Cookie policy
This site sets no analytics cookie unless you accept one. Until you choose, the only thing kept on your device is the record of the choice itself. Below: what that record is, what appears after an acceptance, and how to take it back.
Before you choose, nothing is stored
The banner at the foot of the page is not a formality that runs after the trackers have already loaded. On a first visit the consent script runs before anything else, sets every storage category to denied, and no analytics script is fetched at all. There is no analytics cookie, no measurement identifier and no session recording while you are deciding, and there never is if you decline.
That also means the banner cannot be ignored into compliance. Closing the tab without choosing leaves the site in the same state as a decline: nothing loaded, nothing stored, and the banner asks again next time.
The consent record: cii-consent
The consent record is not a cookie. It is a single entry in this browser's local storage, under the key cii-consent, holding one of two words: granted or denied. It is read on your device to decide whether analytics may load. It is never sent to our server, it is never sent to a third party, and it holds no identifier of any kind.
It is stored per browser and per device. Accepting in one browser says nothing about another one, and a browser in private mode forgets the record when the window closes, which is why the banner appears again there. If local storage is unavailable, the script simply carries on with everything denied.
What is set after you accept
An acceptance loads two tools, and those tools set the cookies below. Nothing here is an advertising cookie and none of it is used to build a profile for advertising.
| Name | Set by | Lifetime | What it is for |
|---|---|---|---|
| _ga | Google Analytics 4 | 2 years | Distinguishes one browser from another so that a returning visit is not counted as a new person |
| _ga_[property] | Google Analytics 4 | 2 years | Holds the session state for this specific property |
| _clck | Microsoft Clarity | 1 year | Keeps the Clarity identifier for this browser |
| _clsk | Microsoft Clarity | 1 day | Joins the page views of a single session into one recording |
| CLID | Microsoft Clarity, on clarity.ms | 1 year | Identifies the browser to the Clarity project the first time it is seen |
| MUID | Microsoft, on clarity.ms and bing.com | 1 year | A Microsoft-wide browser identifier used for measurement and for security |
| ANONCHK | Microsoft Clarity | 10 minutes | Records whether the identifier may be used for advertising, which in our configuration it may not |
| SM | Microsoft Clarity | Session | Synchronises the identifier across Microsoft domains |
The names and lifetimes above are the ones Google and Microsoft publish for these tools. A provider can add or rename a cookie when it updates its script, so treat this table as accurate at the date in the caption rather than as a permanent list. Both providers document their own current lists in their developer documentation.
What the two analytics tools do
Google Analytics 4
Counts visits and pages, groups them by country and device, and shows which pages people arrive on and which they leave from. IP anonymisation is switched on and the property runs under Consent Mode, so the default state before an acceptance is denied for every storage type. We use it to see which pages of a long reference site actually get read, which is what tells us what to write next.
Microsoft Clarity
Records how a page is used: scrolling, clicks and the movement of the pointer, replayed as a session recording, plus heatmaps aggregated across visits. Clarity's default masking is left on, which means text you type into a form is not captured in a recording. We use it to find the places where a page is confusing, usually a table nobody scrolls or a step nobody reaches.
Neither tool is used for advertising, neither one is connected to an advertising account, and no data from either is sold or shared beyond the provider that collects it. There is no advertising pixel of any kind on this site.
Strictly necessary: hosting and the bot check
Two things happen regardless of your choice, because the site cannot be served safely without them, and neither is analytics.
Hosting. The site runs on Cloudflare Pages. Where Cloudflare's protection has to check or challenge a request, it can set a short-lived security cookie of its own, such as __cf_bm or, after a challenge, cf_clearance. Those are set by the host to keep the site available and are not used to measure or profile you.
The bot check. The forms use Cloudflare Turnstile. It runs when a form page is loaded and when a form is submitted, works from your IP address and from browser signals rather than from a tracking cookie, and returns a single-use token that our endpoint verifies. It does not identify you, it is not connected to advertising, and it is not used anywhere else on the site.
What the site's own code stores is limited to the consent record described above. There is no login, no session cookie, no shopping basket and no preference cookie.
How to withdraw or change your choice
There is no account here to sign into and nothing stored on our side, so changing your mind means removing the record from this browser. It takes about twenty seconds.
- Open the site data controls for company-in-italy.com in your browser. In Chrome and Edge that is the icon at the left of the address bar, then the cookies and site data entry. In Safari it is Settings, then Privacy, then Manage Website Data. In Firefox it is the padlock icon, then Clear cookies and site data.
- Clear the data for this site. That deletes the cii-consent entry together with any analytics cookies already set on this domain.
- Reload the page. The banner appears again, and you can choose Decline, which is then remembered in exactly the same way as an acceptance was.
Two things worth knowing. A decline is remembered, and while it stands nothing analytical loads on any page of this site. And deleting the analytics cookies on their own, without deleting cii-consent, will not keep them away: the stored acceptance is the thing that switches them on, so they are set again on the next page you open.
Cookies set on the providers' own domains, such as the Microsoft identifiers on clarity.ms, are removed through your browser's general cookie controls rather than through the site data for this domain, or by the opt-out mechanisms the providers publish. Google publishes a browser add-on that opts a browser out of Google Analytics on every site that uses it.
Withdrawing consent has no effect on anything collected before the withdrawal, which is the ordinary rule under Art. 7(3) GDPR. To ask what was collected, or to have it deleted, write to info@goldblum.ch; the privacy policy sets out the rights and how we answer them.
Browser controls and blockers
Every current browser can block third-party cookies, clear cookies when it closes, or refuse them for a particular site. Any of those work here, and none of them break the site: it is static HTML with a little JavaScript for the menu and the contents rail, and it is fully readable with cookies blocked, with JavaScript restricted, or with a tracker blocker running. Both analytics tools are blocked by the common blocker lists, and if yours blocks them, nothing on this page applies to you at all.
Changes to this policy
This version dates from 10 September 2026. If a tool is added or removed, or a provider changes what it sets, this page changes and the date changes with it. The measurement identifiers themselves are configured at launch, and until they are, the scripts described here load nothing even after an acceptance.
Related: the privacy policy for personal data as a whole, and the terms of use for the site itself.