Cookie Policy

Cookies are small text files that a website asks your browser to store. Similar mechanisms include localStorage and sessionStorage. They can be "essential" (needed for the site to function) or "non-essential" (analytics, advertising, tracking) — the latter generally require informed consent in the EU under ePrivacy and GDPR.

Norvalda uses essential storage only. None of it requires consent under EU law.

• NEXT_LOCALE (cookie, 1 year): remembers which of our six site languages you chose, so you don't have to re-pick on every visit.
• theme (localStorage, persistent): remembers your light/dark preference if you change it.
• Session security tokens (HTTP-only, session-scoped): set by our hosting platform to mitigate CSRF on form submissions.

We have made a deliberate choice not to deploy:

• Advertising or retargeting pixels (no Meta Pixel, no Google Ads, no LinkedIn Insight Tag).
• Cookie-based third-party analytics requiring consent (no Google Analytics, no Hotjar, no session replay). The cookieless analytics we do use are described under "Analytics" below.
• Social network embeds that drop cookies on page load.
• Marketing automation cookies, lead-scoring pixels or chat widgets with tracking.

This is why you do not currently see a cookie consent banner: there are no non-essential cookies to consent to. The analytics we do run (see below) are cookieless. If we ever introduce advertising or analytics cookies, this page will be updated and a consent banner will be shown before any such cookie is set.

We measure traffic with Vercel Web Analytics and page performance with Vercel Speed Insights. Both are cookieless: they set no cookies, read nothing from your device storage and create no persistent device identifier, which is why neither requires consent under the ePrivacy rules.

They do process request metadata (including your IP address and user agent) on the infrastructure of our hosting provider, Vercel Inc. (USA), in order to derive aggregated page views, referrers, approximate country and performance timings. We rely on our legitimate interest in understanding and maintaining site performance (Art. 6(1)(f) GDPR). See the Privacy Policy for the full list of sub-processors and your rights.

You can clear or block cookies at any time via your browser settings:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

Blocking essential cookies may cause language and theme preferences not to persist between visits.

Questions about cookies or this policy: office@norvalda.com.