Privacy

Short version

This site does not run analytics, ad pixels, or trackers. It does not profile you. It loads a few external resources for fonts and meeting scheduling, and the host (Cloudflare + Lovable) sets two technical cookies. Details below.

What is NOT happening on this site

• No Google Analytics, Tag Manager, Meta Pixel, LinkedIn Insight Tag, Hotjar, Clarity, Plausible, Fathom, or any analytics service
• No advertising, retargeting, or behavioural profiling
• No cookie banner, because there is nothing to consent to beyond the strictly-necessary host cookies described below
• No fingerprinting scripts written by me

Cookies set when you visit

Two technical cookies are set automatically by the hosting layer. I do not write them and they are not used for analytics:

• __cf_bm — set by Cloudflare for bot detection. Lifetime: 30 minutes.
• __dpl — set by Lovable (the host) to route you to a specific deployment. Lifetime: 7 days.

I cannot turn these off without changing the hosting stack. They contain no data I can read or use.

Local storage

When you switch language with the EN | NL toggle, your choice is saved in your browser's localStorage under the key vlotai.lang. This stays on your device, is never sent to any server, and only exists so the site remembers your preference.

Third-party resources loaded by the site

• Google Fonts — typography is loaded from fonts.googleapis.com and fonts.gstatic.com. Google sees your IP address and user-agent each time the fonts load. No cookies are set.
• Cal.com embed — the booking widget on the Contact page is an iframe from cal.com. When you reach that section, Cal.com loads inside the iframe and may set its own cookies and run its own scripts within that frame. See cal.com's own privacy policy.
• LinkedIn link — the LinkedIn link in the footer is a plain link. Nothing from LinkedIn loads until you click it.

Contact form

When you submit the contact form, the data you typed (name, email, subject, message) is sent to a Make.com webhook in the EU, which forwards it to my inbox. Make.com sees the payload and your IP address at the moment of submission. Nothing is sent until you press Send. There is no reCAPTCHA or third-party anti-spam loaded on the page.

Server logs

Cloudflare and Lovable keep standard access logs (IP, user-agent, path, timestamp) for security, abuse prevention, and operating the service. I don't aggregate, profile, or analyse those logs. I cannot identify you from them.

Your rights

Under the GDPR you have the right to access, correct, or delete any personal data I hold about you, and the right to object to processing. The only personal data I store is what you actively send via the contact form. Email me to exercise any of these rights.

Contact

Questions about privacy on this site? Reach me through the contact form or via LinkedIn.