Cookie policy
This site sets two cookies. Both are strictly necessary, neither tracks you, and there is no analytics, advertising or social cookie in use today.
What we set
| Name | Purpose | Lasts | Consent needed |
|---|---|---|---|
| greenreach_session | Keeps you signed in. Contains a random token and nothing else — no name, no email, nothing readable. Marked HttpOnly so page scripts cannot read it, and SameSite=Lax so it is not sent on cross-site requests. | 30 days, or until you log out | No — strictly necessary |
| greenreach_consent | Remembers the choice you made about cookies, so we stop asking. It is the mechanism for honouring a refusal, which is why refusing still sets it. | 12 months | No — strictly necessary |
What we do not set
No analytics cookie, no advertising or retargeting pixel, no social embed, no session recording, no fingerprinting. The consent banner asks about optional analytics because the permission should exist before the tooling does — but nothing analytical is running, so choosing “accept all” currently changes nothing about what loads.
Nor is anything loaded from another company before you choose. The webfonts are served from our own servers rather than a font CDN, specifically so that opening a page does not disclose your IP address to a third party. The only third-party script on the site is Stripe's, and it loads at the moment you click to pay — not before.
Local storage
One item, greenreach-theme, remembering whether you chose light, dark or system appearance. It stays on your device, is never sent to us, and holds a single word. It is not a cookie and is not used to identify you.
Changing your mind
reopens the banner so you can change your choice. Your browser can also block or delete cookies for this site — if you delete the session cookie you will be logged out, which is the only thing that breaks.
More
The privacy notice covers everything else we hold and why.