Legal
Cookie policy
Last updated: April 2026. Policy version: 2.0.
Short version
We use a first-party Google Analytics 4 pair to understand how visitors use the site — and only if you opt in via the banner or the cookie preferences page. Cloudflare Turnstile may set a transient cookie while it checks the contact form isn't being submitted by a bot. No advertising cookies. No cross-site trackers. No sale of data. If you're in the UK, EU, EEA, or Switzerland, analytics stays off until you opt in.
What counts as a "cookie" here
This page covers cookies and other storage technologies that sit on your device — principally cookies and browser localStorage. We split them out honestly below rather than calling everything a "cookie", because the lifetime and transmission rules are different.
Cookies we set
| Name | Purpose | Set by | Lifetime | Category |
|---|---|---|---|---|
| _ga | Google Analytics. Distinguishes unique visitors for aggregate traffic reporting. | Google (first-party) | 2 years | Analytics (consent required) |
| _ga_* | Google Analytics 4. Holds session state for the specific GA4 property. | Google (first-party) | 2 years | Analytics (consent required) |
| cf_clearance, __cf_bm | Cloudflare Turnstile. Short-lived proof that the browser has passed a bot-check when the contact form is submitted. | Cloudflare (third-party) | Up to 30 minutes | Strictly necessary (security) |
GA4's browser cookies live for two years by default. Separately, our GA4 property is configured with a 14-month user-level data retention on Google's servers, after which user- and event-level data is aggregated or deleted.
Browser storage we use (not cookies)
| Key | Purpose | Stored in | Lifetime |
|---|---|---|---|
| vantara_cookie_consent | Remembers your analytics choice so the banner doesn't re-appear. Never transmitted to our servers. | localStorage | Until you clear it |
Consent, and where it applies
We use Google Consent Mode v2. Analytics storage is denied by default for visitors in the UK, EU, EEA, and Switzerland, and nothing is written to your browser for analytics until you accept. Elsewhere, analytics defaults to granted under legitimate interests, but you can opt out at any time on the cookie preferences page.
Advertising signals (ad_storage, ad_user_data, ad_personalization) stay denied permanently. We don't run ad cookies and don't plan to.
How to change your mind
You can accept, reject, or clear your analytics choice at any time on the cookie preferences page. Clearing your choice wipes vantara_cookie_consent from your browser's localStorage and shows the banner again on your next visit.
You can also block or delete cookies in your browser's own settings. If you block our analytics cookies at the browser level, the banner will still appear (because the consent record can't be written) but analytics still won't run.
Who processes what
The cookies above are set by us directly (first-party) or by our sub-processors on our behalf. The full list of sub-processors — including Google, Cloudflare, and SendGrid — is in the privacy policy , along with where they store data and the transfer safeguards that apply.
Questions
Anything unclear, or something on this page out of date? Email [email protected] and we'll fix it.
Related
- Privacy policy : what personal data we collect and why.
- Cookie preferences : change your consent choice.
- Terms of service : the rules for using this website.