Cookie Policy

This Cookie Policy applies to the ABS Studio website at https://abs-studio.de, its language versions and, while the technical address remains available, the technically equivalent deployment at https://abs-studio.netlify.app. It supplements the ABS Studio Privacy Policy, which provides broader information about hosting, server logs, contact requests, Google Analytics, external services, Stripe payment links, international transfers, retention periods and data-subject rights.

This Cookie Policy describes storage of information in the user's browser or device, access to that information, necessary Local Storage records, consent management, Google Analytics 4, Google Tag Manager, external websites loaded in iframes, and the changing and withdrawal of consent.

All language versions have the same meaning. In the event of an unintended discrepancy, the German version is legally controlling.

Controller: Dmytro Shapovaliuk, trading as ABS Studio, Strangstr. 6, 58239 Schwerte, Germany. E-mail: dmytroshapovaliuk.de@gmail.com. Website: https://abs-studio.de. Current legal details are also available in the Legal Notice.

Cookies are small text files stored in a browser. They may be session cookies deleted when the browser closes or persistent cookies retained for a defined period.

Similar technologies include Local Storage, where information remains until deleted by the browser, user or website mechanism; Session Storage as normally temporary browser storage; JavaScript, tags and pixels that may transmit information about website use, browser, device or interaction; and iframes in which the browser loads an external website directly from its domain.

Netlify server logs are not cookies. Their use is described in the Privacy Policy.

Storage of information on, or access to information from, the user's device is governed by section 25 TDDDG.

Necessary storage for the Cookie Banner, recording and respecting the user's choice, avoiding a repeated request after a choice has been made, and retaining the language explicitly selected by the user is based on section 25(2) no. 2 TDDDG. Where the related processing concerns personal data, it is based on ABS Studio's legitimate interests under Article 6(1)(f) GDPR in respecting the choice, operating a stable consent mechanism, and providing a secure and understandable website.

Google Analytics 4, Google Tag Manager for analytics purposes and external websites in iframes are activated only after prior consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. Consent is voluntary. Refusing analytics or embedded external content does not restrict access to the website's essential content and functions.

5.1 Necessary: This category displays the Cookie Banner; stores the selected categories, selection time, expiry, Banner and Policy versions and the explicitly chosen language; and requests a new choice after expiry or a version change. These records are not used for analytics, advertising, profiling, remarketing, cross-site tracking or advertising audiences.

5.2 Analytics: Google Analytics 4 provides statistical analysis of website use. Analytics is off by default. Before consent, neither Google Analytics nor related Google tags load; no analytics events, page views, consent pings or cookieless pings are sent, and no _ga or _ga_* cookies are created.

5.3 External content / Interactive Portfolio: This category controls external client websites, demos and official technology pages in an iframe. Without consent, no iframe or external src is created and no connection is made to the external domain; a click opens the exact address in a new tab. With consent, an iframe is created only after an additional click and only for the selected item.

5.4 Functional and marketing technologies: ABS Studio does not use separate optional functional cookies, Meta Pixel, LinkedIn Insight Tag, Google Ads conversion tracking, remarketing, advertising personalization or other marketing technologies on abs-studio.de. Google Signals, enhanced conversions and user-provided data are not used.

On a first visit, three equally accessible choices are provided: Accept all activates analytics and embedded external content; Reject all leaves only necessary technologies active; Customize permits separate control of Analytics and External content.

Optional categories are not preselected. Silence, scrolling, closing the Cookie Banner or continued website use do not constitute consent. There is no cookie wall and the main content remains available after rejection.

The permanent Cookie settings link in the footer allows the user to view, change or withdraw the choice at any time.

ABS Studio uses three necessary Local Storage records: abs_cookie_consent_v2, abs_locale_v1 and abs_theme_v1.

7.1 The abs_cookie_consent_v2 record contains necessary=true, Analytics and External content status, selection and expiry times, Banner version 2 and Policy version 1.3. It contains no name, business name, e-mail address, telephone number, contact text, payment data, full IP address, fingerprint, advertising identifier or browsing history. The choice is valid for six calendar months. An expired, damaged, structurally invalid or version-mismatched record is removed and the Cookie Banner is shown again. Older consent keys are removed specifically and are not reused.

7.2 The abs_locale_v1 record stores only the language code de, en or uk chosen by the user and, where required for automatic expiry, the selection time, expiry time and structure version. It contains no user identifier, contact, IP, analytics, advertising or browsing-history data. The language preference remains for six months or until the language is changed, browser data is cleared or the record is specifically removed.

