Cookie Policy
1. What cookies are
Cookies are small text files that a site saves in your browser. The browser’s local storage (localStorage) works in a similar way: a site keeps data in it on your device. In this policy we call all of this cookies.
2. Cookie categories
The categories are the same as in the consent banner:
- Necessary: the working and security of the site and the form, and remembering your choice in the banner. They always run: they need no consent, because without them the site cannot provide what you ask of it.
- Analytics: Google Analytics 4, for statistics on visits and traffic sources, and the visit source that we add to your request. Only with your consent.
- Advertising: Google Ads and the Meta pixel, for measuring how ads perform and for remarketing, that is, showing ads to people who have already visited the site. Only with your consent.
3. List of cookies
| Name | What it does | Lifetime |
|---|---|---|
| Necessary: always on | ||
hc-consent | Ours, in browser storage. Remembers your choice in the cookie banner. | 12 months |
hc_crm | Ours./crm/ pages, never for site visitors. | up to 30 days |
| Analytics: only with consent | ||
_ga, _ga_<ID> | Google Analytics 4. Tells visitors and sessions apart for statistics. | up to 2 years |
hc-attr | Ours, in browser storage. Remembers the source, campaign and click ID of your first and last visit, to add them to your request. | up to 90 days |
| Advertising: only with consent | ||
_fbp, _fbc | Meta pixel. Measures how ads on Facebook and Instagram perform and builds audiences for remarketing. _fbc stores the click ID when you arrive from an ad. The pixel also keeps the technical keys lastExternalReferrer, lastExternalReferrerTime and multiFbc in your browser's storage. | 90 days |
Google Analytics 4 is provided by Google Ireland Limited, and the Meta pixel by Meta Platforms Ireland Limited. Cloudflare, which the site runs on, may set a technical security cookie, __cf_bm (up to 30 minutes), to tell people from bots. Google and Meta also use cookies on their own domains, under their own rules. This list is current on the date of this version; if we add or remove a tool, we will update the table.
4. Google consent mode (Consent Mode v2)
We load Google’s tools through Google Tag Manager, which sets no cookies itself. We use Google’s consent mode (Consent Mode v2) in its advanced form: Tag Manager loads for every visitor, and each Google tag first checks your choice in the banner. We pass that choice to Google as four signals: analytics, analytics_storage; advertising, ad_storage, ad_user_data and ad_personalization.
- Without consent (including after “Necessary only”), Google tags neither set nor read cookies. They send Google only basic signals with no cookie identifiers: for example, that a page was viewed and what the consent state is. Google uses such signals for statistical modeling.
- With consent to analytics, Google Analytics 4 runs with the cookies in the table above.
- With consent to advertising, Google may use Google Analytics data to measure how Google Ads perform and to personalize the ads you see.
The Meta pixel has no such mode: we turn it on only after you consent to advertising cookies, and without that consent no data from the site reaches Meta.
5. How to change or withdraw your choice
- Click “Cookie settings” at the bottom of any page: the banner opens, and you can change your choice or withdraw your consent there. Withdrawing consent is as easy as giving it.
- When you withdraw consent, we delete the cookies of the tools concerned from our domain, along with the stored visit source.
- We keep your choice for 12 months. After that, and whenever the list of tools or categories changes, the banner will ask you to choose again.
- You can also delete or block cookies in your browser settings. Without necessary cookies, parts of the site may not work properly, and the banner will keep coming back.
Withdrawing consent does not affect the lawfulness of the processing carried out before the withdrawal.
6. Google, Meta and data transfers
Google and Meta also use data from advertising cookies for their own purposes, as separate data controllers. Their own documents explain how: how Google uses information from sites that use its services and the Meta Privacy Policy. These companies may process data outside the EEA, in particular in the US; the safeguards for such transfers are described in section 6 of our Privacy Policy.
7. Changes to this policy
We update this policy when the tools on the site or the law change. The date of the current version is at the top of the page. If the categories or tools that need consent change, the banner will ask you to choose again.
8. Contact
Send questions about cookies and personal data to