Cookie policy
Updated November 5, 2026.
This policy lists the cookies and similar storage the site actually uses. It is based on the pages and scripts shipped with the site, not on a generic advertising list.
What was checked
The public pages load typefaces, a stylesheet, images, and one script from this same website. The script opens and closes the mobile menu and submits the quote form. It does not write to localStorage or sessionStorage. It does not call an analytics, advertising, or social network. No third-party script, font, or image host is used for the design.
The session cookie
When you open the quote form, the server starts a PHP session and sets a cookie, usually named PHPSESSID. The cookie holds a session identifier. The session stores a security token for a submission made without JavaScript. With JavaScript, the browser instead requests a single-use token from this site just before sending. That request does not set another cookie. The server keeps only a hash of the single-use token.
- Purpose: keep the quote form’s session token for a submission without JavaScript.
- Type: strictly necessary.
- Duration: until you close the browser, unless the host changes the session lifetime.
- Flags: HttpOnly, so page scripts cannot read it, and SameSite=Lax. The Secure flag is set on the published HTTPS site.
Other pages do not need this cookie. It is created for the contact page and for a form submission handled by that page, not for browsing the service pages. Blocking the cookie blocks the no-JavaScript path. The JavaScript path can still send the form, because it uses the single-use token rather than the session cookie.
Cookies that are not used
The site does not set analytics cookies, advertising cookies, or social-media cookies. It does not use a tag manager. Because there are no optional cookies to turn on or off, the site does not show a cookie-settings banner. A banner that did not change any real cookie would be misleading. If optional tracking is added later, it will not load before this policy and the site are updated to match, and a real choice will be added where the law requires one.
Server logs are not cookies
The host may still record ordinary connection logs. Those logs are described in the privacy policy. They are not cookies stored in your browser by this application.
How to control the session cookie
You can refuse cookies in your browser. If you block the session cookie and also disable JavaScript, the quote form cannot keep a security token and the submission will be rejected. If JavaScript is on, the form can still be sent with the single-use token. Browsing the other pages does not require the cookie.