7.3 The abs_theme_v1 record stores only the explicitly selected display theme light or dark together with selection time, expiry time and structure version. It contains no user identifier, contact, IP, analytics, advertising or browsing-history data. The theme preference remains for six months or until it is changed, browser data is cleared or the record is specifically removed.

7.4 The ABS Studio contact form stores the name, business name and message text neither in Local Storage nor in Session Storage. Entered values exist only in the current memory state of the open page until the form is sent or cleared, or the page is reloaded or closed. Processing of contact requests that are actually sent is described in the Privacy Policy.

ABS Studio does not maintain a central database containing full IP addresses and individual consent histories. Text versions, category structure, implementation date and technical test results may be retained to demonstrate the configuration.

8.1 abs_cookie_consent_v2 — technology: Local Storage; provider and category: ABS Studio, necessary; purpose and content: necessary, analytics and externalContent categories, selection and expiry times, Banner and Policy versions; duration: six months or until withdrawal, browser cleanup, record damage or version change; legal basis: section 25(2) no. 2 TDDDG and, where applicable, Article 6(1)(f) GDPR.

8.2 abs_locale_v1 — technology: Local Storage; provider and category: ABS Studio, necessary; purpose and content: non-identifying language code plus selection time, expiry time and technical structure version; duration: six months or until a language change, browser cleanup or removal by the website mechanism; legal basis: section 25(2) no. 2 TDDDG and, where applicable, Article 6(1)(f) GDPR.

8.3 abs_theme_v1 — technology: Local Storage; provider and category: ABS Studio, necessary; purpose and content: non-identifying light or dark selection plus selection time, expiry time and technical structure version; duration: six months or until a theme change, browser cleanup or removal by the website mechanism; legal basis: section 25(2) no. 2 TDDDG and, where applicable, Article 6(1)(f) GDPR.

8.4 Google Analytics 4 — _ga; technology: first-party cookie; provider: Google Analytics; purpose: pseudonymous browser distinction for usage statistics; current duration no more than two years; legal basis: section 25(1) TDDDG and Article 6(1)(a) GDPR. The cookie is created only after consent unless prevented by browser or privacy settings.

8.5 Google Analytics 4 — _ga_*; technology: first-party cookie; provider: Google Analytics; purpose: retaining session state and the technical state of the relevant GA4 property; current duration no more than two years; legal basis: section 25(1) TDDDG and Article 6(1)(a) GDPR. User-level and event-level data is retained in GA4 for 14 months; this is not the browser-cookie lifetime.

8.6 External content — Before External content consent, external iframes are not created, have no active src and make no network requests. The following list is generated from the same validated configuration that provides the website's portfolio and technology items:

Gotham Barbershop — Domain: gotham.com.ua; Purpose: Interactive preview of a real client project.; Operator: Gotham Barbershop; Privacy information: not separately specified.

ABS Studio — Domain: abs-studio.de; Purpose: Interactive preview of the ABS Studio website.; Operator: Dmytro Shapovaliuk (ABS Studio); Privacy information: https://abs-studio.de/de/datenschutz.

Dmytro Portfolio — Domain: dmytroshapovaliuk.netlify.app; Purpose: Interactive preview of a personal portfolio project.; Operator: Dmytro Shapovaliuk; Privacy information: not separately specified.

React — Domain: react.dev; Purpose: Interactive view of the official technology documentation.; Operator: Meta Platforms, Inc.; Privacy information: https://opensource.fb.com/legal/privacy/.

Next.js — Domain: nextjs.org; Purpose: Interactive view of the official technology documentation.; Operator: Vercel Inc.; Privacy information: https://vercel.com/legal/privacy-policy.

TypeScript — Domain: www.typescriptlang.org; Purpose: Interactive view of the official technology documentation.; Operator: Microsoft Corporation; Privacy information: https://privacy.microsoft.com/privacystatement.

Tailwind CSS — Domain: tailwindcss.com; Purpose: Interactive view of the official technology documentation.; Operator: Tailwind Labs; Privacy information: https://tailwindcss.com/privacy.

GSAP — Domain: gsap.com; Purpose: Interactive view of the official technology documentation.; Operator: Webflow, Inc.; Privacy information: https://webflow.com/legal/privacy.

