← Back to nkovalcin.com
Legal · Cookie policy

Cookie policy.

This site stores only what it strictly needs in your browser. Analytics and marketing cookies are set only after you consent. Consent is handled by Conseto, my own consent and analytics tool hosted in the EU. When anything here changes, this page is updated first.

What we store

cs_consent
Strictly necessary. Your choice in the consent banner (localStorage), so you aren't asked on every page. Stored for "Only necessary" too.
cs_cr
Strictly necessary. A technical sessionStorage flag that your choice was already recorded this session. Gone when you close the browser.
cs_v, cs_s
Conseto analytics, only with consent. A random visitor ID (localStorage) and session ID (sessionStorage, 30 minutes) to count visits and page views.
_ga, _ga_EWY13XMK7S
Google Analytics 4 (Google Ireland Ltd.), only with analytics consent. Traffic measurement, expires after 400 days.
_fbp
Meta ad measurement, only with marketing consent. The ID is created by Conseto, expires after 90 days.
nk_admin_session
Strictly necessary, admin only. Encrypted login cookie for the admin section, 7-day lifetime, HttpOnly, Secure, SameSite=Lax. Never set for a public visitor.

Under the ePrivacy Directive (2002/58/EC), strictly necessary items don't require prior consent. Everything else is stored only after you consent in the banner.

What we don't use

  • No analytics or marketing cookies before consent. The Google tag loads right away, but in Consent Mode v2 with consent denied: it stores no cookies and sends Google only signals without a visitor identifier. Conseto meanwhile counts visits without storing anything.
  • No session replay or heatmaps. No Hotjar, FullStory, LogRocket or Microsoft Clarity.
  • No other ad pixels. No LinkedIn Insight Tag, Reddit Pixel or TikTok Pixel.
  • No Vercel Analytics or Speed Insights.
  • No third-party fonts. Fonts (Syne, Outfit, PP Grafier, PP Supply Mono) ship with the site; your browser never fetches them from Google or any other CDN.

Third-party embeds

No YouTube, Vimeo, X or Calendly. Call booking runs right on the site, slots and bookings live in Kovrin, my system of record hosted in the EU, and booking sets no cookies. The only third-party scripts are Conseto and the Google tag described above.

Conseto and consent

Conseto is my own consent and analytics tool, running in the EU (Frankfurt). It loads across the public site (/en/* and /sk/*), shows the consent banner, and turns on Google Analytics and Meta measurement according to your choice. The admin section (/admin/*) is not measured.

Opting out

Change your choice any time through the Cookie settings link in the footer of every page. Withdrawing consent stops measurement; clear any stored _ga and _fbp in your browser settings.

Last updated 2026-09-30Scope · entire public site