Skip to content

Short. Honest. No surprises.

COOKIE POLICY

Most cookie policies are long because companies use a lot of cookies. Ours is short because we don't. Here's exactly what's on this site and why.

Effective date: January 1, 2026  ·  Last updated: August 2026  ·  Marapone Contracting Inc. (Canada)

The short version: this website uses functional cookies to operate and Google Analytics to count aggregate page traffic — nothing more. No advertising cookies. No behavioural profiling. No cross-site tracking. We do not know who you are from your visit alone, and we prefer it that way.

The MaraponeAI mobile app is a native app, not a website, so it sets no cookies at all — no advertising identifier, no analytics SDK, nothing to opt out of. Section 04 gives the app the same treatment this policy gives the site.

01 — What Cookies Are

A QUICK EXPLANATION

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work, remember your preferences, and — in many cases — track behaviour across the internet for advertising purposes.

We use cookies only for the first reason: making the website work correctly. The other uses don't fit our model or our values.

02 — Cookies on This Site

WHAT'S ACTUALLY ON THIS SITE

ESSENTIAL / FUNCTIONAL COOKIES

These cookies are required for basic site functionality. Without them, parts of the site may not work as expected. They do not track you across other websites and contain no personally identifiable information.

Cookie Purpose Duration Type
_session Maintains your session state while navigating the site (e.g., tab selections on pricing page) Session (deleted when browser closes) First-party
cf_clearance Set by Cloudflare Turnstile when you pass the bot/abuse check on our demo or forms. Security only — does not track personal behaviour. 30 days Third-party (Cloudflare)
__cf_bm Cloudflare bot management cookie. Distinguishes humans from automated bots to protect the demo and forms from abuse. 30 minutes Third-party (Cloudflare)

ANALYTICS COOKIES

We use Google Analytics (GA4) to count aggregate page traffic — how many visitors the site receives and which pages they view. This helps us understand whether the site is functioning correctly. No personal profiles are built and the data is not used for advertising.

Cookie Purpose Duration Type
_ga Google Analytics — distinguishes unique visitors for aggregate traffic counting. Does not identify you personally. 2 years Third-party (Google)
_gid Google Analytics — distinguishes unique sessions. Used alongside _ga for accurate visit counting. 24 hours Third-party (Google)
_ga_* Google Analytics GA4 — persists session state for the analytics property (G-J31Z05DB01). 2 years Third-party (Google)

COOKIES WE DO NOT USE

Advertising / targeting cookies — We run no paid advertising campaigns that require tracking your behaviour. No Facebook Pixel, Google Ads conversion tags, or similar.
Behavioural profiling cookies — We do not use Hotjar, Mixpanel, or any platform that builds individual user journey profiles or heatmaps.
Social media tracking cookies — No social share buttons with embedded trackers. No LinkedIn Insight Tag. No Twitter/X pixel.
Cross-site tracking — We do not participate in any network that tracks your browsing across other websites.

03 — Third-Party Services

EXTERNAL SERVICES THIS SITE USES

This site loads a small number of external resources. External services used for analytics collect aggregate traffic data only and are not used for advertising or individual profiling:

Google Analytics (GA4)

We use Google Analytics to measure aggregate site traffic — page views and visitor counts. GA sets the cookies described in Section 2. Data is processed by Google in accordance with their privacy policy. We have not enabled advertising features, remarketing, or user-level data sharing within our GA configuration. See Google's Privacy Policy for details. You can opt out using the Google Analytics opt-out browser add-on.

Google Fonts

We load typography (IBM Plex Sans, IBM Plex Sans Condensed, IBM Plex Mono) from Google Fonts. This results in a request to Google's servers when you load the page. Google may log this request. No cookie is set by Google Fonts. See Google's Privacy Policy for details.

Tailwind CSS CDN

The site loads Tailwind CSS from a CDN. This is a stylesheet delivery request only. No personal data or cookies are involved.

