Wavely Labs SRL · Last updated 2026-10-14
Cookie policy
Template — requires legal review before launch.
Controller and scope
Wavely Labs SRL, based in Bucharest, Romania, is responsible for the first-party storage described here. Contact contact@wavelynow.com about cookies or related data processing. This policy covers cookies, browser storage and optional third-party tags used on this website. It should be read with the Privacy policy. The provider inventory and retention settings must be verified before launch. This version is dated 2026-10-14.
Necessary storage
The first-party consent_v1 cookie records whether you permit analytics and marketing. It lasts for six months and allows us to honour your choice without asking on every page. A change to the consent version prompts a new choice. Project-form progress is kept in your browser’s session storage so a refresh can preserve the current brief; it is not sent to the studio until you submit. Session storage is specific to the current browser tab and is ordinarily cleared when that tab session ends.
Analytics, if you agree
With analytics consent, configured Google Analytics or Google Tag Manager services and Microsoft Clarity may measure page visits, engagement and technical behaviour. These providers may store identifiers or read device information according to their configured services. Consent Mode begins with storage denied and uses basic mode: Google tags do not load before permission. Campaign attribution may be held in session storage after analytics consent and attached to a submitted brief. Exact cookie names, configured durations and Clarity masking rules must be recorded in the final provider inventory.
Marketing, if you agree
With marketing consent, the configured Meta Pixel may measure campaign responses and conversion events. Google advertising-related storage and personalisation remain denied unless marketing consent is granted. Names, emails and project messages are not included in our analytics event payloads. Marketing providers may combine permitted events with information held in their own services under their policies. The final legal review must confirm active advertising features, cookie durations and any separate controller responsibilities before those features are enabled.
Calendar and other services you choose
Cal.com is loaded only when you choose the optional booking calendar after sending a qualifying brief. Its embedded service may process booking information and use storage necessary to operate the booking. External WhatsApp and social links take you to services with their own privacy and storage terms. Resend supports email delivery and our host supports website operations; they are not loaded as optional advertising trackers. Review the relevant service’s information when choosing to continue there.
Legal basis and retention
Necessary storage is used to provide requested functionality and remember privacy choices under applicable electronic-communications rules. Associated personal-data processing relies on the relevant basis described in the Privacy policy. Analytics and marketing storage require prior consent; associated processing relies on GDPR Article 6(1)(a). Details in a submitted brief are used to reply and take requested pre-contract steps under Article 6(1)(b), where applicable. The consent cookie lasts six months; optional provider storage must follow the documented settings and the shortest suitable retention for its purpose.
Change or withdraw a choice
Use Cookie settings in the footer to accept, reject or customise optional categories at any time. Necessary storage remains active. Withdrawing permission sends a denied or revoked consent signal to loaded services and reloads the page so optional tags no longer load. You can also remove cookies through your browser settings; doing so may reset the stored choice. Rejecting optional categories has the same access to the website and brief form as accepting them.
Your rights and further information
For access, correction, deletion, objection, restriction or portability requests concerning personal data, contact the studio email listed above. Consent can be withdrawn without affecting earlier lawful processing. You may raise a concern with the competent data-protection authority. Our Privacy policy explains processors, potential international transfers, retention and how we handle rights requests. Any material change to optional purposes or providers will be reflected here, with a fresh consent choice requested where required.