Cookie Policy

1. What cookies this site sets

Two, and only when you use the contact form:

• ›A session cookie, which allows the server to associate your form submission with your request. It expires when you close your browser.
• ›A cross-site request forgery token, which proves that a form submission came from a page we served rather than from an attacker's site. It is a security control, and the form cannot work without it.

2. What this site does not set

There is no analytics, no advertising, no remarketing, no social media widget, no embedded video, no web font loaded from another company, no content delivery network, and no tag manager.

The site ships no JavaScript at all. Its Content Security Policy forbids script execution outright and permits no connection to any external host, so no third party can observe your visit even in principle. You can verify this yourself from the response headers.

3. Why there is no cookie banner

Under the EU ePrivacy Directive and equivalent rules elsewhere, consent is required for cookies that are not strictly necessary. Both cookies described above are strictly necessary for a service you have actively requested — submitting the form — so the consent exemption applies.

We could show a banner anyway. We do not, because a consent dialogue offering no real choice trains people to dismiss dialogues that do.

4. Cookies on sites we build for you

This policy covers this website only. A site we build for you will have whatever cookies you ask for — and if you want analytics or advertising tools, we will tell you plainly what they collect and build you a compliant consent mechanism for them.

5. Server logs are not cookies

Our web server records the usual request information — address, timestamp, page, response code, browser string — for security and troubleshooting. That is described in the Privacy Policy. It does not involve cookies and is not used to build a profile of you.

6. Controlling cookies

Every major browser lets you view, block and delete cookies in its settings. Blocking cookies for this site will prevent the contact form from submitting, because the security token cannot be checked. Every other page will work normally.

7. Changes

If we ever add a cookie that is not strictly necessary, we will ask for your consent before setting it, and this page will say so before it happens.