Cloudflare Turnstile

We use Cloudflare Turnstile to protect our live demo and forms from bots and abuse. It receives your IP address and basic browser signals to verify you are human, and may set the security cookies described in Section 2. It is a privacy-focused CAPTCHA alternative and is not used for advertising or profiling. Cloudflare's privacy policy applies: cloudflare.com/privacypolicy.

Stripe

Buying one of the software products or a data pack sends you to Stripe's own hosted checkout page to pay. No Stripe script runs on this site and Stripe sets no cookie on our domain — the buy buttons ask our server for a checkout session and then redirect you. Once you are on Stripe's page you are subject to Stripe's cookies and privacy terms, and your card details are entered on Stripe's page, never on ours. See Stripe's Privacy Policy.

Vercel

This website is hosted on Vercel, which also provides privacy-friendly, cookieless aggregate analytics (Vercel Web Analytics). It does not use tracking cookies or build individual profiles. See Vercel's Privacy Policy.

04 — The Mobile App

THE MARAPONEAI APP SETS NO COOKIES

This policy covers marapone.com. The MaraponeAI mobile app is a native iOS and Android application rather than a website, so cookies do not apply to it at all. Because people reasonably ask the same question about apps that they ask about sites, here is the equivalent answer:

A session token, and nothing resembling a tracker

The app stores an authentication token on your device so you are not signing in every time you open it, along with your own settings — city, currency, units — and a local cache of the projects you have already opened, so those stay readable without a signal. All of it is app storage on your phone, it is removed when you sign out or delete the app, and none of it is readable by anyone else.

No advertising identifier, no third-party SDKs

The app does not read your device's advertising identifier (IDFA on iOS, AAID on Android), contains no advertising SDK, and contains no third-party analytics or session-replay SDK. There is no cross-app or cross-site tracking, and nothing to opt out of because nothing is collected for that purpose. Apple's App Tracking Transparency prompt does not appear, since there is no tracking to ask permission for.

Device permissions you grant, and can revoke

The app asks for the camera when you photograph a drawing or a quote, and for files when you import a set. Both are asked at the moment you use the feature, both are optional, and both can be revoked in your phone's settings without breaking the rest of the app. There is no request for contacts, location, microphone, or photo library beyond the file you pick.

What Apple and Google see

Because they distribute the app and bill the subscription, the App Store and Google Play collect their own install, crash and purchase data under their own policies, which we do not control and cannot switch off. That is between you and the store; it is not data we receive beyond your subscription status.

What the app does send us is the documents you ask it to process, because the engines run on our servers. That is not a cookie question and it is the most important thing to understand about the app, so it is set out properly in section 06 of our Privacy Policy.

05 — Your Control

HOW TO MANAGE OR DISABLE COOKIES

You can control cookies through your browser settings. Most browsers allow you to:

  • View all cookies currently stored on your device
  • Delete individual cookies or all cookies from a specific site
  • Block cookies from specific websites or third parties
  • Block all cookies (note: this may affect functionality on many websites)

Instructions for major browsers:

Because the only cookies on this site are functional ones required for basic operation, disabling them may affect some interactive elements (such as the pricing tab switcher) but will not prevent you from reading content or contacting us.

06 — Legal Basis

GDPR & LEGAL BASIS FOR COOKIES

For visitors from the European Economic Area (EEA) or the United Kingdom, our legal basis for the essential cookies described in this policy is legitimate interest — specifically, the interest in operating a functional, secure website. These cookies do not process personal data in a way that overrides your rights and freedoms.

We do not use cookies that require your consent under GDPR (i.e., non-essential advertising or tracking cookies). If this changes in the future, this policy will be updated and an appropriate consent mechanism will be implemented before any such cookies are placed.

07 — Changes

UPDATES TO THIS POLICY

If we ever add new cookies to this site — for any reason — we will update this policy before doing so. The "Last updated" date at the top of this page will reflect any changes. We will not introduce non-essential cookies without updating this policy and, where required by law, obtaining your consent first.

Questions about cookies?

REACH OUT

If you have any questions about this Cookie Policy or our use of any web technologies, get in touch. We will reply promptly and plainly.

general@marapone.com

Marapone Contracting Inc.  ·  Canada & Italy  ·  Operating globally