Cookies here, and the one choice you are asked to make
Cookies are small files a website places on your device. This site sets none of its own, and no advertising, retargeting or cross-site tracking cookies at all — not from us, and not from anyone else.
There is exactly one thing we ask you about, and it is a single question covering two analytics tools: Contentsquare and Google Analytics. Both set cookies in order to work, and neither sets a single one unless you accept. They are asked about together because they are used together, for the same purpose, and a person who does not want to be measured does not want it twice.
The two reach that point differently, and it is only fair to say so plainly. Contentsquare is not loaded at all until you accept, so before you answer your browser never contacts it. Google Analytics does load on every page, but in a mode where it is switched off: it is told, before it starts, that it may not store or read anything on your device, and it obeys that until you say otherwise. The section below sets out what it still sends to Google in the meantime.
Accepting and declining are the same single click in the same place. Declining costs you nothing: every part of this site behaves identically either way.
Your choice, and how to change it
This setting is stored in the browser you are reading in, so it applies to this browser on this device and not to any other. If you clear your browsing data it goes with it, and you will be asked again.
The control itself needs this site’s JavaScript in order to appear. If your browser is not running it, no control is shown above — and there is nothing for it to do, because both tools are loaded by that same JavaScript and so cannot have started in the first place.
What these two tools do, if you accept them
Contentsquare — the company behind the product also sold as Hotjar — measures how the pages of this site are actually used: which links and controls get clicked, how far down a page people read, and where a layout sends people the wrong way.
It also records a replay of your visit. That is a reconstruction of how the page was used, played back so we can watch where a visit went wrong — not a recording of your screen, your camera or your microphone, and not something that carries your name.
Google Analytics measures the same visit at the level of traffic and behaviour: which pages were seen, in what order, how long they held attention, roughly where in the world the visit came from, and whether it arrived from a search, a link or directly. It does not replay anything.
We use both for one purpose: to find the parts of this site that do not explain themselves, and rewrite them.
To do that each sets cookies on your device so that the same browser is recognised from one page to the next and from one visit to the next, and each processes what it records on its own systems, as our processor and on our instructions. They are measurement tools, not advertising technology: what they record is not used to build a marketing profile of you, is not joined up with any enquiry you send us, is not linked to any advertising account, and is neither sold nor shared for anyone else’s marketing.
Neither is necessary for this website to work, which is precisely why the law requires us to ask first rather than to tell you afterwards. Our lawful basis for both is your consent, and you can withdraw it at any time using the control above.
What Google receives before you answer
Google Analytics is loaded on every page of this site, including this one, and including for people who have not answered the question yet or who have said no. We would rather tell you that than have you find it. It runs in a mode Google calls consent mode: the page instructs it, before it starts, that it may not store or read anything on your device, and it does not.
It is done this way for a practical reason. Google’s own tools check whether a site is measuring correctly by loading the page as an ordinary visitor, and a tag that does not exist until somebody clicks is a tag they report as broken, permanently. This keeps the check meaningful without letting anything onto your device early.
While you have not accepted, what reaches Google is limited to this, and it is sent without cookies and without an identifier for you:
- the address of the page being viewed, and the page you came from
- your browser’s user-agent string, and the time
- a note that consent has not been given
- a random number generated fresh on each page load, which is not reused and cannot link two page views together
Your IP address reaches Google in the sense that any request from your browser to any server does; Google truncates it on collection for these signals. Advertising identifiers are redacted, the advertising permissions are refused for the life of the page whatever you answer, and these requests are routed through a domain that carries no third party cookies. Nothing here is written to your device, and nothing here is used to build a profile of you.
If that is not something you want, declining stops the rest of it and you can also block this site’s scripts in your browser, which stops it entirely. Our lawful basis for these signals is our legitimate interest in knowing that our own measurement is working; it is not consent, because nothing is being stored on your device for consent to apply to.
The cookies they set
If you accept, and only then, these are what appear on your device. Each is a first party cookie, readable only by this site.
- _cs… and _hj… — Contentsquare. Tell one browser from another, and one visit from the next, so that a session holds together as a session. Longest lived: about a year.
- _ga and _ga_… — Google Analytics. The same job for the same reason. Longest lived: about two years.
Names beginning with those prefixes are the whole of it — the exact suffixes carry account and session identifiers and change over time, which is why they are described by prefix rather than listed one by one. Withdrawing consent deletes all of them.
The two things stored without asking
Two items are stored in your browser whichever way you answer, because each is strictly necessary for something you have asked for. Storage that is strictly necessary in that sense does not require consent. Neither of these is sent to us or to anyone else, and neither identifies you.
- pl-intro — records that the opening animation has already played, so it does not replay as you move between pages. Held in session storage; gone when you close the browser tab.
- pl-consent — records the answer you gave above, so that you are not asked again on every page and so that we can show what you chose. Held in local storage; stays until you clear your browsing data.
Session storage and local storage are separate mechanisms from cookies: unlike a cookie, neither is transmitted with the requests your browser makes. Blocking them is your right, and the only consequence here is the opening animation replaying and the question above being asked again.
Measurement that stores nothing, and no advertising
Separately from the above, and whether or not you accept it, we count traffic in aggregate on our own servers: which pages are requested, the country the request came from, and whether it came from a person, a search engine or an AI assistant. This counting sets no cookies, stores nothing in your browser, records no name or address, and does not identify or profile you.
The site also loads Cloudflare Web Analytics, a small measurement script that runs in your browser to report page views and loading performance. It too sets no cookies, stores nothing on your device, uses no fingerprinting, and does not identify or profile you; Cloudflare turns those reports into aggregate statistics for us and nothing more. Because it stores nothing on your device it needs no consent, and it is not part of the choice above.
We use no advertising or retargeting technology, no tracking pixels, and we do not take part in cross-site tracking or share data with ad networks.
If we introduce any further measurement that stores something on your device, we will update this notice before it goes live and ask for your consent where the law requires it.
Third party requests your browser makes
This site loads its typefaces from Google Fonts. That means your browser requests files from Google’s servers, and Google receives the request, including your IP address. Those requests set no cookies, and we receive nothing from them.
Your browser also fetches the Cloudflare Web Analytics script described above from Cloudflare’s servers. That request sets no cookies either.
Your browser loads Google Analytics from www.googletagmanager.com on every page, in the switched-off mode described above. That request happens whatever you answer; what it may do on your device is what your answer controls.
Contentsquare, from t.contentsquare.net, is different: that request is made if, and only if, you have accepted. Before you answer, and for as long as the answer is no, it is never made — not the script, and not a preliminary connection to the host.
Nothing else on this site loads third party content, and there are no embedded videos, maps, chat widgets or social buttons.
Managing what is stored
The control above changes your answer in either direction at any time, and you do not have to give a reason. Withdrawing consent deletes the cookies these tools set and reloads the page without them, because a script already running on a page cannot be called back — only the next page can be built without it.
You can also clear site data or block storage for this site at any time in your browser settings, and most browsers let you do that per site. Nothing here will stop working if you do, beyond the opening animation playing again and the question above being asked again.
If you would like help with any of this, or more detail than this page gives, write to hello@plendor.co.uk.
Changes to this notice
If what the site stores changes, this page changes with it. This version is dated 17 August 2026.