Legal
Cookies, counted on one hand.
This site sets very few cookies, and this page names every one of them: what it does, who sets it, how long it lasts, and how to say no.
Nothing here tracks you across the internet, and nothing here sells you anything.
UK rules changed in February 2026 under the Data (Use and Access) Act: security and genuine aggregate-statistics cookies no longer need consent, but you must be told plainly and given a free way out.
This page is that plain telling, and the way out.
The kinds we use
Make the site work: the cookie that remembers your cookie choices, the cache cookie our server may set, and WordPress login cookies that only exist for people who edit the site. No consent needed, none sought.
Set by Wordfence, our security software, to tell humans from attack traffic and protect logins. Exempt from consent under the 2026 rules as security cookies; listed here because you should still know.
Google Analytics 4, measuring pages read in aggregate so we can see what helps readers. Run either with your consent via the banner or under the statistics exemption with a one-click opt-out; whichever route is live, this page carries the switch.
Every cookie, named
cookie consent preference (first party, set by our consent banner): remembers what you chose so we do not ask on every page. Lifetime up to 12 months.
litespeed_* (first party, set by our server cache where needed): helps pages load fast; contains no personal data; session or short-lived.
wordpress_*, wp-settings-* (first party): login and dashboard preferences, set only for logged-in editors, never for visitors.
wfwaf-authcookie-*, wordfence_verifiedHuman (first party, Wordfence): security checks and firewall state; the auth cookie exists only for logged-in editors; lifetimes from session up to 24 hours.
_ga, _ga_* (first party, Google Analytics 4, active from launch): distinguish browsers for aggregate counting; lifetime up to 24 months. Google processes this data for us; IP addresses are not logged or stored by GA4. Not used for advertising and not combined with other Google data on our instruction.
Third parties: none. Our Video Desk links out to YouTube rather than embedding it, so no third-party cookies are set on this site. If we ever embed anything, it appears in this list first.
What cookies are
Small text files a site stores in your browser so something can be remembered between pages or visits. Similar technologies (local storage, pixels) are covered by the same rules; where we say cookie, read it as covering those too. Our Compass planning tool runs entirely in your browser and sends nothing to us.
Saying no, and changing your mind
Three switches, use any of them. First, the banner: choose Decline and only the necessary and security cookies run; reopen it any time via the Cookie settings link in the footer. Second, the analytics opt-out on this page removes measurement for this browser even where the statistics exemption applies. Third, your browser can block or delete cookies wholesale; the site will still work, though it may forget your preferences.
Changes
If we add, remove or change a cookie, this page changes the same day, and the date at the top moves with it.
Want the bigger picture?
The Privacy Policy covers everything we do with personal data, in the same plain terms.
Read the Privacy Policy