Cookie policy
What is stored on a visitor's device on webcrew.ai and in the product, and how consent is asked and withdrawn.
Published 1.0 · 2026-09-18
Last updated: 18 September 2026
This statement explains what JKC Software B.V. stores on your device when you visit webcrew.ai or use the WebCrew application at app.webcrew.ai, and what your choices are. It covers cookies and the equivalent techniques — local storage, session storage and pixels — because Dutch law (article 11.7a of the Telecommunications Act) treats them the same way.
The Privacy Notice explains what happens to personal data once it reaches us. This statement is only about what is placed on your device.
1. The rule we work to
Two kinds of storage need no consent: what is strictly necessary to deliver what you asked for, and analytics configured so as to be no more than minimally privacy-invasive. Everything else needs your prior consent — freely given, specific, informed and unambiguous, which means a real choice where refusing is as easy as accepting, and nothing non-essential is placed before you choose.
2. webcrew.ai — the marketing site
The site sets no cookies of its own. Two values are kept in your browser's local storage and never leave it:
| What | Purpose | Lifetime |
|---|---|---|
| The country you picked for prices | Showing prices in your currency on your next visit | Until you clear your browser storage |
| Whether you dismissed the launch-offer bar | Not showing it again | Until you clear your browser storage |
Analytics, and only after you agree. If you accept, webcrew.ai loads Google Tag Manager, which loads Google Analytics 4. It measures which pages are visited, the country a visit came from, and which buttons, forms, FAQ items and calculators were used — each as a named event carrying the page and the element, never personal data. Google's own documentation lists the cookies it sets for this; in practice they are _ga and _ga_<id>, first-party, and they last up to two years unless you withdraw sooner. Google Ireland Limited acts as our processor, and the Subprocessor Register states the transfer mechanism.
Until you agree, none of that loads at all. This is worth being precise about, because "consent mode" often means something weaker. Two things are true here:
- Every consent signal starts at denied, before the tag manager is referenced. Nothing is written to your device.
- The tag manager itself is not fetched until you accept. Most sites load it immediately with the signals set to denied, which writes nothing but does send Google your IP address and the page you are on. We hold the request back instead, so refusing means Google is not contacted at all.
The review copy of the site on proposal.jkc.media loads no analytics under any circumstances.
One request we do make before you choose: the page's fonts are served by Google Fonts, which means your browser fetches a stylesheet from fonts.googleapis.com and the font files from fonts.gstatic.com. That stores nothing on your device, but it does tell Google that a browser at your IP address loaded a page here. It is listed for completeness rather than buried. Self-hosting the fonts to remove this request entirely is a tracked, non-blocking improvement (P-11 in the legal and ISMS inventory); until it ships, this paragraph is the disclosure.
Forms. The contact and plugin-request forms send one email to us through Postmark. Nothing is stored beyond that email, and your address is used only to answer you.
3. app.webcrew.ai — the application
Strictly necessary only. No analytics, no advertising, no third-party measurement of any kind inside the product.
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
| Session cookie | Keeps you signed in. HttpOnly, Secure, SameSite; encrypted, and useless to anyone who copies it without the matching server-side record | First-party cookie | Session, extended on activity, expiring per the sign-in policy |
| PKCE cookie | Protects the sign-in exchange against interception. Set only during sign-in | First-party cookie | Minutes; deleted when sign-in completes |
| Interface preferences | Remembers choices such as a collapsed sidebar. Never sent to us | Local storage | Until you clear it |
4. What we do not use, anywhere
- No advertising or retargeting cookies, and no advertising networks.
- No social-media tracking pixels.
- No cross-site tracking, no data brokers, and nothing sold to anyone.
- No cookie wall: refusing non-essential storage costs you no functionality.
5. Your choices, and how to change them
When you first arrive you are asked once. The banner offers Accept analytics and Reject analytics as the same kind of button, the same size, side by side — refusing takes exactly one click, the same as accepting — and a third option, Choose per purpose, if you would rather decide category by category. Nothing non-essential is loaded while the question is open, and there is no wall: you can ignore the banner and read the entire site.
To change your mind, use Cookie settings at the bottom of any page. It reopens the same choice. Turning analytics off deletes the _ga cookies immediately and stops any further measurement; it cannot un-send what was already measured while consent stood, and this statement will not pretend otherwise.
We ask again after six months. Your choice is stored in a first-party cookie called wc_consent that expires then, so consent is renewed rather than assumed indefinitely.
In your browser, you can delete storage for this site at any time and set your browser to block it. Blocking the strictly necessary items in section 3 means sign-in will not work.
With JavaScript off, there is no banner and no analytics. The site works.
6. Third parties
Google Ireland Limited (analytics) and Postmark (form email) are listed in the Subprocessor Register with their location and transfer mechanism, and each acts as our processor. Section 6 of the Privacy Notice explains the safeguard relied on where a recipient is outside the EEA.
7. Changes
We update this statement when what we store changes, and we ask for consent again where a change requires it. The date at the top is the version date.
8. Contact
Questions: privacy@webcrew.ai · JKC Software B.V., Philitelaan 57, 5617 AK Eindhoven, the Netherlands.