Cookie and Storage Policy
Last updated: 5 August 2026 · Version 1.0
1. The honest summary
This site does not ask you to accept cookies, because there is nothing to accept.
We use no analytics cookies, no advertising cookies and no tracking of any kind. This site sets no cookies at all. The only thing stored on your device is the one item in section 4, and it is stored only if you ask for it by pressing the theme switch. Under Article 4(5) of Romanian Law no. 506/2004, storage that is strictly necessary to deliver a service you asked for does not require your consent.
So there is no banner. A banner that only ever says "we use essential cookies, click OK" teaches people to click OK without reading. We would rather write the list down and let you read it.
The list is in section 4, and in Annex C at the end of this page.
2. What a cookie is, briefly
A cookie is a small file a website asks your browser to keep. localStorage is a similar place your browser keeps small values. Both let a site remember something between page loads.
The law does not care what the technology is called. It cares whether something is stored on your device or read from it. So this page covers cookies, localStorage, sessionStorage and anything similar. Where this page says "storage", it means all of them.
3. The two categories, and where we sit
| Category | Needs your consent? | Do we use any? |
|---|---|---|
| Strictly necessary — the site cannot deliver what you asked for without it, including basic security | No | Yes — the one in section 4 |
| Everything else — analytics, measurement, advertising, personalisation, third-party embeds | Yes, before it is set | No. None. |
We have no third-party category because we have no third-party scripts.
4. Everything stored on your device
The complete inventory, with names and durations, is in Annex C at the end of this page. In words:
From us, first party
- Your colour theme. If you press the light/dark switch in the header, we remember which one you chose, so the site does not flip back on the next page. It is a preference you set yourself, so it is covered by the strictly-necessary exemption. It stays on your device, it is never sent to us, and it says nothing about you. Nothing is written until you press the switch — on a first visit this site stores nothing at all.
From Cloudflare, our hosting provider
Nothing today. Cloudflare sets a security cookie such as __cf_bm, _cfuvid or cf_clearance only when the matching protection is active on a site. We opened the live site with clean storage on 5 August 2026 and no Cloudflare cookie was set. If one of those protections is ever switched on, we name the cookie here and in Annex C before it goes live, and we treat it as strictly necessary — it carries no advertising identifier and it does not follow you to other sites.
Not used at all
No analytics cookie. No advertising cookie. No _ga, no _fbp, no _gcl_au, no LinkedIn cookie, no embedded video cookie, no font-CDN request. Nothing is loaded from a third-party domain.
5. Bot protection on the form
The contact form is protected by three checks, and not one of them stores anything on your device: a field that is hidden from people and that only an automated tool fills in, a check that the form was not submitted implausibly quickly, and a limit on how many messages can arrive from one place inside ten minutes. The limit is counted against a one-way hash of your IP address; the address itself is not stored.
There is no CAPTCHA on this site and no bot-challenge widget of any kind. A challenge widget would mean a request to somebody else’s server, which is the one thing this site does not do.
If we ever add a visible anti-bot challenge to the contact form, it will set storage of its own, and this page will be updated to name it before it goes live.
6. Controlling storage yourself
Every browser lets you see, block and delete cookies and site storage. Look for "Privacy", "Cookies" or "Site settings" in your browser’s preferences.
If you block everything from noveam.net:
- the site still works and every page still reads normally;
- your colour theme follows your operating system’s light/dark setting instead of the one you chose;
- the contact form still works, because it does not use storage at all.
We do not use a cookie wall. Nothing on this site is hidden behind accepting storage.
7. If this ever changes
If we add anything that is not strictly necessary — measurement, an embed, anything at all — then, before it loads for the first time:
- we publish it on this page, with its name, purpose and duration;
- we build the consent gate described in our internal specification;
- nothing in the new category runs until you have actively agreed to it;
- refusing stays exactly as easy as agreeing;
- you can change your mind at any time from a permanent link in the footer.
Until that happens, there is nothing to switch on or off, and this page says so rather than showing you a control that does nothing.
8. Contact
Questions about anything on this page: [email protected]
Annex C (the storage inventory) is published as part of this page. It is below.
Annex C — Cookie and storage inventory
Every entry below is strictly necessary. There is no second table, because there is no second category in use. There is one entry, and it is not a cookie.
| Name | noveam-theme |
|---|---|
| Type | localStorage |
| Set by | Noveam |
| Purpose | Remembers whether you chose the light or the dark theme, so the site does not reset your choice on every page |
| Category | Strictly necessary — a preference you set yourself |
| Written when | Only when you press the theme switch. Never on a first visit |
| Duration | Until you clear your browser’s site data |
| Party | First party |
Checked, not assumed. On 5 August 2026 the published site was opened with clean storage and browsed, including the contact page and this page. No cookie was written, by us or by Cloudflare. No sessionStorage key was written. The only key localStorage can ever receive is the one above, and only if you press the theme switch. This is the one check anyone can repeat in thirty seconds, which is why it is stated as a date and a result rather than as a promise.
Explicitly not present: _ga, _gid, _gat, _fbp, _fbc, _gcl_au, li_sugr, bcookie, _hjSession*, ajs_*, intercom-*, or any equivalent. No request is made to any third-party domain, including font, script, image and video CDNs.