Cookies and technical tools policy
Last updated: 13 September 2026.
1. Scope
Cookies are small records a website or its providers may store in your browser. Similar technologies include localStorage and sessionStorage and may store or read information on a device without cookies. Absence of cookies does not necessarily mean absence of personal-data processing or device-access requirements.
The operator is Tillerstone, LLC, contact contact@tillerstone.eu. Our Privacy policy explains personal-data purposes, legal grounds and rights.
2. Use on this website
Optional Google Analytics 4 measures site use and enquiry journeys only after you accept analytics. Before acceptance, including after an initial rejection, the Google analytics tag is not loaded. Withdrawal stops further analytics collection even if the tag is already present in the page. We do not use advertising trackers, social-media pixels, embedded third-party videos or marketing profiling. Fonts and images are served from website resources. Our code does not save form fields in localStorage or sessionStorage. Contact details and free-text form content are not sent to Google Analytics; the limited enquiry-event metadata is described in the Privacy policy.
When enquiries are available, Cloudflare Turnstile loads automatically for the active form on the homepage and on project pages with an enquiry form. Switching enquiry tabs starts the check for the selected form. Turnstile analyses browser and network security signals to distinguish people from automated abuse. Cloudflare may process IP address, User-Agent, TLS fingerprint, sitekey and origin. Its notice explains roles and signal use.
3. Technology inventory
Table — scroll horizontally if needed
| Technology / name | Provider | Purpose | Duration / location | Category |
|---|---|---|---|---|
| tillerstone.analytics-consent.v1 | Tillerstone | Remember acceptance or rejection, version and expiry; no form fields | First-party localStorage. The choice is valid for 180 days; an expired or superseded record is ignored but may remain until replaced or cleared in the browser | Necessary consent preference; no separate opt-in |
| _ga | Google Analytics | Pseudonymous browser identifier for usage statistics | First-party cookie, configured for 180 days from creation; browser limits may shorten this | Optional analytics; consent required |
| _ga_NKE9G2PHB5 | Google Analytics | Analytics session/state identifier | First-party cookie, configured for 180 days; expiry can renew with activity. The analytics choice has its own expiry | Optional analytics; consent required |
| cf.turnstile.u | Cloudflare | Verification-related security record used by Turnstile | Third-party localStorage at challenges.cloudflare.com. Persistent, with provider-controlled deletion and no site-set expiry; it can be removed through browser site-data controls | Security, separate from analytics; the necessary-use exception is subject to applicable law |
| Verification token and submissionId | Tillerstone / Cloudflare | Validate a form and prevent duplicate delivery | Page memory until reset, closure or reload; server retention is described in the Privacy policy | Function / security |
4. Your choices
Optional technologies requiring consent run only after your voluntary choice. Technologies strictly necessary for the service you request may operate without that consent where applicable law permits the exception. Legitimate interests for personal-data processing do not replace device-access consent where required.
The analytics prompt offers equally prominent Accept analytics and Reject analytics buttons. No optional choice is preselected. Continued browsing, scrolling or dismissing the prompt does not grant consent. You can change your choice at any time using Analytics settings in the footer. Rejection does not prevent navigation, catalogue use or enquiries. Withdrawal stops future analytics collection and removes accessible Google Analytics cookies on this site; it does not delete data already received by Google. The choice expires after 180 days. Without a current valid choice, analytics stays blocked and the prompt is shown when you next load a page. Expiry of a choice does not by itself erase every browser record. If browser storage is unavailable, the choice applies only on the current page and you may be asked again.
You may also manage browser records in browser settings. Blocking security tools may prevent form submission; contact contact@tillerstone.eu instead, without attaching confidential documents to an initial email.
5. Changes
We update this policy when the website’s technical tools or their use change. The date above identifies the latest revision. If a change materially alters the optional processing covered by your choice, we provide the new information and obtain any fresh consent required before that changed processing starts.