Legal
Cookie policy
Last updated: September 2026. Policy version: 2.1.
Short version
We use a first-party Google Analytics 4 pair to understand how visitors use the site — and only if you opt in via the banner or the cookie preferences page. Cloudflare Turnstile may set a transient cookie while it checks the contact form isn't being submitted by a bot. No advertising cookies. No cross-site trackers. No sale of data. Wherever you are, analytics stays off until you opt in.
What counts as a "cookie" here
This page covers cookies and other storage technologies that sit on your device — principally cookies and browser localStorage. We split them out honestly below rather than calling everything a "cookie", because the lifetime and transmission rules are different.
Cookies we set
| Name | Purpose | Set by | Lifetime | Category |
|---|---|---|---|---|
| _ga | Google Analytics. Distinguishes unique visitors for aggregate traffic reporting. | Google (first-party) | 2 years | Analytics (consent required) |
| _ga_* | Google Analytics 4. Holds session state for the specific GA4 property. | Google (first-party) | 2 years | Analytics (consent required) |
| cf_clearance, __cf_bm | Cloudflare Turnstile. Short-lived proof that the browser has passed a bot-check when the contact form is submitted. | Cloudflare (third-party) | Up to 30 minutes | Strictly necessary (security) |
GA4's browser cookies live for two years by default. Separately, our GA4 property is configured with a 14-month user-level data retention on Google's servers, after which user- and event-level data is aggregated or deleted.
Browser storage we use (not cookies)
| Key | Purpose | Stored in | Lifetime |
|---|---|---|---|
| vantara_cookie_consent | Remembers your analytics choice so the banner doesn't re-appear. Never transmitted to our servers. | localStorage | Until you clear it |
Consent, and where it applies
Analytics is opt-in for every visitor, wherever you are. Until you accept, Google's analytics script isn't loaded, so nothing is written to your browser for analytics and nothing is sent to Google Analytics. If you later reject or clear your choice on the cookie preferences page, we stop collection and delete the _ga cookies. We also use Google Consent Mode v2, with analytics storage denied by default, as a second safeguard.
Advertising signals (ad_storage, ad_user_data, ad_personalization) stay denied permanently. We don't run ad cookies and don't plan to.
How to change your mind
You can accept, reject, or clear your analytics choice at any time on the cookie preferences page. Rejecting or clearing your choice deletes the analytics cookies. Clearing it also wipes vantara_cookie_consent from your browser's localStorage and shows the banner again.
You can also block or delete cookies in your browser's own settings. If your browser blocks local storage, the banner will keep appearing (because your choice can't be saved), but analytics won't run unless you press Accept.
Who processes what
The cookies above are set by us directly (first-party) or by our sub-processors on our behalf. The full list of sub-processors — including Google, Cloudflare, and SendGrid — is in the privacy policy , along with where they store data and the transfer safeguards that apply.
Questions
Anything unclear, or something on this page out of date? Email [email protected] and we'll fix it.
Related
- Privacy policy : what personal data we collect and why.
- Cookie preferences : change your consent choice.
- Terms of service : the rules for using this website.