Cookies & privacy choices

Essential security

The contact form uses a first-party cookie named contact_csrf to help prevent forged submissions. It is limited to /api/contact, is inaccessible to JavaScript, uses SameSite=Strict and Secure on HTTPS, and expires after 30 minutes. It contains a random token, not your enquiry. The cookie is cleared after a successful submission; preparing the form again creates a fresh token.

Cloudflare protects this website against abuse and automated traffic. Security challenges may set a cf_clearance cookie to remember a completed check. Our challenge passage setting is 30 minutes; Cloudflare may apply additional allowances or security-specific lifetimes. Turnstile on the contact form processes browser and network signals to validate submissions. These functions are separate from optional analytics.

See Cloudflare cookie information and Cloudflare privacy information.

Your saved preference

When you choose, we store aldergate-privacy-v1 in your browser’s local storage for up to 180 days. It contains your analytics choice, the policy version and the time of your choice. It is used only to remember that choice. Expired or invalid preferences default to analytics off. Clearing your browser storage removes your preference.

Optional analytics

Cloudflare Web Analytics helps us understand visits and page performance. It is off until you accept. Cloudflare describes this service as cookie-free and does not use it to track individuals across websites. Our choice mechanism also respects Global Privacy Control and Do Not Track signals by keeping optional analytics off.

We do not load advertising pixels, session recording tools or third-party marketing tags. Declining optional analytics does not prevent you from browsing or sending an enquiry.

Google Maps

The contact page automatically loads an embedded Google Maps map to show our office location. This connects your browser to Google, which may receive your IP address and browser information and use cookies under its Privacy Policy. The map loads independently of your optional analytics choice. The external Google Maps link also opens Google’s service.

Change your choice

Use the Cookie settings button at the bottom of any page to accept or reject optional analytics. Withdrawing an existing acceptance reloads the page so the analytics script is no longer active. If browser storage is unavailable, analytics stays off. You can also block or delete cookies in your browser; blocking essential security cookies may prevent form submission, but you can still email us.