Privacy

Effective 2026-10-05

This site collects as little as possible.

Two first-party cookies, no tracking pixels, no ads. The site is static HTML. We do not run advertising or embed third-party scripts.

The cs_src cookie. On your first visit, a short script of our own, served from this site, sets one cookie named cs_src that lasts 30 days. It records only how you first arrived: the domain name of the site that linked you here (not the full address of that page), the first page you opened here, any utm_source, utm_medium, utm_campaign or ref tag in that link, and the date. It is never overwritten, so it keeps that first source only. It is read only by this site, it does not track you across other sites, and nothing in it is passed to any third party.

The cs_vid cookie and the session id. A second short script of our own, also served from this site, sets a cookie named cs_vid. It holds one random 16-character visitor id and nothing else, lasts 30 days and is renewed each time you visit. Your browser also keeps a random session id in sessionStorage, which it clears when the tab closes; the id changes after 30 minutes without activity. Neither is made from your name, email address, IP address or device. If your browser sends Global Privacy Control or Do Not Track, or blocks cookies, the script sets nothing and records nothing.

Browsing events. While that script runs, it sends the events below to this site, each with the visitor id, the session id and the path of the page it happened on (the path only, never the query string). They go to no one else.

• pageview — a page was opened: the domain name of the site that linked you to it, and the domain name of the site that first referred you (from the cs_src cookie).
• search — you used the part-number search box: the first 40 characters of what you typed, how many results it showed, and which result you picked, if any.
• cta — you clicked a request-a-quote link, an email link or a WhatsApp link: which of the three, not the address.
• form_start — you typed into the quote form for the first time. What you type is not part of this event.
• form_submit — the quote form was sent. Nothing from the form is part of this event.
• leave — you left a page or switched away from it: how many seconds it was on screen and how far down you scrolled, as a percentage.

Each event is stored with the time, your country (Cloudflare’s two-letter code) and a device type: mobile, tablet or desktop. We do not store your IP address, which is used only to limit how many events one address can send per minute, and we do not store your browser’s user agent string. Events from known bots and crawlers are discarded. They are stored in our own Cloudflare D1 database and used only to improve the site and to understand which pages lead to quote requests. They are kept for 12 months and then deleted, and never sold or shared.

The quote form. When you send a quote request, we store what you type into the form, plus your country, the referring page, your browser’s user agent, the first-source details from the cs_src cookie (with the domain name of the site that linked you to the form on that visit) and the visitor and session ids above, which tie the request to the pages that led to it (they are left empty if your browser sends Global Privacy Control or Do Not Track), in Cloudflare KV storage, and a copy goes to our sales inbox. We use it only to answer your inquiry and to know which channels bring inquiries. Your IP address is used to limit repeated submissions and is not stored with the request.

Server logs. The site is served by Cloudflare, which processes standard connection data (IP address, user agent, requested URL) to deliver pages and mitigate abuse, per Cloudflare’s privacy policy. That processing is Cloudflare’s own and is separate from the events described above.

Email. If you email us, we keep the correspondence to answer you. We do not add you to lists or share your address.

Changes. If we change what is recorded, this page is updated first and the effective date above changes with it.