Cookie Policy

Short version: Google Analytics does not run until you accept. Decline and the only thing stored is the record of you having declined. Two exceptions, both explained below: the reviews widget on one page, and Cloudflare's cookieless page count on every page.

How consent works here

When you first arrive, a banner asks whether you accept cookies. Google Analytics does not run while that banner is sitting there unanswered. Pressing Escape while the banner is open counts as Decline.

• Accept — Google Analytics loads and can set its cookies.
• Decline — it is never added to the page. Not loaded in a reduced mode. Not loaded at all.

This matters more than it sounds. Plenty of sites put the tracking script on the page and then ask permission afterwards, which means it has already run by the time you click anything. Here the script tag is not created until you click Accept.

What gets stored

Strictly necessary

Name	Set by	Purpose	Lasts
boxer-consent	This site	Remembers whether you accepted or declined, which version of this policy you answered, and when, so you are not asked on every page	Until you clear it, or until the consent version changes and you are asked again

This one is stored in your browser's local storage rather than as a cookie, and it never leaves your device. It exists only so the banner stops appearing. There is no way to opt out of it without also opting out of it remembering that you opted out.

Analytics — only after you accept

Name	Set by	Purpose	Lasts
_ga	Google Analytics	Distinguishes one visitor from another	2 years
_ga_<id>	Google Analytics	Keeps track of the current session	2 years

Reviews widget — on the reviews page, not gated

Name	Set by	Purpose	Lasts
Varies	Elfsight	Loads and displays reviews from my Google Business Profile, and their own performance measurement	Set by Elfsight

Elfsight controls its own cookies and can change them without telling me, which is why this row is vaguer than the others.

This widget is deliberately not behind the banner. It only appears on the reviews page, where it is the content — gating it would leave that page blank for anyone who declined. It is display, not measurement, and it does not follow you around the web. Every other page on this site loads without it.

Spam protection

If Cloudflare Turnstile is active on the contact form, on the homepage and the contact page, it issues a short-lived token that is sent with the form to confirm the check passed. It is tied to submitting the form and is not used for tracking.

Cloudflare Web Analytics — every page, no cookies

Cloudflare, the host, adds its own page-count script to every page. It sets no cookies and stores nothing in your browser, which is why it has no row in the tables above, and it runs regardless of your answer to the banner because it is added by the hosting rather than by this site's code.

Changing your mind

Use the cookie settings link at the bottom of any page. The banner comes back and whatever you choose replaces your earlier answer.

Declining after having accepted tells Google Analytics to stop on the page you are on and keeps it off every page after that. Cookies already set by Google or Elfsight are theirs, not mine, so clear them through your browser's settings if you want them gone immediately.

Blocking cookies entirely

Every browser can block or delete cookies — usually under Settings, then Privacy. Blocking everything will not break this site, although the banner will come back on every page because it has nowhere to remember your answer, and the spam check on the contact form may fail in a browser that blocks all third-party storage.

If the policy changes

Adding a new service that sets cookies means the consent version changes, which makes the banner reappear so you can decide again with the new information.