Bureau theme
Legal

Cookie policy.

This site sets six cookies on every visit: four to work at all, and two for Google Analytics. There is no switch for the analytics pair here, so this page tells you plainly what is stored and the two ways to refuse it from your own browser.

LAST UPDATED: 5 SEPTEMBER 2026
THE COOKIES

1. What this site sets

CookiePurposeLifetimeCategory
laravel-session Identifies your browsing session so the contact form works and a submitted form is not replayed. 2 hours of inactivity Strictly necessary
XSRF-TOKEN Protects forms against cross-site request forgery. Same as the session Strictly necessary
qq_consent Records that you have been shown the cookie notice, so it is not displayed again on every page. It holds the version of the notice and nothing else — the literal value is v3.ack — with no identifier of any kind. 180 days Strictly necessary
qq_theme Holds your colour palette: the one you were given on arrival, or the one you chose with the theme switch. It contains the name of a palette and nothing else, and cannot be switched off — without it the site would hand you a different palette on every page. 365 days Functional, set at your request
_ga Tells one browser from another, so a returning visit is not counted twice. Set by Google Analytics 4 on every visit. 2 years Analytics
_ga_WEFJJKE8F5 Holds the session state Google Analytics needs to group page views into one visit. Set by Google Analytics 4 on every visit. 2 years Analytics

All six are set on every visit. The first four are first-party in every sense: written by this domain, containing no identifier that means anything anywhere else, never shared. The two Google Analytics cookies are also written by this domain, but the measurements they enable are sent to Google Ireland Limited, which processes them on our behalf. That is the only data that leaves qquantum.ai.

2. What this site does not do

  • No advertising or retargeting pixels. Google's advertising signals are switched off in the tag, and advertising storage is denied for the life of every page, so Google Analytics here is measurement only and sets no advertising cookie.
  • No session recording and no heat maps.
  • No profile of you as an individual, and no attempt to recognise you across other websites.
  • No social-media embeds or share buttons that phone home.
  • No third-party fonts or content delivery networks. Fonts, stylesheets and our own scripts are served from this domain.
  • No fingerprinting.
  • Nothing sold, and nothing shared for anyone else's purposes.

Web-server access logs are kept for security and capacity purposes, as described in the privacy policy. They are not cookies and are not used to build profiles.

3. Why there is a notice rather than a choice

Under the ePrivacy rules as applied in Spain (Ley 34/2002, article 22.2) and the guidance of the Agencia Española de Protección de Datos, consent is not required for cookies that are strictly necessary to provide a service you have requested, or that store a preference you have explicitly set. The session, CSRF and notice cookies fall into the first group; the palette cookie falls into the second.

Google Analytics falls into neither, and we have chosen to run it on every visit rather than ask first. We would rather say so here than show you a button that pretends otherwise. The panel you see on your first visit is a disclosure, not a consent request: it lists what is stored, and dismissing it changes nothing except whether it appears again.

That means the site itself gives you no way to switch analytics off. The two ways to refuse it are your browser and Google's own opt-out — both in section 4 — and neither of them affects anything else on the site.

If what this site stores ever changes, the notice version is raised and the panel is shown again to everyone, including people who dismissed the last one.

4. Controlling cookies

Two things will stop the analytics cookies, and both work from your side rather than ours:

  • Block cookies for this domain, or block googletagmanager.com, in your browser settings or with any content blocker. Most browsers also offer this per-site from the padlock in the address bar.
  • Install Google's own Analytics opt-out browser add-on, which stops the tag reporting from any site you visit.

Cookie notice in the footer of every page reopens the list of what is stored, at any time.

You can also delete or block cookies in your browser settings. Blocking the session cookie will stop the forms from submitting; blocking the theme cookie means the site returns to its default palette on your next visit. Nothing else is affected.

5. Questions

Write to [email protected].

Keep reading
CASE STUDIES

Shipped work.
Go and check it.

The work we can name, with the live site, our scope and the boundary made explicit. Select a project to see the evidence; each is a full case study, not a logo or a claim.

sonora.com
The Sonora homepage on desktop: a full-bleed dune landscape behind the headline “Transform Your Life with Sound”, with App Store and Google Play download buttons.
sonora.com — homepage, 1440×900 sonora.com →
Live Consumer wellness · Mobile + web

Sonora

Cognitive AI Ltd · 2026

A free sound-wellness app, described by its publisher as AI sound therapy that reads a short vocal sample at the start of a session and generates a soundscape for that moment. We designed and built the website and its backend, produced assets for the iOS and Android apps, and supported the application prototype.

Read the case study →

See every published project →

WHO WE HAVE BUILT FOR

Twenty-one years of applications, platforms and campaigns for names you know.

See all of our work →