1. Cookies and similar technologies
- Cookies
- Small text records a website or third party asks a browser to store. Session cookies normally end with the session; persistent cookies remain until expiry or removal.
- Local storage
- Browser storage associated with an origin. It can persist until the visitor or website removes it and is not necessarily an HTTP cookie.
- Pixels and tags
- Code or small resources that can cause a connection to a provider and report interactions or identifiers.
- Embedded content
- Third-party video, map, social, or similar content that may connect to its provider when loaded.
- First and third party
- First-party technology is set or controlled through Kodesign's site; third-party technology involves another provider such as Meta.
2. Current technology inventory
| Technology | Provider/type | Purpose | Category | Duration | Consent |
|---|---|---|---|---|---|
| kodesign-theme-v1 | Kodesign / local storage | Remember light or dark theme | Necessary/preferences | Until removed, reset, or key change | No |
| kodesign-locale-v1 | Kodesign / local storage | Remember language choice | Necessary/preferences | Until removed, reset, or key change | No |
| kodesign-consent-v2 | Kodesign / local storage | Store category choices, timestamp, policy version, and expiry | Strictly necessary | 180 days, or earlier withdrawal, reset, or material version change | No |
| _ga | Google / first-party cookie | Distinguish visitors for consented website analytics | Analytics | Up to two years | Yes |
| _ga_TZNQNVZ90W | Google / first-party cookie | Maintain session and measurement state for GA4 property G-TZNQNVZ90W | Analytics | Up to two years | Yes |
| GA4 gtag.js and measurement requests | Google / tracking technology | Measure page views, scrolls, outbound clicks, file downloads, traffic sources, and successful enquiries | Analytics | User-level and event-level property data: 14 months | Yes |
| _fbp, if set | Meta / cookie | Distinguish browsers for advertising measurement, attribution, and optimisation | Marketing | 90 days | Yes |
| _fbc, if set | Meta / cookie | Preserve a Meta advertising click identifier when applicable | Marketing | 90 days | Yes |
| Meta Pixel PageView and Lead requests | Meta / tracking technology | Advertising measurement, attribution, and campaign optimisation | Marketing | Event Data may be retained by Meta for up to two years | Yes |
3. Consent categories and controls
- Necessary
- Always active. Covers storage needed to remember language, theme, and consent choices and operate website security.
- Analytics
- Off by default. Allows Google Analytics to measure website use, traffic sources, and successful enquiries.
- Marketing
- Off by default. Allows Meta Pixel to measure and attribute Meta advertising and optimise campaigns.
- External media
- Off by default. Reserved for future consent-gated embeds. None are active now.
Use Cookie settings in the footer to accept, reject, or change optional categories. Withdrawal is available through the same control. It blocks future optional loading immediately and attempts to remove accessible optional analytics and marketing cookies. Browser controls may be needed for third-party storage Kodesign cannot remove directly.
4. Future technologies and external media
YouTube, social-media, map, and similar embeds are not active and are not presented as current technologies above. No additional analytics or advertising provider is active.
Before or when another provider or external-media technology is activated, Kodesign will identify its purposes, data, cookies or identifiers, durations, recipients, and transfers; update this policy's date and version; extend the CSP only for exact required domains; and keep it blocked until the relevant analytics, marketing, or external-media consent exists. Future external media should use a privacy-preserving click-to-load placeholder where required.
5. Social links and policy updates
The footer contains ordinary outbound links to LinkedIn, Instagram, and Facebook. They are not embedded social trackers and do not by themselves contact those platforms before a visitor clicks. The destination provider controls processing after the link is opened.
Material changes to vendors or purposes will produce a new policy/banner version and a renewed consent request where required.