Cookies

Cookies that always appear

Whatever you decide about analytics, two technical cookies appear in your browser. Both are technical: they are set by the infrastructure that serves the site, not by us, and neither measures or profiles anyone:

• __dpl — a hosting-platform cookie that pins the visitor to one deployed build of the site, so a page and its assets cannot come from two different builds; kept for about a day
• __cf_bm — a Cloudflare delivery-network cookie distinguishing people from automated requests; kept for about 30 minutes

Which cookies Google Analytics sets

These appear only after you have pressed “Allow” in the banner at the foot of the page:

• _ga — distinguishes one visitor from another; kept for about two years
• _ga_<property id> — holds the Google Analytics 4 session state; kept for about two years

Before consent, and if you decline

Before you decide, and if you decline, the Google script is not requested at all: no request goes to googletagmanager.com or google-analytics.com and no Google cookie appears. Apart from the two technical cookies described above, nothing is set and nothing is measured until you press “Allow”. The site works exactly the same either way.

Declining and changing your mind

You decline Google Analytics with the “Do not allow” button in the same banner, which carries the same weight as the accept button. Your decision is stored in your browser’s local storage together with the version of the wording you were shown, and you can change it at any time through the “Analytics settings” link in the site footer.

Where the data goes

The Google Analytics data is received by Google LLC, which processes it outside the Republic of Uzbekistan and the Republic of Kazakhstan — a cross-border transfer — and only with your consent. The hosting provider and the Cloudflare delivery network necessarily see a visitor’s IP address in order to serve the site. The privacy policy sets out the detail.

What the site does not do

There are no advertising cookies, no cross-site tracking, no profiling and no Google Signals. Fonts, images and stylesheets are still served from this site. Enquiry-form data is a separate matter, described in the privacy policy, and analytics consent has nothing to do with it.