Legal · Fortune Molecule
Cookies policy
Last updated: 28 May 2026 Version: 1.2
This Cookies Policy explains what cookies and similar technologies are, how Fortune Molecule, Lda. ("we", "us", "our") uses them on www.fortunemolecule.com (the "Website"), and how you can manage your preferences. It supplements our Privacy Policy and is provided in accordance with Article 5(3) of the ePrivacy Directive 2002/58/EC, the GDPR, and the Portuguese Lei n.º 41/2004.
1. What are cookies?
Cookies are small text files placed on your device (computer, tablet, smartphone) when you visit a website. Similar technologies include local storage, session storage, pixels, and tracking scripts. Throughout this policy, we refer to all these technologies collectively as "cookies".
Cookies allow a website to recognise your device, remember your preferences, provide functionality, and produce statistics about how the site is used.
2. How we use cookies
This Website is deliberately minimal in its use of cookies. We do not load HubSpot tracking pixels or any advertising / cross-site profiling cookies. Two analytics tools are used:
- Cloudflare Web Analytics — first-party, cookie-free, edge-injected; runs by default and requires no consent (no personal data is collected, no cookies are set).
- Google Analytics 4 — third-party, sets
_ga/_ga_*cookies; loaded only after you opt in via the cookie banner's "Analytics" category. IP anonymisation is enabled, Google Signals (cross-device tracking) is disabled, and ad-personalisation signals are disabled.
We use cookies only after you have given specific, freely-given, informed, and unambiguous consent through the cookie banner displayed on your first visit, except for cookies that are strictly necessary for the Website to function (recital 66 of the ePrivacy Directive).
You can change or withdraw your consent at any time by clicking "Cookie Settings" in the footer of any page.
3. Categories of cookies
We classify the cookies used on this Website into the following categories:
3.1 Strictly necessary
These cookies are essential for the Website to function and cannot be switched off. They are usually set in response to actions you take, such as setting your privacy preferences or submitting a form. Legal basis: legitimate interest / strict necessity — no consent required.
3.2 Functional
These cookies enable enhanced functionality and personalisation. Legal basis: consent. No functional third-party cookies are loaded in the current Website build.
3.3 Analytics / performance
These cookies help us understand how visitors interact with the Website. Legal basis: consent. Google Analytics 4 is loaded under this category when you opt in; see Section 4 below for the specific cookies set.
3.4 Marketing / advertising
Used to identify visitors across different websites, build interest profiles, and deliver advertising. Legal basis: consent. No marketing cookies are loaded in the current Website build.
The four-category cookie banner is kept as a future-proofing structure. At the time of this writing, only the strictly-necessary category is actually populated.
4. Cookies used on this Website
Strictly necessary
| Name | Provider | Purpose | Duration |
|---|---|---|---|
fm_cc | fortunemolecule.com | Stores your cookie consent choices so the banner doesn't reappear on every page | 180 days |
cf_chl_* | Cloudflare Turnstile (challenges.cloudflare.com) | Anti-spam / bot-management cookies set by the Turnstile widget on the contact form. Required to verify that form submissions are not automated. Set only on the /contact page (and its localised equivalents) when the form is loaded. | Session, with a small number of short-lived (~30 min) challenge tokens |
__cf_bm | Cloudflare | Cloudflare bot-management cookie that may be set at the edge for security / DDoS protection. Considered strictly necessary for the secure operation of the Website. | 30 minutes |
Analytics — loaded only with your consent
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google LLC (www.googletagmanager.com / www.google-analytics.com) | Distinguishes unique visitors so we can count returning vs. new sessions. | 2 years (we have set GA4 data retention to 14 months as the underlying record retention) |
_ga_<CONTAINER-ID> | Google LLC | Persists the visitor's session state for GA4. | 2 years |
These cookies are set only after you click "Accept all" or enable the Analytics category in the cookie banner. If you toggle the category off later, the cookies are removed and no further analytics hits are sent in that browsing session.
Functional, Marketing
None at present. No advertising trackers, no remarketing pixels, no social-share trackers are loaded by this Website. If these categories become populated in a future iteration, this policy will be updated and the cookie banner will re-prompt for consent.
Note on the contact form: the form posts to a Cloudflare Pages Function which then communicates with HubSpot server-side to create a contact record. No HubSpot script runs in your browser, and no HubSpot cookie (
__hstc,hubspotutk,__hssc, etc.) is set.
Note on data residency: Form data is transferred to HubSpot's servers in the United States under the European Commission's Standard Contractual Clauses. Google Analytics 4 data is processed by Google LLC in the United States under the EU–U.S. Data Privacy Framework (Google is a certified participant). Cloudflare operates a global edge network with EU presence; see Privacy Policy, Section 8 for details.
5. How to manage your consent
5.1 Through this Website
When you first visit, a cookie banner asks you to choose between:
- Accept All — all categories are enabled (currently equivalent to strictly-necessary only, since no other categories are populated);
- Reject All — only strictly-necessary cookies are set;
- Customise — choose categories individually.
You can return and change your choice at any time by clicking "Cookie Settings" in the footer of the Website.
5.2 Through your browser
Most browsers allow you to view, manage, and delete cookies. The links below provide instructions for the most commonly used browsers:
- Google Chrome: https://support.google.com/chrome/answer/95647
- Mozilla Firefox: https://support.mozilla.org/kb/cookies-information-websites-store-on-your-computer
- Apple Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac
- Microsoft Edge: https://support.microsoft.com/help/4027947
5.3 Through industry opt-out tools
You can also use industry opt-out platforms such as Your Online Choices (EU): https://www.youronlinechoices.eu.
Note: blocking strictly-necessary cookies in your browser may cause parts of the Website (in particular the contact form's spam protection) to stop functioning correctly.
6. Changes to this policy
We may update this Cookies Policy from time to time, in particular when we add or remove tools that set cookies. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted in the cookie banner so that you can review and re-consent.
7. Contact
For any question about this Cookies Policy or to exercise your rights:
Email: gdpr@fortunemolecule.com Postal: Fortune Molecule, Lda., Rua de Júlio Dinis 748, 5.02, 4050-012 Porto, Portugal
See also our Privacy Policy.
