Cookies, and your say over them.

1. What this covers

Cookies are small files a website stores on your device. Similar technologies — pixels, tags, and browser local storage — do the same job by different means. Together they let a site remember a choice, measure how it is used, and support advertising.

This policy covers all of them on this website, names each one, and says how long it lasts. It works alongside our Privacy Policy, which explains the wider picture of what we do with personal data.

2. Consent comes first, and it is real

Only strictly necessary items are stored automatically, because without them the site cannot work or cannot honour your own choices. Everything else — analytics and advertising — is stored only after you agree through the cookie banner.

This is enforced technically, not just promised. We use Google Consent Mode v2, and every consent signal is set to denied before the tag manager is even loaded. Decline, and no analytics or advertising tag runs and none of their cookies are written. There is no pre-ticked box anywhere on this site, and Accept and Decline are given equal prominence, because a choice designed to be hard to refuse is not a choice.

3. The categories

• Strictly necessary — always onRequired for the site to function, stay secure, and remember your cookie decision. These need no consent under the ePrivacy rules and cannot be switched off, because switching them off would break the site or lose your preference.
• Analytics — consent requiredHelp us understand how the site is used: which pages are read, how people move between them, and where they give up. Used to improve the site, never to identify you personally.
• Advertising — consent requiredMeasure advertising campaigns and support remarketing and conversion measurement across Google and Meta platforms. These are the ones that follow you between sites, which is exactly why they wait for your agreement.

4. Strictly necessary — the full list

These are the only things stored on your device before you decide anything:

• oryndex-consent — local storage, no expiryYour answer to the cookie banner, stored in your browser's local storage rather than in a cookie, so it is never transmitted to any server with a request. It holds one word — granted or denied — and nothing else. It stays until you change your choice or clear your browser storage.
• Cloudflare Turnstile — no cookie set on this siteWhere the bot-protection challenge is enabled on the contact form, Turnstile checks that a submission comes from a person. It sets no cookie of its own on this website; it works from signals sent with the request, such as your IP address and browser characteristics. It runs only on pages with a form, only in connection with a submission, and it is not used to track you across sites.
• Hosting and delivery — session and securityOur host may set short-lived technical or security identifiers needed to route requests and protect the site from abuse. These carry no advertising or analytics function and are discarded quickly.

5. Analytics and advertising — the full list

These are loaded through Google Tag Manager and fire only after you consent to the matching category. Until then they are not merely inactive — they are not on the page.

• Google Tag Manager — the loaderA tag manager that decides, from your consent choices, which of the tools below may run. It does not itself profile you; it governs when the others are allowed to exist. It is loaded only where a tag container is configured for this site.
• Google Analytics — analytics categoryMeasures site usage. Sets _ga (distinguishes visitors, typically up to 2 years) and _ga_<container-id> (maintains session state, typically up to 2 years). IP addresses are handled by Google's own regional processing before storage.
• Google Ads — advertising categoryMeasures ad conversions and supports remarketing. Sets _gcl_au (stores advertising click information, typically up to 90 days) and may read Google's own conversion-linking identifiers.
• Meta (Facebook) Pixel — advertising categoryMeasures campaign performance and supports audience building on Meta platforms. Sets _fbp (identifies a browser to Meta, typically up to 90 days) and may read _fbc where you arrived from a Meta ad.

6. Changing or withdrawing your consent

Use the Cookie Settings control in the footer of any page. It clears your stored choice and brings the banner back, so you can decide again — withdrawal is exactly as easy as consent, which is what Article 7(3) GDPR requires. The control appears whenever any non-essential tool is configured for this site; if you cannot see it, none is, and there is nothing to consent to or withdraw.

Withdrawing consent stops the relevant tools from loading on your future visits. It cannot retroactively undo measurement that already took place lawfully while consent was in force; for that, use the erasure right described in the Privacy Policy.

You can also delete cookies and block them through your browser's own settings, independently of anything here. Blocking strictly necessary storage may stop parts of the site working — most visibly, the site will ask about cookies on every visit, because the answer has nowhere to live.

7. Opting out at the source

Google offers a browser add-on that opts you out of Google Analytics across every site that uses it, and both Google and Meta provide their own ad-settings controls in your account with them. Those controls operate at their end and apply wherever you go, not only here.

Most browsers also send a Global Privacy Control or Do Not Track signal. Because nothing non-essential loads on this site without an explicit yes, a visitor who never answers the banner is already in the state those signals ask for.

8. Who the third parties are

The analytics and advertising tools above are provided by Google and Meta, who act as independent or joint controllers for the data they collect through them. Their own privacy and cookie policies explain what they then do with it, and you can review them on their websites.

Cloudflare provides bot protection as our processor. Details of every provider involved in running this site, and of the safeguards that apply when data leaves the European Economic Area, are in section 6 and section 7 of the Privacy Policy.

9. Changes

If the cookies or tools we use change, this page is updated and the date below changes with it. Adding anything to the analytics or advertising categories will also reset the consent question, so a choice you made about one set of tools is never silently applied to another. Questions can go to studio@oryndex.com.