Cookie Policy and Similar Technologies

1. What cookies and similar technologies are

A cookie is a file a website asks your browser to store, and that the same site can read again on later visits; it serves, for example, to remember a preference or to recognise your browser between one visit and the next. localStorage and sessionStorage are browser mechanisms similar in purpose but technically different: they store information directly on your device without automatically sending it with every request to the server as a traditional cookie does, and sessionStorage is additionally cleared on its own when you close the tab or the browser.

To keep this readable, in this document we use "cookies" in a broad sense to refer to both technologies, but in the points that follow we specify precisely which one each tool uses.

2. Essential storage (necessary for the site to work)

We store your decision about this cookie notice in localStorage (whether you accepted or declined non-essential cookies), so we do not show it again on every visit and so we know whether or not to activate the analytics tools. This value is not sent to any server: it stays only in your browser, contains no identifiable personal data and does not require your consent because it is strictly necessary for that function. It persists until you clear your own browser's browsing data or decide to change your preference.

3. Analytics cookies — Google Analytics 4

If you accept non-essential cookies, we load Google Analytics 4 (measurement ID G-D92J7BL1YN), from Google LLC, to understand in aggregate how the site is used: page views, visit duration, device type and approximate location. It installs, among others, the cookies _ga (anonymously identifies your browser to distinguish unique visitors across sessions; typical duration of 2 years according to Google's public documentation) and _ga_ followed by an identifier specific to this measurement property (maintains the analytics session state; typical duration also 2 years). These durations are Google's documented defaults and may vary if Google updates its behaviour.

If you decline the notice, the Google Analytics script is not downloaded or executed at all: it is not loaded and left idle — it is simply never inserted into the page.

If you also want a browser-level solution, Google offers an add-on to disable Google Analytics on any site you visit, available at tools.google.com/dlpage/gaoptout.

4. Third-party cookies — user experience (Microsoft Clarity)

If you accept non-essential cookies, we load Microsoft Clarity (project xs3s3258za), from Microsoft Corporation, to generate heatmaps and anonymous session recordings (cursor movements, clicks and scrolling) that help us spot friction points in the design. Clarity does not capture what you type inside form fields. It installs, among others, the cookies _clck (keeps a Clarity user identifier across sessions to give heatmaps consistency; typical duration of 1 year) and _clsk (links several page views within a single recording session; typical duration of 1 day). These durations correspond to Microsoft's public documentation and may vary.

If you decline the notice, the Clarity script is likewise never downloaded or executed.

5. Our own analytics — CRM-ST (no cookies, session storage only)

CRM-ST is our own analytics tool, built by us and hosted on the same server as this site (internal dashboard at /crm/). Unlike Google Analytics and Clarity, it does not use a traditional cookie: it generates an anonymous session identifier stored in sessionStorage, which is automatically cleared when you close the tab or the browser and is never sent to any third party.

With that identifier, CRM-ST records: pages visited, scroll depth, clicks on tagged interface elements with their coordinates (to build internal heatmaps), active interaction time, the origin of your visit and UTM parameters if you arrived from a campaign, and your device type, browser, operating system and approximate country.

One point we want to be very clear about: CRM-ST never stores your IP address. There is no IP address column in its database. For the sole purpose of abuse control (for example, detecting anomalous automated traffic), an irreversible salted hash value is computed and stored from the IP, from which reconstructing the original address is unfeasible. In addition, if your browser sends the "Do Not Track" (DNT) signal, CRM-ST honours it and does not record you at all, even if you accepted the cookie notice.

Like the tools above, CRM-ST is only loaded if you accepted the cookie notice. All data it collects stays on our server; it is not shared, sold or remitted to any third party.

6. Other related tools

Google Search Console gives us aggregate statistics on how this site appears in Google search results (impressions, clicks, search terms). It installs no cookie in your browser and does not identify you individually: the data we see is aggregated and comes from Google's search infrastructure, not from a script installed on this site.

When you visit the work section, the site loads additional typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com) and from jsDelivr (cdn.jsdelivr.net), to faithfully reproduce the visual identity of each project shown. These content delivery networks may transiently log your IP address, as any server does when your browser requests a file, solely to deliver the corresponding font file; they do not install advertising tracking cookies. Outside that section, the site loads no external fonts.

7. Basis of consent

Storage strictly necessary for the site to work (such as remembering your decision about this notice) does not require your consent, under the exception recognised both by the LFPDPPP and by international standards in this area. For everything else — Google Analytics 4, Microsoft Clarity and CRM-ST — this site follows a prior consent model: we ask you through the notice that appears on your first visit, and none of those tools is loaded until you accept.

Our own analytics, CRM-ST, additionally honours your browser's Do Not Track signal independently.

8. How to accept or decline cookies from this site

On your first visit you will see a cookie notice on screen with two clear options: accept or decline. If you accept, the tools described in this policy are loaded. If you decline, none of them is loaded: your browsing stays exactly the same, with no measurement. Your choice is stored locally in your browser so we do not have to ask again on every visit. If you later change your mind, you can clear your browser's browsing data for this site (see point 9) and the notice will reappear on your next visit, letting you choose again.

9. How to manage cookies from your browser

Beyond this site's notice, you can accept, block or delete cookies directly from your browser settings at any time. Official instructions from each vendor: Google Chrome, at support.google.com/chrome/answer/95647; Mozilla Firefox, at support.mozilla.org/kb/enhanced-tracking-protection-firefox-desktop; Safari (macOS/iOS), at support.apple.com/guide/safari/sfri11471/mac; and Microsoft Edge, at support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09.

Keep in mind that blocking all cookies from the browser is a global setting that will affect your experience on every site you visit, not just ours.

10. Consequences of declining non-essential cookies

Declining analytics cookies does not affect your browsing experience or your access to any content or functionality on this site whatsoever: you will be able to see the projects, read the services and contact us exactly the same. The only thing that changes is that we stop receiving aggregate data about your visit, which reduces our statistical visibility but has no negative effect on you.

11. Updates to this cookie policy

If we add, replace or remove any tool that uses cookies or local storage, we will update this policy to reflect it accurately, along with the last-updated date visible at the top of this page.