 days, fr 90 days, xs 90 days, c_user 30 days, wd 1 week, dpr 1 week,  presence: Session, sb: 2 years 3rd party (_fbp 1st party)
Advertising / Google
Advertising & Targeting Various, for example NID, 1P_JAR, SOCS, CONSENT (youtube.com), AEC, OGPC, TEST_COOKIE, IDE.  Cookies that track conversion actions such as price calculations and sales are used to follow up on performance.  Its also used for visitor segmentation for customizing advertising in Google's networks.

For an overview of cookies used by Google advertising, see https://business.safety.google/adscookies/
NID: 6 months, 1P_JAR: 30 days, SOCS: 13 months, AEC: 6 months, TEST_COOKIE: 15 min, CONSENT: 17 years, IDE: 6 months 1st party 
Advertising / Microsoft (Bing)
Advertising & Targeting MUID, _uetsid, _uetvid These cookies are used to track conversion actions such as price calculations and sales. They also used for visitor segmentation for customizing advertising in Microsoft's networks, and to follow up on advertising effectiveness. MUID: 1 year, _uetsid: 1 day, _uetvid: 1 year 1st party 
Advertising and personalization / Salesforce
Advertising & Targeting _evga_XXXX, _sfid_XXXX The personalization module of the Salesforce Interactions SDK supports anonymous and named identity tracking using Personalization first-party cookies or by being passed identity information by the website 13 months 1st party 
Quotation and Purchase cookies (webshop) / If
Essential wsno_session, wsno_auth The wsno_session cookies are used for tracking a session and making personal data unavailable after 20 mins of inactivity. The wsno_auth cookies are used to convey two-factor authenticated customers accross applications using Curity for logging customers in. wsno_session: 20min, wsno_auth: 20min 1st party 
User Experience (HotJar) / If
User Experience All _hj* cookies, for example _hjAbsoluteSessionInProgress, _hjSession_xxxxxx, _hjTLDTest, _hjFirstSeen, _hjIncludedInPageviewSample, _hjIncludedInSessionSample_2951928 ,_hjSessionUser_xxxxxx Used to better understand our users’ experience, and to build and maintain our service with our users feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. For an overview of cookies set by HotJar's tracking code, see https://help.hotjar.com/hc/en-us/articles/6952777582999-Cookies-Set-by-the-Hotjar-Tracking-Code _hjAbsoluteSessionInProgress: last user activity + 30min, _hjSession_xxxxxx: last user activity + 30min, _hjTLDTest: Session, _hjFirstSeen: 30min, _hjIncludedInPageviewSample: end of session + 2min, _hjIncludedInSessionSample_xxxxxxx: end of session + 2min ,_hjSessionUser_xxxxxx: 365d
Please see https://help.hotjar.com/hc/en-us/articles/6952777582999-Cookies-Set-by-the-Hotjar-Tracking-Code for an up to date list of cookies related to HotJar.
1st party
User Experience (Google Optimize) / Google
User Experience _gaexp, _opt_awcid, _opt_awmid, _opt_awgid, _opt_awkid, _opt_utmc, _opt_expid Optimize utilizes cookies to target content variants to a user and a content experiment cookie to determine a user's participation in an experiment _gaexp: depends on the length of the experiment, but typically 90 days

_opt_awcid, _opt_awmid, _opt_awgid, _opt_awkid, _opt_utmc: 24 hours

_opt_expid: 10 seconds
1st party
User Experience / TrustPilot and Forsta
User Experience No cookies set by If websites These cookies are set when a visitor interacts with widgets or popups from customer experience survey platforms TrustPilot or Forsta embedded on our websites. While loading, the scripts can connect to the 3rd party domains, but no actual cookies are set. If the visitor chooses to click on an embedded widget or popup, the cookie notice and privacy policy of these domains become applicable. N/A N/A

Last revised October 26th. 2023