Cookie policy

In short

This site uses no analytics, advertising or tracking cookies. There is no Google Analytics and no social media pixel. Typefaces are served from this domain, not from an external provider. The only third-party component anywhere on the site is the anti-bot check on the contact form, described below.

That is why you will not see a banner asking permission: there is nothing to consent to. What may be stored are cookies that are strictly necessary for the site to work and stay protected, and the law does not require consent for those — but it does require disclosing them, which is what this page does.

What is stored when you visit

On a visit to any page on this site, no cookie is set by this site, and this site writes nothing to the browser’s local storage (localStorage or sessionStorage). Verified by loading the built site in a clean browser profile and inspecting it afterwards.

The one exception is the contact page, where Cloudflare’s anti-bot check writes a single entry under its own address. It is described in its own section below.

The only cookies that may appear come from the infrastructure provider, Cloudflare, which hosts and protects the site:

Cookie	What it does	Lifetime
__cf_bm	Tells human traffic from automated traffic. It is what stops a bot hammering the site. It does not identify people and does not follow anyone between sites.	30 minutes of inactivity
cf_clearance	Remembers that a security check has already been passed, so it is not repeated on every page.	Session
_cfuvid	Only when a rate-limiting rule is active: distinguishes visitors sharing one IP address.	Session

Cloudflare classifies all of these as strictly necessary to provide the service requested. Their data may be processed in Cloudflare data centres outside the European Economic Area; the detail is in Cloudflare’s own cookie policy.

The contact form

The contact page — and only that page — loads Cloudflare Turnstile, to tell people from bots. Turnstile was chosen over Google reCAPTCHA precisely because it is not designed to track users or build advertising profiles.

Measured on the built site: Turnstile sets no cookie. It does write one entry, cf.turnstile.u, to browser storage under Cloudflare’s own address (challenges.cloudflare.com) rather than this one. It exists to remember that a check has been made, so the same visitor is not challenged repeatedly.

The law here is about storing information on your device, not about the word “cookie”, so that entry counts. It is exempt from consent for the same reason the security cookies above are: it is strictly necessary to provide the thing you asked for — a contact form that works and is not being used by a bot. It is not loaded on any page without a form, and it cannot be used to follow you.

Loading the page also sends your IP address and technical browser data to Cloudflare for that check. That is data processing, and it is described in the privacy policy.

The content management panel

The address /admin/ is the tool the Unison team uses to edit the site. It requires authentication and stores data in the browser of whoever uses it, but it is not part of the public pages and does not affect visitors.

Controlling cookies anyway

Even though there is nothing here to consent to, every browser lets you inspect, block and delete cookies from its privacy settings. Blocking the strictly necessary ones may stop the site loading properly or stop the contact form being submitted.

If this changes

If analytics, advertising or third-party embedded content is ever added, a prior consent notice would be required and this page would have to be updated before switching it on. That is not a formality: without prior consent, those cookies cannot be set.