Cookie policy

A cookie is a small file a website stores in your browser so it can remember something between page loads. Some are strictly necessary for a site to function. Others measure how a site is used. Others exist to profile you and sell that profile. We use the first kind, we ask before we use the second, and we do not touch the third.

These are placed without asking, because the law does not require consent for them and the site cannot do its job without them. There is nothing to switch off.

• NEXT_LOCALE. Ours. Functional. Set when you switch the site language with the EN / NL toggle, so the site keeps showing you the language you picked. It holds nothing but the language code. Expires after one year.
• ohlord-cookie-consent. Ours. Not strictly a cookie: it is a small record stored in your browser's local storage, holding only your answer to this banner and the date you gave it. Without it we would have to ask you on every single page. It lapses after twelve months, and clearing it makes the banner ask again.
• Cloudflare Turnstile. Third party. Our contact form and booking form run a Turnstile check to confirm a human is filling them in. Turnstile may place its own strictly necessary cookies or store a token in your browser while that check runs. It exists to block bots, not to profile you, and Cloudflare states that it does not use it for advertising. Cloudflare also delivers the site itself and may set strictly necessary cookies for security and load balancing.

We use Google Analytics 4 (Google Ireland Limited) to see which pages get read, where visitors arrive from, and roughly where in the world they are. It runs with advertising features and data sharing switched off, and with IP addresses truncated. It is how we decide what to write next, not who to chase.

None of it loads before you accept. Until then, the Google script is never fetched, no request is made to Google, and no analytics cookie exists in your browser. If you refuse, it stays that way. If you accept, these are placed:

• _ga. Google Analytics. A randomly generated number that lets Google Analytics tell one browser from another, so a returning visitor is not counted twice. It carries no name, no email address and nothing you typed. Expires after two years.
• _ga_DXQKVTSN24. Google Analytics. Holds the state of your current visit, so a session is measured as one visit rather than a string of unrelated page loads. Expires after two years.

Google Analytics also uses Consent Mode, which means that before you decide, every storage signal is set to denied. Your decision flips the analytics signal, and nothing is measured retroactively. The three advertising signals stay denied either way: Google's advertising features are switched off on our property and the Meta pixel below is not a Google tag.

We advertise this studio on Facebook and Instagram. The Meta pixel (Meta Platforms Ireland Limited) is the piece that tells Meta you visited this site, so that our ads can later be shown to people who have been here rather than to everyone in the country. That is the whole purpose: reaching a smaller, more relevant group with a small budget.

It is bundled with the analytics choice — one switch covers both, because both exist to make the same decisions about where our work goes. Nothing loads before you accept: connect.facebook.net is never contacted, no request reaches Meta and no pixel cookie exists in your browser. Refuse, and it stays that way. Accept, and this is placed:

• _fbp. Meta. A randomly generated identifier for your browser, so Meta can tell that the person who saw our ad is the same browser that visited the site. It carries no name, no email address and nothing you typed into a form. Expires after three months.

We use it for audiences and reach only. We do not upload customer lists to Meta, we do not send form contents or any data you type, and we run no advanced matching. Meta is an independent controller for what it does with this data; what that means is set out at facebook.com/privacy/policy and facebook.com/legal/terms/businesstools.

To be explicit, because most cookie policies are vague about this:

• no Google advertising features, no Google Signals, no ad personalisation
• no heatmaps or session recording
• no advanced matching, and no customer lists uploaded to Meta
• no profiling beyond the ad audiences described above, and no data sold to anyone

The first time you visit, a banner asks you. Accepting and refusing are one click each, side by side, equally easy. Nothing is ticked in advance and closing the banner without answering counts as a refusal, so silence never turns into consent.

You can change your mind whenever you like. The Cookie settings link at the bottom of every page reopens the banner. Statistics and marketing move together as one switch, so turning it off turns off both. The change takes effect immediately: measurement stops from that moment, and the pixel is not loaded again on any page you open afterwards.

Your answer is remembered for twelve months, after which we ask again. We also ask again if we materially change what runs on this site — which is why everyone was asked again in August 2026, when the Meta pixel was added.

Every browser lets you view, block and delete cookies in its settings. Blocking them here costs you very little: the site will simply forget which language you picked and ask about cookies again. Blocking the Turnstile cookies may stop the contact and booking forms from submitting, since we cannot then tell you apart from a bot.

You can also read what these third parties do with the data: the Cloudflare privacy policy at cloudflare.com/privacypolicy, and how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites. Google offers a browser add-on that opts you out of Google Analytics everywhere, at tools.google.com/dlpage/gaoptout.

How we handle the data you actually send us is covered in our privacy policy. Questions either way: [email protected].