Cookie Policy

Last updated: 25 September 2026

This policy explains cookies and similar technologies on agalta.be, operated by Doowings BV, trading as Agalta. Read it together with our Privacy Policy.

Our approach

We use necessary website and security technologies and, only with your consent, Cloudflare Web Analytics. We do not use advertising pixels, remarketing tags or cross-site behavioural advertising.

Cookies are small pieces of information stored on your device. Similar technologies include local storage and scripts that access browser information. A service can process information even when it does not set cookies.

Your analytics choice

Choose Accept analytics or Reject analytics in our privacy notice. Both choices allow you to use the website and contact forms. Closing the notice without choosing does not enable analytics.

Use Privacy settings, also available in the footer, to change your choice at any time. Choosing Reject analytics after acceptance withdraws consent and reloads the page to stop the previously loaded analytics script. Withdrawal does not undo measurements already sent before withdrawal.

We remember either choice for 180 days, using the first-party localStorage entry agalta.analytics-consent.v1. It contains the choice, policy version and expiry time, not a visitor identifier. This storage is used only to remember your preference. We ask again after expiry or if you clear browser storage. If JavaScript or preference storage is unavailable, optional analytics remain disabled.

Cloudflare Web Analytics — optional

After acceptance, a Cloudflare script collects page-view and performance measurements, such as page URL, referrer, load timing and device/browser categories. It uses no analytics cookies, localStorage or sessionStorage and does not track you across websites or use analytics fingerprinting. The preference entry described above belongs to Agalta, not Cloudflare analytics.

Cloudflare receives the source IP address through normal network communication and states that it discards it at the nearest data centre, rather than storing it in its core analytics databases or logs. Page-load identifiers relate to a page load, not a persistent visitor identity.

Analytics are not necessary to use our services. We load the analytics script only after acceptance. See Cloudflare’s collection and privacy documentation.

Cloudflare delivery and security — necessary

Cloudflare delivers the website and helps protect against malicious traffic, denial-of-service attacks and abuse. It processes technical request information such as IP addresses and security signals for these purposes, independently of your analytics choice.

Turnstile protects the contact forms against automated submissions. It processes browser/network signals and provides a short-lived verification token, which our server checks before forwarding a message. Tokens expire after five minutes and can be verified only once. Turnstile does not receive the contents of the form fields through its verification widget.

Our Turnstile widget has pre-clearance disabled: it does not set a cf_clearance cookie through Turnstile pre-clearance. Separate Cloudflare security challenges may use security cookies when triggered; those are not analytics consent or advertising identifiers. Security behaviour can vary with the protection applied to a request.

Other external services

Google Fonts: the website loads fonts from Google’s font servers, which receive the technical information needed for the request, including your IP address. These requests are separate from Cloudflare analytics. See Google Fonts privacy information.

Web3Forms: when you submit either contact form, our server forwards the form information to Web3Forms for email delivery. The browser does not load a Web3Forms script or submit directly to it. This is form processing, not analytics, and it occurs regardless of your analytics choice. Our Privacy Policy explains the personal-data processing and international-transfer context.

Cloudflare may also ask browsers to report network failures for diagnostic purposes through HTTP reporting headers. These are technical diagnostics, not advertising or persistent analytics identifiers.

Browser controls and contact

You can clear cookies and local storage through your browser settings. Clearing the preference entry resets your analytics choice; analytics then remain off until you accept again. Browser restrictions can affect security verification; if the contact form is unavailable, email contact@agalta.be.

For privacy questions, email privacy@agalta.be.

Controller: Doowings BV, trading as Agalta, Waterloosesteenweg 260, 1640 Sint-Genesius-Rode, Belgium. Enterprise/VAT: BE 0634.962.988.

We update this policy when the website’s technologies or purposes change. The date above identifies the current version.