Legal / ePrivacy
Cookie policy.
Issued 2026.06.15 — Rev 2.0 — ePrivacy + DK Cookiebek
What are cookies
A cookie is a small piece of data stored in your browser by the websites you visit. We use a small set of cookies, listed below in full. Some are strictly necessary for the site to function; the rest only load after you opt in via our cookie banner. Under the Danish Cookie Order (Cookiebekendtgørelsen, BEK nr 1148 af 09/12/2011) we obtain your consent before placing any non-essential cookie or reading information from your device.
The full list
| Name | Purpose | Duration | Party | Category |
|---|---|---|---|---|
| cimalys_consent_v1 | Remembers your cookie choice (essential / analytics / marketing). Without it the banner would reappear every visit. | 180 days | Cimalys (first-party) | Strictly necessary |
| cimalys_attribution_v1 | Stores which ad campaign or referrer brought you to the site so we can measure ad effectiveness on a 30-day window. Contains UTM tags, ad click ID (e.g. fbclid), and the page you first landed on. | 30 days | Cimalys (first-party) | Analytics |
| _fbp | Set by the Meta Pixel to identify your browser to Meta Platforms for ad measurement, conversion tracking, and Custom Audiences. | 90 days | Meta Platforms Ireland Ltd | Marketing |
| _fbc | Set by the Meta Pixel when you arrive with an fbclid query parameter; ties your visit back to the specific ad click. | 90 days | Meta Platforms Ireland Ltd | Marketing |
Vercel (our host) and Cloudflare (our edge proxy) may set short-lived security and load-balancing cookies classified as strictly necessary; they do not contain identifiers used for tracking and are not used for any cross-site purpose.
Categories explained
Strictly necessary — required for the site to load, render, and remember your cookie choice. Always on; no consent required under ePrivacy Article 5(3).
Analytics — first-party only, used to attribute scans and bookings back to the marketing channel that brought you in. Not shared with any third party. Off by default.
Marketing — Meta Pixel + Meta Conversions API. Used for ad measurement, conversion tracking, and Custom Audiences. Shares hashed email, IP, user agent, ad click ID, and the conversion event name with Meta Platforms Ireland Ltd. Off by default.
How to change your choice
Open the cookie banner at any time: . You can also clear the cimalys_consent_v1 cookie in your browser settings and the banner will reappear on the next visit.
Server-side measurement
Form submissions on the booking page may trigger a server-side event sent from our backend to Meta's Conversions API (CAPI). This event uses the email and phone you voluntarily submitted on the form, hashed with SHA-256 before transmission, and is based on the GDPR legal bases of contract performance (Art 6(1)(b) — we need to follow up on your call request) and, for the ad-measurement element, our legitimate interest in measuring conversion (Art 6(1)(f)). This is a separate channel from browser cookies and is not gated by the cookie banner.
If you do not want this server-side measurement applied to your submission, contact us at hello@cimalys.com and we will exclude your record.
Contact
Cimalys ApS — CVR 46502493 — Næstvedvej 34 st., 4100 Ringsted, Denmark — hello@cimalys.com.