Last updated 4 November 2026
This page lists every cookie this site sets, who sets it, and what it does. The consent banner lets you choose; nothing in the analytics or marketing categories loads until you accept.
Google Consent Mode v2 is set in the page head before Google Tag Manager loads, with analytics_storage, ad_storage, ad_user_data and ad_personalization defaulted to denied for every visitor. When you accept, the banner updates those signals and the tags fire. When you decline, GA4 and Google Ads tags send cookieless pings that carry no identifiers, which Google uses to model aggregate behaviour. The Meta Pixel does not load at all without marketing consent. You can change your choice at any time from the link in the footer.
Required for the site to work. Not optional.
Cookie
Set by
Purpose
Lasts
__cf_bm
Cloudflare
Bot protection
30 minutes
cf_clearance
Cloudflare
Security challenge pass
1 year
CookieConsent
This site
Stores your consent choice
1 year
Measures how the site is used. Loads only with consent.
Cookie
Set by
Purpose
Lasts
_ga
Google Analytics 4, set via first-party subdomain
Distinguishes visitors
2 years
_ga_XXXXXXXX
Google Analytics 4
Keeps session state
2 years
FPID
Server-side GTM
Server-set first-party identifier, HttpOnly
2 years
Lets ad platforms attribute an enquiry to a campaign. Loads only with consent.
Cookie
Set by
Purpose
Lasts
_fbp
Meta Pixel
Browser identifier for Meta ads
3 months
_fbc
Meta Pixel
Stores the click ID from a Meta ad
3 months
_gcl_au
Google Ads
Conversion linker for ad click attribution
3 months
FPLC
Server-side GTM
Server-set linker for cross-domain attribution
20 hours
Server-side tagging means some of these cookies are set by this site’s own subdomain rather than directly by Google or Meta. That makes them first-party, which is why they last longer in Safari. It does not change what they are used for, and they still only load with your consent.