What gets stored on your device, what each category is for, and how to
change your mind. Our privacy policy is the longer document; this is the part
about cookies.
What is stored, and what is running
Always on
Essential
Keeps the site working: your cookie choice itself, the throttle that stops a form being submitted a
thousand times, and the security cookies our host sets. There is no version of this site that runs without
them, so they are not presented as a choice.
Off by default
Analytics
How pages get used, so we can tell which parts are worth improving. Aggregate, and nothing that
identifies you. Off until you turn it on.
Off by default
Advertising
Measuring whether our ads work, and showing them to people who have visited before. Off until you turn
it on, and forced off entirely if your browser sends Global Privacy Control.
Consent first
What is actually running
Google Tag Manager (container GTM-W8D23393), and nothing inside it fires until you say so. The consent
signal is set to denied in the page head before the container loads, not after, so the first
pageview cannot slip through. The container is deliberately loaded late, a moment after the page has
finished, so it never competes with getting the page in front of you. We also removed a third-party
chat widget and a tracking script that had been loading without asking anyone.
Common questions
Do I have to accept anything to use the site?
No. Essential cookies keep the site working and are not a choice anybody could meaningfully make; everything else is off until you say otherwise, and choosing Essential only leaves the whole site working exactly as it does now.
What happens if I turn a category off later?
The cookies that category set are cleared when you save. Turning something off is a withdrawal, not a flag we note and ignore.
Do you honour Global Privacy Control?
Yes. If your browser sends the GPC signal, advertising is treated as opted out for that browser and the control is shown switched off and disabled. GPC overrides a previous yes rather than only setting a default, because a request a past click can overrule is not being honoured.
Is any of this running right now?
Google Tag Manager loads on every page, and nothing inside it is allowed to run until you have chosen. The denied-by-default consent signal is set in the page head before the container loads, rather than after it, which is the difference between asking you and asking you a pageview too late. Choose Essential only and it stays denied for as long as you keep that choice.
What exactly gets stored on my device?
Your cookie choice itself, kept in this browser so we do not ask again. If you turn Analytics on, Google Analytics cookies beginning _ga. If you turn Advertising on, Google advertising cookies. Turn either category off and the cookies it set are cleared when you save.
There is a hidden iframe in the page source. What is that?
Google Tag Manager's fallback for browsers with JavaScript switched off. It is worth knowing it is there, and worth knowing what it cannot do: consent signalling is JavaScript and so is almost every tag, so with JavaScript off that frame cannot run one. With JavaScript on it is never used.