Cookie Policy
Necessary preference storage
The localStorage entry tovumi.privacy remembers your analytics choice, separate sale/sharing opt-out, save time, and policy version. It contains no unique tracking identifier and is not sent to our server with requests. Both acceptance and rejection remain valid for 180 days. Expired, invalid, or outdated choices allow no optional tracking. Expired storage may remain on your device until replaced or cleared, but it is no longer treated as consent.
Optional Google Analytics cookies
Only after eligible consent, Google Analytics can set _ga and _ga_9B3WXGPWZW to distinguish browsers and maintain analytics session state. This implementation configures a 180-day cookie lifetime without refreshing expiry on each visit, host-only domain scope, and path /. Actual vendor cookie behaviour must be verified before release. Google-held event data has a separate account retention setting.
No advertising category, advertising tag, form tracking, or session replay is implemented. Google Signals and advertising personalisation are disabled in tag configuration. Enhanced measurement and linked account settings require separate verification in Google Analytics before release.
Change or withdraw your choice
Use Cookie settings in the footer to accept, reject, or save preferences. Closing preferences does not give consent. Withdrawal stops application events immediately, disables the measurement ID, updates consent to denied, clears known GA cookies, and reloads the page. Google may have requests already in flight before the reload. Removing local cookies does not erase previously received Google data.
Privacy signals and your browser
GPC and a saved sale/sharing opt-out disable analytics under our conservative policy, even with previously saved analytics acceptance. No analytics scripts, cookieless measurement pings, preconnects, or tracking events are created before eligible consent. Analytics remains disabled in development and preview.
The 180-day consent duration is a configurable product choice requiring jurisdiction-specific review, not a universal legal rule. Blocking browser storage prevents us from remembering consent and keeps analytics off.