01. Your choices
Cookies are small pieces of data stored by your browser and sent to the website with certain requests. We also use local storage to remember your preferences. Different storage has different purposes.
Optional analytics stay off until you accept. In the preference notice, you can accept or reject analytics. Closing or ignoring the notice, continuing to browse or submitting a request does not mean accepting this measurement.
Necessary storage remembers your decision and protects requested functions. It is not used for advertising. Your analytics choice does not block the portfolio, quote form or virtual assistant.
02. What is stored
| Name and type | Purpose | Duration and condition |
|---|---|---|
oxi_privacyLocal storage | Necessary to remember whether you accepted or rejected analytics and the version/date of that choice. Contains no name or contact details. | 180 days. May be replaced when you review your choice or removed when you clear website data. |
oxi_languageLocal storage | Necessary to remember your explicitly chosen language: Brazilian Portuguese (pt-BR), English (en), Polish (pl) or Spanish (es). Does not track browsing or change oxi_privacy. | Until you change language or clear website data. Contains no name or contact details. |
oxi_visitorFirst-party cookie | Optional. A signed random identifier for estimating distinct browsers without using names, contact details or device fingerprinting. | Only after accepting analytics; up to 30 days from creation, without renewal on each event. Removed when consent is withdrawn. |
CF_AuthorizationAuthentication cookie | Necessary for the session of a person accessing the administration area protected by Cloudflare Access. It is not the analytics identifier. | Only in the protected access flow; follows the session duration configured in Cloudflare. Not required to visit the public portfolio. |
The analytics cookie uses Secure, HttpOnly and SameSite=Lax, with transmission restricted to the /api path. This limits how it is sent and prevents page scripts from reading its value. These measures do not necessarily make pseudonymous data anonymous.
Cloudflare infrastructure may use additional cookies when a protection mechanism is needed. Their names, purposes and durations follow Cloudflare’s cookie documentation. The list above describes the application’s configuration; it does not mean every possible provider cookie is present on every visit.
03. How optional measurement works
After acceptance, the application records action types, day and approximate country/city supplied by the infrastructure: page opened, Instagram clicked, summary prepared, map opened or request submitted. The database uses a protected representation of the browser identifier to reduce repeated counts in the selected period.
We do not collect contact details, Instagram, name, quote text, attached images or AI conversations for this measurement. The analytics database does not store raw IP addresses, and the system does not combine device characteristics to try to recognise you.
The visitor indicator estimates browsers that accepted analytics. The same person may appear more than once after changing device or browser, clearing data or allowing the identifier to expire. Country and city may be absent or inaccurate; they are not a precise location.
The cookie lasts 30 days, while server-side analytics and consent evidence are retained for up to 90 days, with the cleanup routine described in the Privacy Policy. Earlier counts without an identifier or geography remain separate and are not assigned invented locations.
This version does not install Google Analytics, Meta Pixel or advertising cookies. If the browser signals Do Not Track or Global Privacy Control, the application does not send analytics events, even after earlier acceptance.
04. When you use external services
The embedded OpenStreetMap map is requested only when you click to load it. Your browser then connects to that provider. Instagram and Google Maps links lead to external platforms; using their features may involve their own cookies and rules, which this website’s preferences do not control.
The assistant sends your question to Cloudflare Workers AI to generate a response but does not depend on analytics acceptance. It does not use the analytics cookie to associate your question with a browser. Presentation video, photographs and fonts are served by this website.
Provider, purpose and transfer information is in the Privacy Policy.
When continuing a quote request on Instagram, the website may copy the summary and open a conversation with Oxi. The Instagram link does not contain the request text in its parameters. You must paste the text and send the message on the platform; the reference image is not automatically attached to the DM. Opening Instagram connects to that platform and may involve its own cookies. The image submitted through the form stays in the private request, accessible only to authorised administration, for the period described in the Privacy Policy. This flow does not change your analytics choice.
05. How to reject or withdraw consent
- Open Cookie preferences, also available in the website footer.
- Choose to reject analytics. The website stops new events and requests removal of the analytics cookie. If the current cookie still allows the identifier to be located, the server also deletes its analytics and consent record.
- Continue using the website as usual. You can return to preferences to change your mind.
If the connection fails during removal, the browser may retain the cookie until a successful attempt or until it expires. The rejection preference still prevents the page from sending new events.
Withdrawal does not affect the lawfulness of earlier processing. Records from other browsers, or identifiers already expired or deleted, cannot be found using your name or contact details; they remain subject to retention of up to 90 days. Deletion in the application does not mean immediate erasure of backups or the provider’s own records.
You can also delete cookies and local storage in your browser settings. Clearing the preference makes the notice appear again. Blocking necessary cookies may affect administrative access or prevent the browser from remembering your choices. Preferences apply to this browser and must be set separately on other devices.
06. Contact and references
The identity presented on the website is Oxi Tattoo / Oksana Lukianenko, with appointments advertised at Nie Mów Mamie Tattoo in Gdańsk. For data matters, use Instagram @oxi.tattoo or the studio telephone +48 507 458 605. See the identity information and its stated limitations.
Optional storage is governed by European privacy rules and Polish rules on accessing information on users’ devices. This policy will be updated when features or purposes change; the date at the top identifies the version.
Official references: European Union — online privacy and cookies; ELI — Polish Electronic Communications Law, Articles 399 and 400; UODO — consent requirements.