Cookie policy

A cookie is a small text file that a website stores in your browser to remember information between visits. Alongside cookies there are similar technologies, such as browser local storage, that serve comparable purposes.

In this policy we use the word “cookies” to refer to all of those technologies.

In Colombia, setting cookies that process personal data requires the data subject's prior, express, and informed consent, under Law 1581 of 2012 and Decree 1074 of 2015.

On your first visit we show a notice where you can accept or reject the cookies that are not strictly necessary. Two things happen before you answer, and we would rather write them down than let you discover them: HubSpot's analytics script loads with the page and places the four cookies listed below, and Google Analytics runs in a cookieless mode that stores nothing and identifies no one. Until you accept, we instruct HubSpot not to use its cookies for analytics. Everything else — Google Analytics' own cookies, and session recording — does not load at all until you accept. You can change your answer at any time from “Cookie settings” in the footer, and you can delete the cookies from your browser.

We keep the site deliberately light. These are the categories we apply:

• Strictly necessary: we store your cookie decision in your browser's local storage (key “novieri-consent”) so we don't ask again on every visit. It does not identify individuals and is not shared with third parties.
• Analytics and measurement (Google Analytics): we load Google Analytics 4 in consent mode. Until you accept it runs without cookies and without identifying you — it only allows an estimate of how many people visit. If you accept, it sets Google's own cookies and we can see which pages get read and where people arrive from, in aggregate, to improve the content rather than to profile anyone.
• Session recording and heatmaps (Microsoft Clarity): if you accept them, we load Microsoft Clarity, which anonymously records how the page is used — clicks, scrolling and the path through it — and builds heatmaps and session replays. That goes further than aggregate figures, so we say it plainly: anything you type into a form or the chat is masked and not recorded, and we use the replays to find where the page stalls, not to identify you.
• CRM and attribution (HubSpot): HubSpot's script loads with the page, before you answer the notice, and sets the __hstc, hubspotutk, __hssc and __hssrc cookies. The first two last about six months and recognise your browser between visits; the other two cover the current session. They let us link a form you submit to the pages you read beforehand, so we know which content was useful. Until you accept, we instruct HubSpot not to use them for analytics; if you reject, that instruction stands. The forms work either way — they simply arrive without that history.
• Form security (Google reCAPTCHA): when you start typing in the contact form or the self-diagnosis we load reCAPTCHA v3, which analyzes session behavior to tell people from bots and may set Google cookies. It is a strictly necessary security measure that keeps those forms usable; without it we cannot keep them working. Google's Privacy Policy and Terms of Service apply.
• Third-party functional: when you open meeting scheduling or the WhatsApp chat, the relevant provider may set its own cookies in your browser, subject to its policies.
• Advertising: we do not use advertising or cross-site tracking cookies.

You can change your choice at any time from the “Cookie settings” link in the footer: the notice opens again and you can decide anew. Clearing this site's data in your browser has the same effect.

You can also configure your browser to block or delete cookies. Note that blocking strictly necessary ones may affect how the site works. The major browsers explain how to do this in their privacy help pages.

When you use features provided by third parties — meeting scheduling, WhatsApp, or embedded content — those providers act as controllers of the cookies they set and of the processing they carry out. We recommend reviewing their respective privacy and cookie policies.

Where a cookie processes personal data, our personal data processing policy also applies, including your rights as a data subject and the channels to exercise them.

If you have questions about this policy, write to privacy@novieri.com.