Last updated 16 November 2025
Cookies & Tracking
Information about the cookies, local storage entries, and analytics signals that power mhlsq.ro. GDPR-compliant with full user control.
Overview
Cookies are tiny text files saved on your device. Under GDPR and ePrivacy Directive, I implement strict consent requirements: essential cookies keep the site online (no consent needed), preference cookies remember your theme choice (legitimate interest), and Google Analytics cookies are only set after you explicitly click "Allow analytics" in the consent banner (opt-in consent). You have full control and can change your preference at any time.
GDPR compliance
This website follows GDPR Article 7 (consent) and ePrivacy Directive Article 5(3) requirements:
- Opt-in consent required for analytics cookies – they will NOT load until you click 'Allow analytics'.
- Clear and specific information about what each cookie does and how long it lasts.
- Easy to withdraw consent at any time by clearing browser storage or declining when the banner reappears.
- No cookie walls – declining analytics cookies does not prevent you from using the website.
- IP anonymization enforced for all Google Analytics tracking.
- No advertising, remarketing, or cross-site tracking features enabled.
- Consent choice is stored locally and respected across all pages.
What runs on this site
- Next.js + Vercel serve static and dynamic content.
- Firebase stores contact form entries and project data.
- Google Analytics 4 (only after consent) measures page views, sessions, traffic sources, and user behavior.
- next-themes keeps track of your light/dark/system preference.
- Custom consent logic stores your analytics choice in local storage.
Cookie categories
Essential
Required for security, load balancing, and routing. They do not track you across sites and cannot be disabled.
- Vercel edge cookies
- Next.js internal session identifiers
Preferences
Improve the experience by remembering what you picked last time.
- Theme choice (light/dark/system)
- Cookie consent decision
Analytics (optional)
Aggregated insights about page performance, popular content, traffic sources, and user behavior. These cookies only load after you click 'Allow analytics'.
- Google Analytics 4 (_ga, _ga_*, _gid) - tracks page views, sessions, device type, geographic location, and traffic sources
- Google Analytics processes data according to their Data Processing Terms and retains it for up to 26 months
- Vercel Speed Insights (does not set cookies) - measures page load performance
Cookie list
Below are the cookies and local storage keys that may be created while browsing:
| Cookie / Key | Purpose | Lifetime |
|---|---|---|
| theme | Stores your preferred theme via next-themes | 12 months (local storage) |
| mhlsq-cookie-consent | Records whether you accepted or declined optional analytics | 12 months (local storage) |
| vercel-analytics | Anonymous performance/session data to keep the site fast | Session |
| _ga (only after opt-in) | Google Analytics 4 - distinguishes unique users | 2 years |
| _ga_* (only after opt-in) | Google Analytics 4 - session and campaign data | 2 years |
| _gid (only after opt-in) | Google Analytics 4 - distinguishes users for 24 hours | 24 hours |
Google Analytics data processing
Google Analytics 4 is a web analytics service provided by Google LLC. When you consent to analytics cookies:
- Google collects data about your interactions with this site (pages visited, time on site, traffic source, device type, approximate location).
- This data is processed by Google according to their Data Processing Amendment and Google Analytics Terms of Service.
- IP anonymization is enabled by default, meaning your full IP address is never stored.
- Data is retained for 26 months and then automatically deleted.
- You can learn more about how Google uses data at https://policies.google.com/technologies/partner-sites.
- Google is certified under the EU-U.S. Data Privacy Framework for data transfers.
Managing cookies
- Use the consent banner to allow or decline analytics at any time. You can reopen it by clearing your browser storage.
- Most browsers (Chrome, Firefox, Safari, Edge) let you block or delete cookies via Settings → Privacy.
- You can install the Google Analytics opt-out browser add-on from https://tools.google.com/dlpage/gaoptout to prevent Google Analytics on all websites.
- Privacy-focused browsers (Brave, Firefox with Enhanced Tracking Protection) or extensions (uBlock Origin, Privacy Badger) can block third-party trackers automatically.
- Declining analytics cookies does not affect your ability to use this website - all features remain fully functional.
Need help?
Contact me at alexmihalascu@gmail.com if you spot a cookie that is not documented here or you need additional details for compliance reviews.