Cookie policy.
Measurement is optional. Before explicit acceptance, this site does not download the Google Analytics tag or open a measurement connection to Google.
The decision comes before measurement. The browser prepares the consent state locally, but the Google Analytics library is only downloaded after acceptance. Rejecting does not restrict browsing.
1. Operating principle
I apply the same criterion here that I require in an audit: this document shows, cookie by cookie, how your privacy is respected.
Three operating rules determine measurement behaviour:
- No prior connection · Google's external tag is not requested without valid acceptance.
- Advertising denied ·
ad_storage,ad_user_dataandad_personalizationremain set todenied. - Reversible choice · acceptance or rejection is remembered for a maximum of 12 months and can be changed sooner.
2. Consent model (Google Consent Mode v2)
A banner appears on arrival, unless there is a valid decision or the browser sends DNT: 1 without a prior choice. The initial Consent Mode v2 state is denied for analytics and advertising. The external tag is not loaded in that state.
If the visitor presses Accept, the consent state is updated to granted only for analytics_storage. Advertising categories (ad_storage, ad_user_data, ad_personalization) always remain denied, regardless of the visitor's decision.
If the visitor presses Reject, analytics remains denied and the site attempts to delete any GA cookies left over from a previous acceptance.
The decision is saved in localStorage under the key fa_analytics_consent, as a record with a version, state, decision date and expiry date. It expires after 365 days. An expired, legacy or invalid value is discarded and the banner reappears.
3. Audience measurement cookies · Google Analytics 4
Only after acceptance is the following downloaded: gtag.js. Google documents that GA4 uses first-party identifiers to distinguish users and sessions; these cookies therefore should not be described as anonymous in the strict sense. This site's configuration limits their expiry to 12 months.
| Cookie | Purpose | Type | Origin | Duration | Legal basis |
|---|---|---|---|---|---|
_ga | Distinguish browser/user for GA4 measurement | Analytics | Up to 12 months in this implementation; the browser may shorten this | Consent | |
_ga_[ID] | Maintain GA4 session state | Analytics | Up to 12 months in this implementation; the browser may shorten this | Consent | |
fa_analytics_consent | Local record of the choice, its version and expiry. The site does not send it to its server | Functional · localStorage | fernandoarrieta.org | 12 months | Necessary to remember the requested choice |
Configuration visible in the site's code:
- Advertising signals disabled in the tag ·
allow_google_signalsandallow_ad_personalization_signalsare set tofalse. - Advertising storage denied · all three advertising categories remain set to
deniedafter accepting analytics. - Page view · the tag is configured to send the page view. GA4 may receive, among other technical data associated with this measurement, the visited URL, the referrer, browser/device information and its first-party identifier.
- Separate form · name, email, phone number, organisation and form content are not sent as Analytics events.
Retention within the Google Analytics property and other options managed through its dashboard cannot be verified from the public code. This policy does not attribute any configuration to them that cannot be verified here. Google explains the use and expiry of GA4 cookies and how Consent Mode works in its official documentation.
4. Technical storage (localStorage, not cookies)
The site may use localStorage in the browser for basic functional preferences:
fa_analytics_consent· banner decision, format version, and decision and expiry dates.
The site code does not transmit this record to its server or to Google. It stays in the browser and disappears when site data is cleared or the control in section 7 is used.
5. No advertising or social media cookies
The site does not integrate advertising pixels:
- No Facebook Pixel / Meta Pixel
- No TikTok Pixel
- No LinkedIn Insight Tag
- No Twitter / X Pixel
- No Google Ads Conversion Tracking
- No Hotjar, Mouseflow, FullStory or session recording tools
- No third-party comment scripts (Disqus, Hyvor, etc.)
- No embedded social media widgets that load their own tracking
Links to social media and external press articles are plain links. The destination only loads when the visitor clicks and is outside this site's control.
6. International data transfers
When you accept, the browser establishes a connection to Google's infrastructure and measurement information may be processed internationally according to the provider's architecture and terms. The Google privacy policy describes this processing. Rejecting prevents this site from loading the tag.
7. Review or withdraw consent
You can review and change your decision at any time:
Clears the current decision and reopens the banner so you can choose again.
Alternative methods:
- Manual · delete the key
fa_analytics_consentfromlocalStoragein the browser (DevTools → Application → Local Storage) and reload the site. - From the browser · clear cookies and site data in your browser settings. The next visit will trigger the banner again.
- Additional blocking · configure your browser or install a blocking extension (see section 8).
8. Browser controls
The site does not attempt to bypass blockers or use fingerprinting. If the browser or an extension blocks the Google tag, the content and form remain available.
- Blockers · may prevent GA from downloading even if consent has been given; the site does not require you to disable them.
- Site data · clearing cookies and
localStorageremoves the saved choice and the domain's accessible cookies. - Do Not Track · if the browser sends
DNT: 1and there is no current explicit decision, the site interprets it as rejection.