Cookie Policy

1. What these technologies are

Cookies are small text files a website stores on your device. We also use browser storage (localStorage), which works in a similar way. In this policy, “cookies” covers both.

2. Strictly necessary

These make the site work as you expect. They do not need your consent and cannot be switched off.

lang (cookie) — remembers the language you picked — 1 year.

theme (localStorage) — remembers your light or dark preference — until you clear it.

consent (localStorage) — remembers your cookie choices — 6 months, after which we ask again.

Google reCAPTCHA Enterprise, through Firebase App Check — protects our forms against spam and abuse — loaded only when you submit a form (contact, start a project or newsletter). Google may set its own cookies for this; see Google's privacy policy at https://policies.google.com/privacy.

3. Analytics (optional)

Analytics are off until you accept them.

vid (localStorage) — a random identifier with no link to your name or email, used to count unique visitors — kept until you withdraw consent or clear your browser storage.

With your consent, each page view sends the page address, the website that referred you (on your first page) and that random identifier to our own analytics service running on Cloudflare. Cloudflare derives your approximate country from your IP address; the IP address itself is not stored.

4. What we do not use

No advertising cookies, no third-party trackers, no cross-site tracking and no profiling.

5. How long analytics data is kept

Aggregated counts are kept for 13 months. Per-browser identifiers are deleted after 90 days.

6. Global Privacy Control

If your browser sends a Global Privacy Control signal, we treat it as a refusal of analytics.

7. Changing your mind

Use the “Cookie settings” link in the footer of every page to reopen your choices. Withdrawing consent stops collection immediately and deletes the vid identifier from your browser.

You can also block or delete cookies in your browser settings. Blocking strictly necessary storage may stop parts of the site, such as language and theme choices, from working.

8. Lawful basis

Our lawful basis for analytics is your consent (UK GDPR Article 6(1)(a) and regulation 6 of the Privacy and Electronic Communications Regulations, PECR). Strictly necessary storage is exempt from the consent requirement under PECR.

9. Contact

Questions about cookies? Email privacy@tulmira.com.