Cookie Policy

Cookies are small files a website asks your browser to keep. This page lists every one this site uses, who sets it, and which ones will not be set unless you say yes.

Last updated: 7 September 2026

The short version

Nothing that tracks you across pages for marketing runs on this site until you accept it. The cookies that are always on are the ones that keep the site working and keep spam out of my inbox. I do not use Google Analytics, and I do not run advertising pixels.

Always on

These are set whether or not you accept anything, because without them the site cannot work safely.

Cloudflare — __cf_bm, set by the network in front of this site to tell people from bots. It lasts about half an hour.
CleanTalk — cookies beginning ct_ and apbct_, which record how a form was filled in so the anti-spam filter can tell a person from a script. They exist only around form submissions.
Bot protection on the login page — a captcha script from my host, GoDaddy, which loads only on the WordPress login screen.
Your language choice — if you switch to 中文, that preference is remembered in your browser.
Your cookie choice — the answer you give the banner is stored in your browser, so you are not asked again on every page. It never leaves your device.

Only if you say yes

HubSpot is the customer relationship platform I use to keep track of enquiries and send the market updates people ask for. Its tracking script sets four cookies:

hubspotutk — a random identifier for your browser, which is what connects your visits to your enquiry if you later send me a form or reply to an email.
__hstc and __hssc — when you first came, when you came back, and which pages you looked at in this session.
__hssrc — whether this is a new browser session.

In plain terms: accepting means I can see that someone read four project pages before getting in touch, and that it was you. Declining means I cannot, and nothing about your browsing is recorded. Declining does not stop you using any part of this site, and it does not stop me replying to you.

Not cookies, but worth knowing

Fonts are loaded from Google, which sees your IP address in the request. No cookie is set.
Server logs kept by my host record IP address, browser type, pages requested and timestamps. That happens for every website you visit and is not something a cookie banner controls.
The TrustedSite badge in the corner loads from an outside service, which sees your IP address.

Changing your mind

You can change your answer at any time, on any device, and it takes effect immediately.

You can also block or delete cookies in your browser settings. Apart from the ones listed under “always on”, the site will work normally without them.

More detail

What I do with the information behind these cookies — who it goes to, how long I keep it, and how to ask for a copy or a deletion — is set out in the privacy policy. If something here is unclear, email me at ja***@************ts.com and I will explain it properly.