Cookies Table

Category Name Provider Purpose Type Duration
Strictly necessary __cf_bm Cloudflare Protects the site from malicious bots by identifying automated traffic. First Party 30 minutes
cf_clearance Cloudflare Cloudflare clearance cookie stores proof that a security challenge was passed, preventing repeated challenges. First Party 1 year
cf_chl_rc_m Cloudflare Used as part of Cloudflare's security challenge system to verify human users. First Party Session
OptanonConsent OneTrust Stores the visitor's consent choices for the domain. First Party 1 year
test_cookie DoubleClick Checks if the user’s browser supports cookies, which are essential for ad delivery functionality. Third Party Session
csrftoken Instagram Helps prevent Cross-Site Request Forgery (CSRF) attacks on embedded Instagram content. Third Party 1 year
_cfuvid Medium A Cloudflare cookie set via embedded Medium content to identify and track users. Third Party Session
Targeting/Advertising YSC YouTube Tracks user views of embedded videos and registers a unique ID to keep statistics. Third Party Session
VISITOR_INFO1_LIVE YouTube Measures bandwidth to determine the appropriate video player interface for the user. Third Party 6 months
VISITOR_PRIVACY_METADATA YouTube Stores the user's consent state for YouTube's data use and ad targeting. Third Party 6 months
NID Google Stores user preferences for Google services, used for targeted advertising. Third Party 6 months
mid Instagram A persistent identifier used by Instagram for marketing and tracking purposes. Third Party 10 years
ig_did Instagram Used by Instagram to track user interactions with embedded content. Third Party 1 year
ig_nrcb Instagram A session cookie from Instagram is used to track navigation and user flow. Third Party Session
sp_landing Spotify Tracks the landing page for a user session, used for marketing and A/B testing. Third Party Session
sp_t Spotify An authentication and session token for embedded Spotify content. Third Party 1 year
Analytics and customisation _ga Google Analytics Distinguishes unique users by assigning a randomly generated client ID. First Party 2 years
_gid Google Analytics Generates statistical data on website usage by storing a unique ID. First Party 24 hours
_ga# Google Analytics Assigns a unique identifier to each visitor to track user behaviour across sessions and devices. It helps analyse traffic patterns and user engagement. First Party 2 years
_gat# Google Analytics Limits the number of requests sent to Google Analytics to prevent server overload, especially during high-traffic periods. First Party 1 minute
_ga_KL10F6FTB5 Google Analytics Used by Google Analytics (GA4) to persist session state and distinguish users. First Party 2 years
gat_gtag… Google Analytics Used to throttle the request rate to Google Analytics servers. First Party 1 minute
collect Google Analytics A pixel used to send data about the visitor's device and behaviour to Google Analytics. Third Party Session
Performance and functionality AWSALB Amazon Used by a load balancer to route traffic and ensure a smooth user experience. First Party 7 days
AWSALBCORS Amazon Ensures session "stickiness" for Cross-Origin Resource Sharing (CORS) use cases. First Party 7 days
ytidb::LAST_RESULT_ENTRY_KEY YouTube Enhances user experience by remembering YouTube search interactions. Third Party Persistent

Tracking Technologies Table

Name Provider Purpose
Canvas Fingerprinting Cloudflare Used to track user behaviour, detect automated bots, and for fraud prevention.

Summary of third-party analytics providers we use

  1. Google Analytics: Helps us analyse website traffic and user behaviour, including page views, session duration, and navigation paths.
  2. Meta Pixel: Used to monitor user interactions and deliver targeted advertising based on website activity. These pixels comply with privacy laws and are configured to respect user cookie preferences, activating only with proper consent.
  3. Google Ads and Tag Manager: Supports campaign performance tracking and manages marketing tags across our website.
  4. Google Playstore: Collects and transmits log data related to service interactions. These logs may include non-identifiable technical data such as browser type, device information, IP address, and timestamps, and are used strictly for operational diagnostics.
  5. Instagram: Used to generate insights into traffic and conversions from Instagram content and ads.
  6. YouTube: Tracks interactions with embedded videos, helping us assess video engagement and its impact on user behaviour.
  7. DoubleClick: Used to manage and optimise digital advertising delivery. It helps ensure our ads are served efficiently and prevents duplication, while supporting basic ad infrastructure.
  8. Medium: Enables core publishing and content-sharing features and supports essential site functionality and user experience.
  9. Spotify: Tracks user interactions with embedded Spotify content and may be used to personalise ads or measure campaign effectiveness across platforms.
  10. Cloudflare: Provides security and performance enhancements, including protection against malicious traffic and faster content delivery via its global content delivery network (CDN). These cookies are essential for site reliability.
  11. Amazon: Supports performance tracking and optimisation. It also helps to monitor load times, user interactions, and service efficiency.
  12. OneTrust: Used to manage cookie consent and monitor third-party tracking technologies embedded on our website in a way that enables us maintain transparency, minimise privacy risks, and ensure that tracking technologies are used responsibly and lawfully.