Legal
Cookie policy
The short version
- A few cookies are strictly necessary: they keep the site online, tell people from bots on the contact form, and remember your cookie choice.
- Everything else is optional and off until you switch it on, and there is nothing optional here yet, so there is no banner to answer.
- Accept and Reject are the same size and weight, because the Italian Garante requires equal prominence. Refusing changes nothing about the site you get.
- When there is a choice to make, it is stored for 6 months in a cookie called gp_consent, and a Cookie settings link in the footer lets you change it any time.
- Nothing optional is running today, so there is nothing to consent to yet. The analytics row in the table below is listed as planned, not set.
1. What a cookie is
A cookie is a small file a website asks your browser to keep, so that something can be remembered between one page and the next. The same rules cover anything else stored on your device for the same purpose, such as local storage, and where this page says “cookie” it means all of it.
Cookies fall into two groups, and the difference is the whole of the law on this. A cookie that is strictly necessary to provide something you asked for needs no permission. Everything else needs your consent first.
2. The banner, and how consent works here
There is no banner on the site at the moment, and that is not an oversight. Everything in section 3 is strictly necessary, so there is nothing to ask you about yet. The banner is built and ships with the site; it appears in the same change that switches on the first optional cookie. This is how it will work when it does.
The banner offers two choices, Accept and Reject. They are deliberately the same size, shape and weight. The Italian data protection authority’s guidelines on cookies of June 2021 require equal prominence, and nudging people towards Accept with a bright button and a grey link is exactly what those guidelines were written to stop.
Until you choose, nothing non-essential is loaded. Not loaded with consent defaulted off, not loaded and held back: the script is not on the page and no request goes to the provider. Closing the banner without choosing is neither consent nor refusal, and nothing optional runs in the meantime.
Your choice is written to a cookie called gp_consent, which holds the choice itself and the moment you made it, and nothing else. It lasts 6 months, after which I ask again. I will also ask again straight away if I ever add a kind of cookie you have not been asked about.
There is no cookie wall. Rejecting everything costs you nothing: every page, every case study and the contact form all work the same way either way.
3. Everything this site sets
This table is generated from the same file the banner reads. The last column is the honest one: yes means it is set today, no means it is listed here because it is planned and is not set yet.
| Category | Set by | What it does | Cookie names | Running now |
|---|---|---|---|---|
| Strictly necessary (not optional) | Cloudflare | Serves and protects the site at the edge. | __cf_bm | yes |
| Strictly necessary (not optional) | Cloudflare Turnstile | Checks that a human, not a script, is sending the contact form. Only on the contact page. | cf_clearance | yes |
| Strictly necessary (not optional) | Giovanni Perri | Remembers the choice you make here, so I stop asking. | gp_consent | yes |
| Analytics (optional) | PostHog (EU Cloud) | Counts page views and which calls to action get used, so I can see what people actually read. | ph_ | no |
Two notes on that table. cf_clearance is only ever set on the contact page, because that is the only page with a Turnstile check on it. And a cookie set by a provider on its own domain, rather than on mine, cannot be cleared from this site; your browser settings will clear it, and section 4 says how.
So today the answer to “what does this site set” is: three strictly necessary cookies and nothing else. Analytics is listed because it is the next thing I intend to add, and because a table that hides a plan is not much better than one that hides a cookie. When it goes live, this page, the privacy policy and the banner all change together, because all three read that one file.
4. Changing your mind
There is nothing to withdraw yet. From the moment there is, a Cookie settings link in the footer of every page reopens the choices, and withdrawing consent is exactly as easy as giving it, which is the point.
A withdrawal takes effect at once: the optional scripts stop being loaded, and the cookies that were set on this domain are deleted at the same time. Your browser will also let you block or delete cookies for any site, and every major browser has that in its settings or privacy section. Blocking the strictly necessary ones will break the contact form.
5. Other people’s sites
Two links here take you somewhere else, and once you are there this policy stops applying.
- Calendly, which every “Book a discovery call” link opens in a new tab. There is no Calendly embed and no Calendly script on this site, so Calendly sets nothing here. When you land on their page, their cookies and their privacy notice apply.
- LinkedIn, linked from the footer. It is a plain link, not a widget or a follow button, so LinkedIn sets nothing on this site and is not told you were here unless you click.
6. What I do not use
No advertising cookies. No tracking pixels from Meta, LinkedIn, Google Ads or anyone else. No social media widgets, no embedded video players, no comment system, no live-chat box, no session recording, no heatmaps, no fingerprinting, and no sharing of anything with data brokers.
The typefaces are served from this site rather than from Google Fonts, so loading a page makes no request to Google and sends your IP address to no font provider. The same decision covers everything else on the page: if it is not in the table in section 3, it is not there.
7. Changes, and how to contact me
This is version 1.0, in effect from 21 September 2026. It replaces the cookie policy published at thegrowthhustlers.com. If I add or remove a cookie, the table in section 3 changes with the site itself, and I bump the version and date at the top of this page.
The privacy policy explains what happens to personal data more generally, including what analytics would collect once it is switched on. Any question about either, email giovanniperri86@gmail.com — Giovanni Perri, Partita IVA IT 03133680342, Parma, Italy.