Cookies & trackers

Cookies policy.

Our approach is simple : no tracking cookies, no advertising, no profiling. Here is what that actually means when you visit the site.

What we do not do

The luxapps.lu website sets no audience-measurement, advertising or profiling cookie. We do not use :

  • No Google Analytics, Tag Manager or advertising pixel.
  • No third-party social-network cookie.
  • No session-recording or heatmap script.
  • No A/B testing relying on a client-side identifier.

Anonymous, cookieless audience measurement

To understand the site's audience (most-viewed pages, traffic sources, countries), we operate a cookieless audience measurement hosted on our servers in Europe, using Matomo — an open-source solution self-hosted on stats.luxgap.com (Luxembourg) — complemented by an internal count. In practice :

  • Matomo is configured without cookies and with IP-address anonymisation ; no advertising identifier is used, and the browser's « Do Not Track » setting is respected.
  • Server-side, an ephemeral identifier is computed by SHA-256 hashing of your IP address and user-agent with a daily rotating salt. The clear-text IP address is never stored, and the salt changes every day, which prevents any cross-day tracking.
  • We record the page viewed, the source (referring domain only, without URL parameters), the country inferred from a local GeoIP database, and the browsing language.
  • Data is kept for 90 days against the visitor identifier. Anonymous aggregates may be kept beyond that.
  • Hosting and processing in Luxembourg / the EU, operated by Luxgap on behalf of Luxapps. No sharing with any third party, no transfer outside the EU, no individual profiling.

This audience measurement, which neither stores nor reads any information on your device, falls outside the scope of consent under Article 5.3 of the ePrivacy Directive. It is also designed to meet the criteria of the CNIL/CNPD guidelines on exempt audience-measurement statistics : strictly limited purpose, no cross-referencing and no cross-site tracking. Browsing the site therefore does not require prior consent.

A complementary measurement (reading time, clicked elements) is being prepared. It will only be enabled after a consent banner is shown and your explicit agreement is obtained. You will be informed as soon as it goes live.

Embedded third-party content (and its implications)

OpenStreetMap map (Contact page)

The Contact page embeds a map provided by OpenStreetMap, a non-profit foundation based in the United Kingdom. When you load this page :

  • Your browser makes requests to OpenStreetMap's servers to fetch the map tiles.
  • Your IP address and user-agent are sent to OpenStreetMap.
  • OpenStreetMap does not, to our knowledge, set any advertising tracking cookie.

If you do not want these requests to be made, do not open the Contact page — the contact details are repeated in the adjacent text block and on the Legal notice page.

Outbound links

Some pages link to external sites (Google Maps for directions, partner sites, public authorities). No call is made until you click the link. External sites have their own privacy policies.

Internal tools available via a parameter

When you add ?tweaks=1 to a page's URL, a small design-tools panel is shown and three libraries (React, ReactDOM, Babel standalone) are loaded from the unpkg.com CDN. This mode is reserved for our design team and is not enabled by default : it is only triggered by this explicit action.

Technical cookies

No cookie is set to operate the site. The only state kept locally is an optional localStorage entry to remember your preferences if you enable ?tweaks=1 above — it stays in your browser and is never sent to our servers.

Your rights

For any question, see our privacy policy. To exercise your rights : .

Last updated: 16 June 2026.