Global Compliance
Infrastructure

Cookie Policy

Last updated:

This website writes a single cookie of its own, lang. It stores the language you are reading the site in — a two-letter code such as en or it — so that a later visit opens in the same language instead of falling back to your browser’s Accept-Language header. It lasts one year, contains no identifier, and is never used for analytics or advertising.

We store nothing else in your browser: no session identifier, no login state, no analytics identifier.

Cookies set by Cloudflare

Our site is served through Cloudflare. Cloudflare may set a short-lived security cookie (__cf_bm) to mitigate bots and DDoS attacks. This cookie is classified as strict-necessary under European e-Privacy law: without it, basic site security cannot function. It contains no personal information and is not used for advertising or analytics.

Privacy-first analytics

We use two measurement tools, neither of which writes a cookie.

Cloudflare Web Analytics is collected at the network edge. It is cookie-free, does not fingerprint visitors, does not collect personal data, and does not enable user-level analysis.

Google Analytics 4 runs in cookieless mode (client_storage: 'none'), so it stores no cookie and no persistent identifier in your browser. It reports aggregate traffic, referring source, pages viewed, approximate geography, and device type. The trade-off is deliberate: without a persistent identifier the measurement cannot tell a returning visitor from a new one, and cannot be tied back to you. Data is processed by Google LLC in the United States under the EU-US Data Privacy Framework.

European e-Privacy law requires consent for cookies that are not strictly necessary, and for storing or reading information on your device for purposes such as analytics. Neither applies here: the Cloudflare security cookie is strictly necessary; the lang cookie holds a preference you can see and change at any time and serves no other purpose; and our analytics tools store nothing on your device at all. No banner is therefore required. We have made this design choice deliberately to avoid the consent fatigue that compromised cookie banners create.

Managing cookies

You can clear both cookies from your browser settings at any time. Removing lang simply means the site will infer your language from your browser again on the next visit. The Cloudflare security cookie cannot be disabled without breaking the site’s protection against automated abuse.

Updates

If we ever introduce non-essential cookies, we will display a consent banner at that time and update this policy. As of the date above, no such cookies are in use.