Cookie Policy
Last updated Draft, pending legal review
DRAFT for legal review. Prepared from the ePrivacy Directive (2002/58/EC) as transposed into Portuguese law by Law no. 41/2004, and the GDPR. Not legal advice; must be validated by a qualified lawyer and, critically, matched to the cookies your site actually sets. Every [PLACEHOLDER] needs a real value.
Last updated: [DATE]
What cookies are
Cookies are small text files stored on your device when you visit a website. Similar technologies (such as local storage and pixels) work in comparable ways. This policy explains which we use and your choices.
Our approach to cookies
Under Portuguese law (Law no. 41/2004) and the GDPR, we may only place cookies that are not strictly necessary with your prior, informed consent. Strictly necessary cookies, which are required for the site to function, do not require consent.
Because our analytics is cookieless and we set only strictly necessary cookies, the consent banner mainly records your acknowledgement and any future non-essential cookies. You can change or withdraw your choices at any time [PLACEHOLDER: describe how the platform's built-in consent mechanism lets users change choices — e.g. a "cookie settings" link in the footer. Match to what the platform actually provides.]
Cookies we use
We keep cookies to a minimum. Our website analytics (Umami) is cookieless: it does not set cookies or track you across sites, so it requires no consent. The cookies we do set are limited to those needed for the site to work and to remember your cookie choices.
[PLACEHOLDER: confirm this list against the site's actual behaviour before publishing. If, as expected, the only cookies are strictly necessary, state plainly that no non-essential cookies are set, which is the simplest and strongest position.]
Strictly necessary (no consent required)
| Cookie | Purpose | Duration |
|---|---|---|
| [PLACEHOLDER: consent-preference cookie set by the platform's cookie banner] | Stores your cookie choices | [PLACEHOLDER] |
| [PLACEHOLDER: Cloudflare Turnstile / security, if it sets one] | Protects forms from automated abuse | [PLACEHOLDER] |
Non-essential cookies: we currently set none. Our analytics (Umami) is cookieless. [PLACEHOLDER: confirm; if any non-essential cookie is ever added, it must be gated behind consent and the consent logged.]
Cloudflare Turnstile
We use Cloudflare Turnstile to protect our forms from automated abuse. [PLACEHOLDER: confirm whether Turnstile sets a cookie or uses other client-side storage, and whether it is classified strictly necessary (security) or requires consent. Turnstile is designed to be privacy-preserving and is generally treated as strictly necessary for security, but confirm against Cloudflare's current documentation and with your lawyer.]
Managing cookies in your browser
Most browsers let you refuse or delete cookies through their settings. Blocking strictly necessary cookies may affect how the site works. Browser help pages explain how to manage cookies for [PLACEHOLDER: or link to common browser instructions].
More information
For how we handle personal data generally, see our Privacy Policy. Questions: info@stonify.net.