3 min read
Last updated: 18 August 2026
This site sets strictly necessary cookies only. There is no analytics cookie, no advertising cookie and no third-party tracker, which is why there is no consent banner interrupting your reading.
What is set
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
mervia_enquiry | remembers the products you added to an enquiry basket so the list survives a page reload | session | strictly necessary |
mervia_form | anti-spam token: records when a form was rendered, so a submission made in under two seconds can be rejected | 1 hour | strictly necessary |
cf_clearance | Cloudflare Turnstile, set only on pages with a form, to distinguish a person from a bot | 30 minutes | strictly necessary |
wordpress_*, wp-settings-* | WordPress login and admin preferences — set only for logged-in editors, never for visitors | session / 1 year | strictly necessary |
Strictly necessary cookies do not require consent under the ePrivacy Directive or the German TDDDG, because the site cannot provide the service you asked for without them. The enquiry basket is the clearest case: without a cookie there is nowhere to keep the list you are building.
What is not set
- No Google Analytics, and no analytics product that identifies a visitor.
- No advertising or remarketing pixels. No Meta pixel, no LinkedIn Insight tag, no Google Ads tag.
- No Google Fonts. Fonts are served from our own server, so no request carrying your IP address goes to a third party when a page loads. This is a deliberate choice for a site whose main markets are Germany and the Netherlands.
- No embedded video or maps that would set third-party cookies.
- No cross-site tracking of any kind.
Cloudflare Turnstile
Forms are protected by Cloudflare Turnstile rather than Google reCAPTCHA. Turnstile sets a short-lived cookie on pages that carry a form and processes your IP address to decide whether the submission is automated.
The choice is deliberate: reCAPTCHA sends visitor data to Google, which for a site selling into Germany creates a data protection question that Turnstile — processed at EU endpoints and not used for advertising — does not.
Server logs
Our server keeps standard access logs — IP address, time, page, browser string — for 30 days. These are not cookies and do not follow you between sites. See the privacy policy.
Controlling cookies
Because everything set here is strictly necessary, blocking cookies will not improve your privacy on this site but will break the enquiry basket and may make forms unsubmittable.
If you want to block them anyway, every browser lets you: Chrome, Firefox, Safari and Edge all have per-site cookie controls in their privacy settings.
If this changes
If we ever add a cookie that is not strictly necessary — an analytics tool, for example — we will add a consent banner that asks first and works properly when you decline, and this page will be updated before the cookie is set, not after.