◇ legal · EU / EEA / Switzerland

Cookie policy, in plain English.

Last updated: May 2026 Controller: Hiten Sangani, Berlin, DE Applies to: hiten.eu & this portfolio

This site is a single static index.html with supporting CSS and JS. There is no database, no WordPress, no CMS and no analytics. The policy below describes what actually happens in your browser when you load these pages, and what would happen if I ever add analytics or ads.

TL;DR

I store one value in your browser (your choice from the cookie banner) and I load fonts from Google. That’s it. No GA4, no ads, no Meta pixel, no CRM tracking on this portfolio. Not today. If any of that ever ships, it will be deny-by-default via Google Consent Mode v2 and will only fire after an explicit “Accept all”.

01Introduction

This policy applies to the website https://hiten.eu and to this portfolio (“the website”). It explains the use of cookies and similar technologies such as localStorage, scripts and web beacons.

02Definitions

Cookie. A small text file stored by your browser when you visit a site. The site can read it on later visits.
localStorage. A larger, persistent key/value store in your browser. Legally treated the same as cookies for consent purposes.
Script. Code that runs in your browser to make a page interactive. Scripts themselves aren’t cookies, but they can set them.
Web beacon / pixel. An invisible image or request used to measure traffic. This site does not use any.

03What this portfolio actually uses

Today, only the items in the table below are set. Everything is first-party (by me), and nothing reaches a server owned by anyone else except Google Fonts.

Name

Type

Purpose & lifetime

hs_cookie_consent

Functional · 1st party · localStorage

Remembers your choice from the cookie banner so we don’t nag you on every page. Persists until you clear browser data or click Cookie settings again.

Google Fonts request

Third party · no cookie · IP only

Typography loads from fonts.googleapis.com. Google sees your IP on that request. No cookies are dropped by Google Fonts itself. See Google Fonts privacy FAQ.

That’s the full list on this portfolio. No GA4, no Google Ads, no Meta/Facebook pixel, no HubSpot tracking, no Mixpanel, no Hotjar, no Microsoft Clarity, no cookies set by a CMS.

04What would change if I add analytics

I may add Google Analytics 4 and possibly Google Ads / Search Ads 360 in the future. If that happens, they’ll be wired up with Google Consent Mode v2, configured “deny” by default:

ad_storage, ad_user_data, ad_personalization: denied.
analytics_storage: denied.
functionality_storage, security_storage: granted (essential).

That means GA4 runs in a cookieless, modelled mode until (and unless) you click “Accept all”. If you accept, GA4 will set _ga and _ga_* cookies (2 years) to measure aggregate traffic. You can withdraw consent any time from Cookie settings.

05About Google Search Console

I use Google Search Console (GSC) to monitor how this site shows up in Google Search. GSC does not set cookies on your device. It reads server logs and SERP data that already exist at Google. So using GSC does not, by itself, require any consent from you.

06What I will not do

Sell or rent any personal data. Ever.
Combine this portfolio’s data with any other data source for marketing.
Load tracking pixels from social networks.
Use “dark patterns” that make “Reject all” harder than “Accept all”. Both buttons sit side by side in the banner.

07Your consent

The first time you land on this site you’ll see a banner. “Accept all” grants consent for any analytics / ads that may be running; “Reject all” denies consent. Either way the site works the same. You can change your mind any time by clicking Cookie settings.

08Managing, disabling and deleting cookies

You can delete cookies manually via your browser, or block them entirely from the browser’s privacy settings. For step-by-step instructions, see the help pages for Chrome, Safari, Firefox, or Edge. Disabling all cookies may break parts of other sites, but this portfolio will keep working because it has no mandatory cookies.

09Your rights (GDPR)

Right to know why personal data is processed, what happens to it, and how long it’s retained.
Right of access to the personal data held about you.
Right to rectification, erasure and restriction. Correct, delete or pause processing.
Right to withdraw consent at any time, with no penalty.
Right to data portability. Export your data in a machine-readable format.
Right to object to processing, and to lodge a complaint with your national Data Protection Authority.

10Contact

For any question about this policy or your data, email hello@hiten.eu or hitensangani@gmail.com. Postal: Hiten Sangani, Berlin, Germany.

Back to portfolio