Google Analytics 4 is used for statistical analysis of visits, page views and interactions. ABS Studio applies full prior blocking: Google Analytics and Google Tag Manager are not loaded before Analytics consent; _ga and _ga_* are not set; no analytics events, page views, consent pings or cookieless pings are sent to Google.

After consent, the Analytics script is dynamically loaded only once. Route-change page views are recorded only while valid Analytics consent exists. Google Analytics may process a shortened or technically processed IP address, date and time, page viewed, approximate location, browser, device, operating system, screen resolution, browser language, traffic source, technical interaction parameters and pseudonymous Client or Session IDs. Names, e-mail addresses, telephone numbers, business names from the contact form, payment data, private correspondence, contact-form text and URL parameters containing personal data are not sent.

After withdrawal, future Analytics events stop, an already loaded Google API is set to denied, _ga and _ga_* are removed for abs-studio.de, injected Analytics scripts are removed where technically possible and the page is safely reloaded. Google Signals, ads personalization, remarketing, Google Ads links, enhanced conversions and user-provided data are not used.

Further information about Google Ireland Limited, Google LLC, data categories, international transfers and user rights is provided in the Privacy Policy.

10.1 Without consent: No external iframe is created, no external src is set, and no prefetch, prerender, preconnect, dns-prefetch or preview SDK is used. A click opens the exact HTTPS address in a new tab with protection against access to the original browser window. The target website's privacy and cookie rules then apply.

10.2 With consent: Only a click on a specific item creates that item's iframe and assigns its src. The exact domain is shown before opening, in the modal and next to the Open in new tab control. The user's browser connects directly to the external domain. Its operator may receive the IP address, browser, device, operating system, request time, requested URL and technical headers and may use its own cookies, Local Storage, JavaScript, analytics or other services.

The external operator remains responsible for its own website and any separate consent required there. Consent in ABS Studio permits only the loading of the displayed domain within abs-studio.de and does not replace consent required by the target website.

10.3 Technical restrictions: iframes use lazy loading, referrerPolicy=no-referrer and a sandbox limited to permissions necessary for actual display. External iframes are never preloaded. On withdrawal, active iframes are removed immediately and future clicks open a new tab. ABS Studio cannot delete cookies already set by an external domain; they must be managed through the browser or target website.

11.1 Netlify: The website is hosted by Netlify. In the current static configuration, ABS Studio does not use separate Netlify analytics cookies on abs-studio.de. Netlify and infrastructure providers may process technical server data for delivery, security and stability. Details are provided in the Privacy Policy.

11.2 Stripe: Payment buttons are ordinary Stripe Payment Links or links to Stripe Checkout. Stripe.js, Embedded Checkout, Stripe iframes and preconnect to Stripe are not used before a click. Stripe's own cookies and privacy terms apply after the user moves to Stripe.

11.3 Other links: Links to GitHub, OpenAI, Netlify, WhatsApp, Telegram, e-mail and other services are ordinary external links without an SDK, preview widget, plugin or external JavaScript before a click.

Cookie settings can be used at any time to view and change the current choice, grant or withdraw Analytics or External content separately, or select only necessary technologies.

After Analytics is withdrawn, no future analytics events are sent, Google Analytics is not loaded on future visits, _ga and _ga_* are deleted and the page is reloaded. After External content is withdrawn, active iframes are removed immediately, new iframes are not created and future clicks open new tabs.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Browsers commonly allow users to view and delete cookies, clear Local Storage and website data, block all or third-party cookies and configure automatic deletion on closing.

Deleting abs_cookie_consent_v2 causes the Cookie Banner to appear again. Deleting abs_locale_v1 or abs_theme_v1 removes the stored language or theme preference. If Local Storage is fully blocked, the Banner may reappear or language and theme cannot be remembered; the main content remains available.

This Policy is updated before new or changed technologies are used, particularly when cookie names or Local Storage keys, categories, purposes, durations, providers, Google Analytics or GTM configuration, the consent mechanism, iframes, maps, videos, chats, booking systems, social plugins, marketing technologies or legal requirements change.

A material change to purposes, categories or providers results in a new consent version and the Cookie Banner being shown again.

Questions about cookies and consent management can be sent to dmytroshapovaliuk.de@gmail.com. Rights of access, correction, erasure, restriction, withdrawal and complaint are described in the Privacy Policy.

Competent supervisory authority: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf, Germany, e-mail: poststelle@ldi.nrw.de, https://www.ldi.nrw.de/.