Cookie Policy

This site runs on HubSpot CMS and sits behind Cloudflare. Both set cookies, and between them they account for every cookie observed on this site. There is no Google Analytics on this site, no advertising pixel and no social tracking pixel: a browser session on the home page and the contact page was inspected and none were present.

A consent banner is served on first visit. Your answer to it is what decides whether the analytics cookies in section 3 are set.

These are set by Cloudflare to keep the site available and to tell human traffic from automated traffic. They are not used to build a profile of you and they cannot be turned off without breaking the site.

• __cf_bm — bot management. Short-lived, and set separately for each host the page talks to.
• _cfuvid — used by Cloudflare rate limiting. It is a session cookie and is discarded when you close the browser.

These record how the site is used so we can see which pages are read. They are the ones the consent banner governs.

• __hstc — the main HubSpot analytics cookie. It records the visit and where you arrived from.
• hubspotutk — an identifier for the browser, used to tie a form submission to the visits that led to it.
• __hssrc — records whether this is a new browser session. It is discarded when you close the browser.
• __hssc — tracks the current session so that a return visit is not counted twice.

HubSpot publishes its own description of what each of these holds and how long it lasts, and that document is authoritative over this summary.

Not everything a page fetches is a cookie, but a request to another host tells that host your IP address, so it is listed here too. These are the hosts a page on this site contacts:

• fonts.googleapis.com and fonts.gstatic.com — the typefaces.
• code.jquery.com — jQuery, requested only when the portal is not already providing it.
• js-eu1.hs-analytics.net, js-eu1.hs-banner.com, track-eu1.hubspot.com — HubSpot analytics and the consent banner.
• forms-eu1.hsforms.com, js-eu1.hsforms.net, forms-eu1.hscollectedforms.net, js-eu1.hscollectedforms.net — the forms, and only on pages that carry one.
• app-eu1.hubspot.com — HubSpot application endpoints.

The icon library and the map are served from within the theme or from the library CDN you select in theme settings; on this site the icons come from Google Fonts along with the typefaces.

On this site

The consent banner records your choice. Clearing this site from your browser data brings the banner back, and you can answer it differently.

In your browser

Every current browser can block or delete cookies for a single site from its settings, usually under Privacy or Site settings. Blocking the strictly necessary cookies in section 2 will make parts of the site stop working; blocking the analytics cookies in section 3 will not.

Asking us

Write to hello@studionope.com and we will tell you what is held against your browser identifier, or delete it.

This list was measured on a specific day, named at the top of the page. Adding a form, an embed or a new integration can add a cookie without anyone editing this page, so if you find one here that is not listed, that is a defect in this document and we would like to know: hello@studionope.com.