Blogs

Field notes on building digital products that last

What we've learned shipping custom web applications, shaping digital strategy and turning data into decisions — written for the people who have to make the call.

Latest

Straight from the team that builds them

01 / 14

Compliance · 5 min read

The cookie banner is up. Google's cookies got there first.

Elevates opened the websites of 21 EU affairs think tanks in a clean browser and clicked nothing. Five stored Google Analytics cookies at once, before the visitor chose anything. Four of those five had a cookie notice on screen while it happened. A notice is not consent.

Read the guide

All articles

The cookie banner is up. Google's cookies got there first.

Elevates opened the websites of 21 EU affairs think tanks in a clean browser and clicked nothing. Five stored Google Analytics cookies at once, before the visitor chose anything. Four of those five had a cookie notice on screen while it happened. A notice is not consent.

Your website works until the person who built it stops answering

A domain name has one field that carries every power: the registered name holder. That name can move the domain, renew it, or delete it. The administrative, technical and billing contacts can do none of those things, whatever they are called. If the holder on your domain is the person who built your site rather than your business, you are renting your own address from someone who has no contract with you.

Instagram tells every AI model not to read your business

Instagram's robots file names the crawlers of OpenAI, Anthropic, Google, Perplexity, Apple and Amazon and blocks every one of them from the entire site. The live fetch that is not blocked returns about 939 kilobytes and roughly fifty characters of readable business fact. No address, no prices, no hours.

The enquiries you never received are the European ones

Most contact forms send their notification email pretending to come from the visitor. Twenty two of twenty nine consumer mail providers now quarantine or reject that, including every French one tested. Gmail does not, which is why the form looks like it works. The fix is a configuration change and costs nothing.

GDPR does not reach you because you are in Cyprus. It reaches you because of who you sell to.

EU law is suspended in the north, so geography does none of the work. What can reach a North Cyprus business is Article 3(2), and the European Data Protection Board published nine factors that decide it. You can check your own site against them in about five minutes.

Have a project in mind?

Let's turn the question into a plan.

Get in touch

Tell us what you're weighing up — we'll give you a straight answer, whether or not it involves working with us.

Cookies

With your permission, we use Google Analytics to see how this site is used. The site works fully either way.Cookie Notice
Your choices are saved.