Effective 31 March 2026 · Works alongside the Privacy Policy for personal data questions.
Why this policy exists
European ePrivacy rules expect clear information before storage or reading of data on your device, with limited exceptions for strictly necessary operations. Consumers should be able to refuse overlays that only serve analytics or ads without losing essential navigation. Our banner is the operational expression of that principle.
Browsers increasingly phase out third-party cookies; we design for first-party analytics where possible and revisit this text when industry defaults shift again.
Definitions you will see elsewhere
Cookie: small text file placed through HTTP headers or JavaScript APIs. Local storage: larger key-value persistence unless the user clears site data. Pixel: invisible image request that logs a visit event. Fingerprinting: combining signals to guess identity without cookies; we do not rely on invasive fingerprinting for marketing on this Site.
When we say “similar technologies,” we include SDKs inside mobile webviews if you open our pages from a social in-app browser—those environments may inject additional storage beyond our control.
Who is responsible
Chivrealdlox, Marnixstraat 168, 1016 TG Amsterdam, Netherlands, determines why essential cookies exist and which optional partners may fire after consent. Contact touch@chivrealdlox.world or call +31 20 623 1051.
Joint controllership could emerge if we run co-branded campaigns; cookie banners would name both parties before activation.
Strictly necessary cookies and storage
These items are required to honour your privacy choices themselves, maintain signed-in administrator sessions if we add CMS previews later, rotate security tokens, balance load, or comply with DDoS scrubbing. They do not build marketing profiles.
Our consent memory currently relies on local storage keys such as thisdomaindontexist123_cookie_prefs containing booleans for necessary, analytics, and marketing approval. Clearing browser data resets that memory and may resurface the banner.
Typical lifetime
Between six and twelve months from the last interaction, refreshed whenever you change settings so we can prove compliance timelines during audits.
Analytics cookies
When you opt in, vendors may set pseudonymous visitor IDs, session IDs, or performance beacons capturing page timings, device class, approximate geography from IP truncation, scroll milestones, and error logs. Purposes include prioritising engineering fixes and understanding which lifestyle topics need clearer navigation.
We discourage “full IP” retention. If a vendor defaults to full storage, we enable masking as soon as the product exposes it. Aggregated dashboards hide individual journeys from day-to-day editors.
Example metrics. Unique visitors per week, average time on Sustainability-of-routine articles, exit pages.
Not for. Selling raw clickstreams to brokers or re-identifying people offline.
Marketing cookies and pixels
With explicit consent, partners may attribute visits to campaigns, cap frequency of creative exposure, build remarketing audiences inside their platforms subject to their policies, and measure conversions from newsletter clicks. Disabling this category does not unsubscribe you from emails you already requested separately.
Some social networks preload widgets if we embed them; we prefer static screenshots with outbound links unless a live embed is materially better for readers.
From acceptance to withdrawal
First visit
Banner loads, necessary storage initializes, optional scripts stay blocked until consent.
Choice saved
JSON preference snapshot with timestamp, version string of policy URL.
Later change
Reopen settings via future footer link if implemented; currently revisit banner state by clearing storage.
Withdrawal
Reject or toggle off categories; we stop firing new tags aside from necessary maintenance.
How to exercise control beyond our UI
Browsers let you block third-party cookies globally, delete data on close, or install privacy extensions. OS-level limit ad tracking on phones may sever IDFA-style links. Industry pages such as YourOnlineChoices (EDAA) list participating ad companies for opt-out sweeps.
Blocking all cookies may break consent memory; you might see repetitive banners—an acceptable trade-off for users who prefer maximal isolation.
Relationship with personal data
Where cookie identifiers relate to an identifiable individual, GDPR rights described in the Privacy Policy apply. You may request access to logs tying an IP to your household or deletion of pseudonymous keys, subject to technical feasibility and overriding law.
Change log mindset
We will bump the effective date when categories, partners, or retention materially shift. For minor clarifications, footnotes may suffice. Major migrations—such as replacing an analytics vendor—will be noted here and, when practical, echoed in the consent modal text.