Cookie Policy
In short: by default we set only technically necessary ones. Analytics (Umami) is server-side, with no cookies at all. GA4 / Facebook / LinkedIn — only if you clicked «Accept» in the banner.
1. What cookies are
Cookies are small text files that a site stores in your browser. Some are needed for basic operation (for example, so a form doesn't lose the data you've entered), others — for analytics or advertising.
Alongside cookies there are similar technologies: localStorage, sessionStorage, pixel tags (Facebook, LinkedIn). They are covered by this same policy.
2. Categories
2.1 Technically necessary (no consent)
Without them the site doesn't work. Legal basis — legitimate interest (GDPR Art. 6(1)(f)).
| Name | Purpose | Term |
|---|---|---|
cookie_consent | Stores your choice in the cookie banner | 12 months |
__cf_bm | Cloudflare bot management — protection from bots | 30 min (rolling) |
cf_clearance | Cloudflare CAPTCHA challenge token | 30 days |
2.2 Analytics (no cookies — privacy-first)
We use Umami — open-source analytics, server-side, with IP anonymization. It sets no cookies, doesn't identify users, and doesn't pass data to third parties. Consent isn't required because there is no persistent identifier (recital 47 GDPR).
Collected: device type, country (without city), traffic source, pages viewed. Everything is aggregated.
2.3 Tracking & Marketing (only with consent)
Legal basis — consent (GDPR Art. 6(1)(a)). By default they are not loaded. They activate only after a click on «Accept» in the banner. You can withdraw consent at any time via the «Cookie settings» link in the footer.
| Cookie / Service | Purpose | Term |
|---|---|---|
| Google Tag Manager + Google Analytics 4 | ||
_ga | Unique user ID (GA4) | 2 years |
_ga_<ID> | GA4 session state | 2 years |
_gid | Distinguishing users (legacy GA) | 24 h |
| Meta (Facebook) Pixel | ||
_fbp | Browser identification for retargeting | 90 days |
_fbc | Last click on a Facebook ad | 90 days |
| LinkedIn Insight Tag | ||
bcookie | LinkedIn Browser ID | 1 year |
lidc | Routing for LinkedIn | 1 day |
li_sugr | Probabilistic ID for retargeting | 90 days |
UserMatchHistory | LinkedIn ad sync | 30 days |
AnalyticsSyncHistory | Sync of LinkedIn GDPR consent | 30 days |
3. How to manage consent
- Cookie banner — appears on the first visit. You can choose «Accept all» or «Only necessary».
- Changing your choice — the «Cookie settings» button in the footer (reopens the banner).
- Browser — in your browser settings you can block cookies entirely or by domain.
- Do Not Track — we respect the DNT signal: if it's set, we don't load tracking pixels at all.
4. Third-party services
When you give consent, data is passed to:
- Google LLC (US/EU) — GA4 / GTM. Standard Contractual Clauses (SCCs).
- Meta Platforms Ireland (EU) — Facebook Pixel.
- LinkedIn Ireland (EU) — Insight Tag.
- Cloudflare (US/EU) — mandatory (hosting + bot mitigation), DPA in force.
Each of these services may have its own cookies. Details are in their privacy policies. I don't control these cookies directly, but I do control whether the service loads.
5. Google Consent Mode v2
The site uses Google Consent Mode v2 (default-denied). This means: before your consent, GA4/Ads collects only cookieless pings (aggregated statistics without identification). After consent — full trackimg with cookies.
6. Changes to the policy
If we add a new tracking service or change a retention period — we'll update this page and show the banner for 30 days. The date of the last update is at the top of the page.
7. Questions
Technical or legal questions — write to hello@amaryasov.expert. Standard reply time — 7 days.
The Cookie Policy is part of the Privacy Policy. If something in the documents contradicts each other — the Privacy Policy takes priority.