Cookie notice

Necessary services and preference storage

The portfolio does not need Analytics to work. We store your choice in localStorage under codewave-consent, including the notice version, choice and time. It expires after 180 days (about six months), when we ask again. This preference storage is necessary to remember your privacy choice; it is not used for tracking. Old unversioned codewave-analytics preferences do not count as consent.

Firebase App Check / reCAPTCHA Enterprise starts only when submitting a valid contact form, not when browsing or accepting analytics. Google documents a _GRECAPTCHA security cookie when reCAPTCHA executes; browser settings can block it. Email is an alternative to the form.

Contact security uses _grecaptcha in localStorage, firebase-app-check-database and firebase-heartbeat-database in IndexedDB, and a firebase:host: entry that caches the database hostname in localStorage. These store security tokens, SDK metadata and connection settings, not audience measurements. App Check tokens are valid for one hour; expiry does not automatically erase all stored records. Storage may remain until cleared through browser site-data controls, and Google controls its own security-cookie lifetime and scope.

Optional Google Analytics

If configured and accepted, Google Analytics loads from googletagmanager.com and sends visit measurement to Google. First-party _ga and _ga_<property> cookies distinguish browsers and sessions. The site requests a 180-day cookie lifetime without automatic renewal; Google may use shorter session storage. We use Analytics solely for audience measurement, not advertising. No Analytics script, cookie or consent-mode measurement ping is sent before opt-in.

Accept and reject are equally available. There is only one optional purpose: analytics. You can reopen preferences or withdraw in one click in the footer. Withdrawal disables collection, removes accessible _ga and _gid cookies across the current host’s parent domains and reloads the page to unload Analytics. It does not delete measurements already received by Google. Browser privacy controls may also block or clear storage.

Scope and changes

This inventory describes the integrations in this website, not cookies on external sites opened from its links. Google’s security implementation may change; consult its linked documentation. A material change to the analytics notice requires a new consent version. Refusal never blocks portfolio access or requires acceptance for contacting CODE WAVE.