Legal
Cookie policy
Choice duration
tunnel_consent is local storage, not a cookie: version, two categories and date. A choice is valid for 180 days (approximately six months); expiry or a version change prompts a new choice. Invalid or future dates are rejected. The browser may retain the entry until replaced or site data is cleared, but an expired entry does not authorize measurement.
Security and hosting
Cloudflare serves __cf_bm for bot protection, with an observed lifetime of about 30 minutes. Hosting serves __dpl with an observed expiry of about 24 hours; its exact purpose requires provider confirmation. Lovable Visitor analytics is disabled. Scripts necessary for site operation and security remain in place.
Optional cookies observed
No _ga, _gcl_*, _fbp or _fbc cookies were observed in any tested launch scenario. We do not assign durations or identifiers to unconfirmed tags. This inventory must be updated before a changed measurement configuration is activated.
Necessary
We store your privacy choice in the browser's local storage (key "tunnel_consent": version, accepted categories and date). It is not used for tracking.
Analytics (optional)
Google Tag Manager (GTM-WBS3JQGH) always loads. Analytics cookies require accepting this category. No Google Analytics property or _ga cookies were confirmed in the launch check.
Marketing (optional)
Advertising cookies require accepting this category. Google Ads conversion tags and advertising pixels have not been confirmed; possible cookieless requests are described under Consent mode.
Consent mode
We use Google Consent Mode v2 in advanced mode. Google Tag Manager downloads on every visit after analytics_storage, ad_storage, ad_user_data and ad_personalization are set to denied and any valid saved choice is applied. Denial does not prevent that download or every Google request: compatible tags may send cookieless signals. This does not mean no connection data is transmitted.
Change or withdraw consent
Use the "Cookie preferences" button in the footer. When you withdraw a category we try to delete the related first-party measurement cookies and reload the page with withdrawn categories denied; Google Tag Manager still loads.
External services
Google Maps, Instagram and WhatsApp open on their own sites or apps, with their own cookies and policies.