This policy explains how Dimmi ApS uses cookies and similar technologies on dimmi.dk and in the Dimmi platform at app.dimmi.dk.

It supplements the Privacy Policy, which explains how Dimmi handles personal data generally.

Dimmi ApS · CVR no. 46 63 85 73 · Karen Blixens Plads 16, 2300 København S · info@dimmi.dk

1. The short version

We do not track you, and we do not use cookies to measure anything.

We use no advertising cookies, no third-party cookies, and no cross-site tracking. There is no Google Analytics on this site, no advertising pixel, and no tag from any social network. Nothing about your visit is shared with a third party for their own purposes.

We do measure how the website is used — which pages are read, where visitors arrive from — but we do it with open-source software we run ourselves, on our own servers in the EU. It stores nothing on your device, sets no cookies, and does not identify you or follow you between sites. It produces aggregate statistics, not profiles, and no analytics company is involved at any point.

The only cookies we set are the handful needed to make the site and the platform work at all. They are listed in full below.

Because we set no cookies that require consent, there is no cookie banner and none is needed. Under the Danish cookie order, consent is required only for storing or reading information on your device beyond what is strictly necessary — and we do neither. If that ever changes, a consent banner will appear before any such cookie is set, and this policy will be updated first.

2. What cookies are

A cookie is a small text file stored on your device when you visit a website, which lets the site recognise your device as you move between pages. This policy also covers similar technologies — in particular sessionStorage, which holds information only until you close the tab.

3. The cookies Dimmi uses

3.1 On the website, dimmi.dk

Name	Type	Set by	Purpose	Lifetime
`__dpl`	Cookie	Dimmi	Routes your request to the correct version of the site, so that you do not receive a mix of old and new files during a deployment	24 hours
`session-id`	Cookie	Dimmi	Identifies your browsing session so the site behaves consistently across page loads	30 minutes
`tsr-scroll-restoration-v1_3`	sessionStorage	Dimmi	Remembers your scroll position when you navigate back, so the page does not jump to the top	Until you close the tab

All three are strictly necessary. Both cookies are set as Secure and SameSite=Lax, so they are sent only over an encrypted connection and are not sent from other websites. None is used to profile you, none is read by a third party, and none follows you to other websites.

We measure how the website is used with Umami, an open-source analytics tool that we run ourselves on our own servers in the EU. No analytics company is involved, and no data about your visit leaves Dimmi's own infrastructure.

Umami sets no cookies and stores nothing in your browser. It does not fingerprint your device and does not give you a persistent identifier, so it cannot recognise you tomorrow or follow you to another website.

What is recorded is: the page you viewed, the site or campaign you arrived from, and coarse technical information — browser, device type, screen size, language and country. Your IP address is used momentarily to derive your country and to count your visit as distinct from others on the same day, and is not stored. The identifier used for that daily count is a one-way hash that is regenerated every day, so visits cannot be linked across days.

No profile is built. Nothing is sold, shared or combined with any other source. Raw visit records are deleted after 12 months; only aggregate statistics are kept beyond that.

Because nothing is stored on or read from your device, this falls outside the consent requirement in the Danish cookie order. The legal basis for the limited processing involved is Dimmi's legitimate interest in understanding how its own website performs, under Article 6(1)(f) of the GDPR. You may object at any time by writing to info@dimmi.dk.

3.3 In the platform, app.dimmi.dk

Before you sign in, the platform sets no cookies at all.

When you sign in, one or more strictly necessary cookies are set to keep you authenticated. They are used solely to maintain your signed-in session, and are cleared when you sign out. Authentication is provided by WorkOS, which is listed as a sub-processor at dimmi.dk/en/subprocessors. The platform cannot keep you signed in without them.

The platform sets no analytics cookies, no marketing cookies and no third-party cookies of any kind.

3.4 What Dimmi does not use

For the avoidance of doubt, and as at the date of this version, dimmi.dk and app.dimmi.dk contain:

no Google Analytics, Google Tag Manager, or any analytics tool that uses cookies;
no LinkedIn Insight Tag, Meta Pixel or any other advertising or conversion tracking;
no session recording, heatmapping or behavioural profiling;
no embedded third-party content that sets cookies;
no cookies read by any party other than Dimmi; and
no analytics or tracking of any kind inside the platform at app.dimmi.dk — the tool described in 3.2 runs on the public website only, and the platform is kept permanently free of it.

The only outbound link to a social network on the site is an ordinary link to Dimmi's LinkedIn page in the footer. Following it takes you to LinkedIn, where LinkedIn's own cookie rules apply.

4. Legal basis

Strictly necessary cookies are placed without consent, as permitted by section 4 of the Danish cookie order (cookiebekendtgørelsen, BEK nr. 1148 af 09/12/2011) and Article 5(3) of the ePrivacy Directive.

Where a necessary cookie also involves processing personal data, the legal basis is Dimmi's legitimate interest in operating a secure and functioning website and platform, under Article 6(1)(f) of the GDPR — or, for the session cookie in the platform, performance of the agreement with the Client under Article 6(1)(b).

Previous versions of this document are available at dimmi.dk/en/legal/archive.

Cookie Policy