Cookies

How this works

We use Google Tag Manager to manage measurement tools. It loads in Consent Mode v2 with all analytics and advertising storage denied by default — so no measurement cookie is created when you arrive.

On your first visit a bar asks you. If you agree, measurement tools run and their cookies are created. If you decline, nothing is created, and your decision is remembered so we do not ask again.

The “Decline” button is as prominent as “Agree” by design — hiding or shrinking refusal invalidates consent in law, and we do not use that pattern.

What is created if you agree

The tags configured in the Google container run, and may set measurement cookies such as _ga and _ga_* to distinguish visits, typically lasting two years. Their purpose is statistical: how many visitors, from which page, and which content is read.

We do not use this data to identify you personally and we do not sell it. It is processed in part on Google's servers and is subject to their privacy policy alongside ours.

The container may hold advertising tags in future; they are governed by the same consent and do not run before it.

The one strictly necessary cookie

A cookie named mkt_session is created only when a member of our team signs in to the dashboard. An ordinary visitor never receives it.

Its only function is holding the session. It is httpOnly (no script can read it), SameSite=Lax, sent over HTTPS only, and it expires after eight hours. It contains no personal data — only a signed token.

This is a strictly necessary cookie and requires no consent, because sign-in cannot work without it.

One local storage entry

We keep your measurement decision in the browser's local storage under the key mkt-consent. It is not a cookie and is never sent to any server; its purpose is to avoid asking you on every visit. Clearing it in your browser settings brings the question back.

Third party: Google Fonts

The fonts you are reading load from fonts.googleapis.com and fonts.gstatic.com. That request sets no cookie, but Google does receive your IP address and browser type by virtue of it being a network request to them — and this happens before consent, because it is a condition of the page rendering at all.

It can be removed entirely by self-hosting the fonts, which is a change we have on the table.

Changing your decision

Clear this site's data in your browser settings (or just the mkt-consent key) and the question returns. Declining measurement disables nothing on the site — every page and every form works exactly the same.