Cookie Policy

1. The short version

This site sets no advertising cookie, no analytics cookie and no third-party cookie. It loads no tag, no pixel, no chat widget and no external font. The only thing written to your browser is a single local-storage entry recording the choice you make in the consent banner — and that is written only once you make a choice.

2. What can be stored

3. The categories in the banner

Two optional categories exist in the consent banner, and both are switched off by default. Neither is used today — nothing on this site loads a tag of either kind. They exist so that a valid consent signal is already in place before anything is ever added, rather than being retrofitted afterwards.

• Analytics. Would allow a measurement tag to count visits and page views. Nothing of the kind is loaded today; the switch is here so consent exists before anything does.
• Advertising. Would allow advertising measurement — including Microsoft Advertising’s UET tag — to attribute a visit to a campaign. Not loaded today. Denied unless you allow it.

The advertising category is wired to Microsoft Consent Mode: a default signal of ad_storage: denied and analytics_storage: denied is queued before anything else runs, and your choice updates it. If a Microsoft Advertising UET tag is ever added to this site, it will start from that denial rather than from an assumption.

4. Not a cookie, but still processing

A cookie inventory that stops here would imply nothing else happens, and that would be false. Using this site — with or without any storage — means our server records the request. The full list is below and in the privacy policy, and each item answers the same question the forms answer.

• A truncated one-way hash (SHA-256) of your IP address, with the time of each submission. To count submissions per sender so the forms cannot be flooded. The raw address is never written to the database, and the hash cannot be turned back into it. Basis: Article 6(1)(f) — our legitimate interest in keeping the forms usable. Kept: The counter file is deleted 24 hours after your last submission. Linked to your submission? Yes — the same hash is stored in the row with your submission, so an abusive sender can be identified and removed. It is deleted with the row.
• Ordinary web-server log lines: IP address, date and time, the URL requested, the HTTP status and the browser user-agent string. Security, abuse investigation and diagnosing errors. This is recorded for every request to every page of this site, not only when you send a form. Basis: Article 6(1)(f) — our legitimate interest in operating the service securely. Kept: 30 days, then deleted. Linked to your submission? No. Server logs are not joined to submissions and are not used to build a profile of you.
• An application event log recording that a submission was stored, with its reference — no names, addresses, message text or IP addresses. To detect failures, such as a submission that could not be saved. Basis: Article 6(1)(f) — our legitimate interest in a service that works. Kept: 30 days. Linked to your submission? Only by the reference shown to you after sending, which on its own identifies nobody.

No analytics or advertising tag is loaded on this site, and using this form makes no request to any third party. Requests go to our own server only.

5. Changing or withdrawing your choice

Clearing this site’s data in your browser removes the entry, and the banner appears again on your next visit. Because the only stored entry is the record of your choice, deleting it costs you nothing except being asked once more. You can also write to info@aftermidnight.enterprises with any question about it.

6. Why the banner is not a wall

The banner sits at the bottom of the page and never covers the content. Refusing takes exactly one click, the same as accepting. A page that opens behind a full-screen consent overlay is an interstitial, and it fails both the ePrivacy standard for freely-given consent and the landing-page quality standards that advertising platforms apply.