We aim to use as few cookies as possible. The site works without analytics or marketing cookies — those load only after you opt in through the consent banner.
1. Cookie categories
| Category | Purpose | Consent required? |
|---|---|---|
| Strictly necessary | Session integrity, admin authentication, CSRF tokens, cookie-banner consent state, language preference. | No (ePrivacy exemption) |
| Analytics | Google Tag Manager + GA4 — measures aggregate page views, campaign source, basic funnel. IP truncation + no ads personalisation by default. | Yes |
| Marketing | None at this time. | — |
| Bot mitigation | Cloudflare Turnstile token cookie set only when the chat widget loads — required to mint a CAPTCHA token. | No (security exemption) |
2. Specific cookies set
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
synelo-cookie-consent | synelostudio.com | Stores your banner choice so we don't re-prompt | 12 months |
NEXT_LOCALE | synelostudio.com | Remembers your language preference | 12 months |
synelo_admin | synelostudio.com | Admin session (SameSite=Strict, HttpOnly, Secure) | 30 days |
_ga, _ga_* | GA4 measurement — only after consent | 13 months | |
| Turnstile tokens | Cloudflare | CAPTCHA challenge response — only when the chat widget is opened | Session |
3. How to control cookies
- On this site: open the cookie banner via the "Cookie settings" link in the footer — you can change your consent at any time. Withdrawing consent stops new analytics cookies; existing ones expire per the lifetimes above.
- In your browser: all modern browsers let you block, restrict, or delete cookies. Doing so may break parts of the site that depend on strictly-necessary cookies.
- Do Not Track / Global Privacy Control: we honour the GPC signal — when present we treat your session as if you had declined non-essential cookies.
4. Consent Mode v2
Where analytics cookies are loaded after consent, we use Google Consent Mode v2 with all signals defaulted to denied on first load. Only the four granted signals you explicitly select are sent.
5. Email tracking
Outbound email from us does not include open-tracking pixels. Click tracking is also off by default; we annotate any campaign that uses link tracking with a visible note in the email footer.
6. Changes
We post updates here with a new "Last updated" date. If we add a new cookie category we re-prompt for consent.