Cookie Notice

Last Updated: November 11, 2025

Summary: This website uses minimal, privacy-respecting cookies and tracking technologies. We use Supabase for authentication and backend services, Umami for privacy-friendly analytics (which can operate without cookies), and Cloudflare for security and performance. We do not use advertising cookies or share your data with third parties for marketing purposes.

For more information about how we handle your personal data, please see our Privacy Policy.

What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They help the website remember information about your visit, which can make your next visit easier and the site more useful to you.

How We Use Cookies

Our website uses cookies and similar technologies for the following purposes:

1. Essential Cookies

These cookies are necessary for the website to function properly and cannot be disabled in our systems.

Cookie NameProviderPurposeDuration
sb-access-token
sb-refresh-token
SupabaseAuthentication - stores your login session and maintains your authenticated state across pagesAccess: 1 hour
Refresh: 30 days (or as configured)
__cf_bmCloudflareBot management - distinguishes between humans and bots to protect against malicious traffic30 minutes
cf_clearanceCloudflareStores the result of security challenges to avoid repeated checks during your session1 year (or as configured)

2. Analytics Cookies (Optional)

We use Umami Analytics to understand how visitors use our website. Umami is a privacy-focused analytics solution that:

  • Does not collect personal data
  • Does not use cookies by default (cookieless tracking)
  • Does not track users across websites
  • Anonymizes all data collected
  • Is GDPR compliant by design
TechnologyProviderPurposeDuration
Umami AnalyticsSelf-hosted/UmamiCollects anonymous usage statistics: page views, referrers, browser type, device type, and country (derived from IP address which is not stored)No persistent cookies - session-based only

3. Performance and Security Cookies

Cloudflare provides security, performance optimization, and DDoS protection for our website:

Cookie/TechnologyProviderPurposeDuration
__cflbCloudflareLoad balancing - ensures reliable website performance by distributing trafficSession or 1 day
__cfruidCloudflareRate limiting - prevents abuse by limiting requests from a single sourceSession

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have certain rights regarding your personal data:

  • Right to Access: You can request information about the data we process
  • Right to Rectification: You can request correction of inaccurate data
  • Right to Erasure: You can request deletion of your data
  • Right to Object: You can object to processing of your data
  • Right to Data Portability: You can request transfer of your data
  • Right to Withdraw Consent: You can withdraw consent at any time

Managing Your Cookie Preferences

You can control and manage cookies in several ways:

Browser Settings

Most web browsers allow you to control cookies through their settings. You can set your browser to:

  • Block all cookies
  • Accept only first-party cookies
  • Delete cookies when you close your browser
  • Notify you when a website tries to set a cookie

Opt-Out of Analytics

To opt out of Umami analytics tracking, you can:

  • Enable "Do Not Track" in your browser (we respect DNT signals)
  • Use browser extensions that block analytics scripts
  • Contact us to request exclusion from analytics

Note: Blocking essential cookies may impact the functionality and security of the website. Cloudflare's security cookies are necessary to protect against malicious attacks and ensure the website remains available.

Data Retention

  • Cloudflare cookies: Automatically expire as indicated in the tables above
  • Umami analytics data: Aggregated anonymous data retained for statistical purposes; no personally identifiable information is stored

Third-Party Services

This website uses the following third-party services:

International Data Transfers

Your data may be processed on servers located outside your country of residence. We ensure that appropriate safeguards are in place for such transfers in accordance with GDPR requirements.

Children's Privacy

Our website is not directed at children under 16 years of age, and we do not knowingly collect personal data from children.

Changes to This Cookie Notice

We may update this Cookie Notice from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

If you have questions about this Cookie Notice or our privacy practices, please contact us at:

WildWavyStudio

Address: Sint Maartenslaan 36A, 6221 AZ Maastricht

Email: [email protected]

Chamber of Commerce number (KVK): 91911435

VAT ID: NL004923965B02

Legal Basis for Processing: Our use of essential cookies is based on legitimate interests (Article 6(1)(f) GDPR) for security and functionality. Analytics cookies are based on consent or legitimate interests for improving our services, and you can opt out at any time.