Cookies policy
What we store in your browser, the third-party technologies we load, why we use them and how to control them.
Last updated: 13 July 2026
1. What cookies are
A cookie is a small file stored on your device by your browser. Similar technologies, such as local storage, let a website remember information between visits, for example your language, your theme or your session. This policy also covers third-party technologies we load on certain pages and our cookieless analytics.
2. Our approach
On this public website we use only strictly necessary cookies and preference cookies that are set when you explicitly choose a language or theme. We do not use advertising or cross-site tracking cookies, and no cookie on this site requires consent under the ePrivacy rules - which is why we do not show a cookie banner. We measure site usage with self-hosted, cookieless analytics that stores nothing on your device (see section 4). If we ever introduce a technology that requires consent, we will ask for it first.
3. Cookies we use
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| .AspNetCore.Culture | Gapfy | Remembers your chosen language. Set only when you switch language. | Preference | 1 year |
| gapfy.theme | Gapfy | Remembers your light or dark theme. Set only when you pick a theme. | Preference | 1 year |
| GapfyWebsite | Gapfy | Stores interface theme settings for site components. | Preference | 1 year |
| .AspNetCore.Antiforgery.* | Gapfy | Protects forms (such as the contact form) against cross-site request forgery. | Necessary | Session |
| ContainerAppsAffinity* | Gapfy (Microsoft Azure hosting) | Keeps your session connected to the same server so interactive pages (forms) work correctly. | Necessary | Session |
4. Analytics and third-party technologies
- Cookieless analytics (Umami). We measure how this website is used with Umami, analytics software we run on our own EU infrastructure (analytics.gapfy.io). It sets no cookies and stores nothing on your device. Visitors are counted through a salted identifier that resets every day; your IP address is processed only momentarily to compute it and is never stored; there is no cross-site tracking; and no third party receives the data. Because nothing is stored on or read from your device, this does not require consent; the processing rests on our legitimate interest, described in our Privacy policy, which also explains your right to object.
- Cloudflare Turnstile. Protects our forms - the contact form, job application forms and candidate privacy requests - against spam and bots without intrusive challenges. The Turnstile script is loaded only on pages with such a form; loading it transmits your IP address to Cloudflare, which processes it for security purposes only. The widget itself sets no cookies, and Cloudflare states Turnstile is not used for advertising or cross-site tracking.
The fonts on this website are self-hosted on our own servers; no font request is sent to Google or any other third party.
5. Our products
When you sign in to our products (for example at maestro.gapfy.io or harmony.gapfy.io) they set their own strictly necessary cookies for authentication and to remember your language and preferences. The same cookieless, self-hosted analytics described in section 4 also runs in our signed-in web products (no cookies, no third party, EU-hosted). The Gapfy Harmony browser extension and our desktop products (Gapfy Echo and Gapfy Riff) store equivalent information - including your sign-in session and a small cache of your account, collections and preferences - in local browser or device storage rather than in cookies. These are essential to keep you signed in and to let the product work, and cannot be switched off while you use the product. When a saved link is displayed, Gapfy Harmony may request that site's icon (favicon) from DuckDuckGo; that request carries the site's domain and, like any web request, your IP address. DuckDuckGo does not receive the link itself or any account data.
6. Managing your choices
The preference cookies above are set only when you actively choose a language or theme; to remove them, or to block cookies generally, use your browser settings. Blocking the strictly necessary cookies will break parts of the site, such as form submission and interactive pages; blocking the preference cookies only means your language and theme choices are not remembered.
7. Changes
We update this page whenever the technologies we use change. The date at the top reflects the most recent update.
8. Who we are
This website is operated by GAPFY UNIPESSOAL LDA (Porto, Portugal). How we process personal data - including the analytics described above, the legal bases, recipients and your rights - is set out in our Privacy policy.
This English-language version is the authoritative, legally binding version of this document. Translations are provided for convenience only.