Cookies and technology
Last updated 30 July 2026
This page lists every piece of technology running on this website and exactly what each one does. It describes what is actually installed, not a generic template.
Cookies
This website sets no cookies. There are no advertising cookies, no analytics cookies and no session cookies.
What we store on your device
We store two small preference values on your device, and nothing else. Neither identifies you, and neither is read by any third party.
- Local storage. One value remembers that you dismissed the short privacy notice, so it does not reappear on every visit. It holds a single value and persists until you clear it.
- Session storage. One value remembers that you closed the quick-action bar on a mobile screen. It is discarded when you close the browser tab.
You can clear both at any time in your browser, or use the notice settings link in the footer of the homepage. Because we use no cookies or similar technologies that require your consent, we show a short notice rather than a consent banner.
Analytics
Plausible. Privacy-conscious, cookieless aggregate analytics. It processes limited technical information such as your approximate country, device type and referring page to produce aggregate counts, and does not follow you across other websites. We also count a small number of named events, such as a scan being started or completed and which risk band the result fell into. These are counts only. No form content, name, email address, company name or scanner answer is ever sent to analytics.
Services that run only when you use them
- Calendly. Loads only if you choose to book a call. It collects the details you enter under its own privacy notice.
- Formspree. Delivers enquiry and application form submissions to our inbox when you submit a form.
- Scanner API and Anthropic. When you complete the risk scanner, your nine multiple-choice answers are sent to our own server function, hosted by Vercel, and from there to Anthropic's API to generate the result text. No name, email address or company name is sent with the answers.
Hosting and fonts
Vercel hosts this website and the scanner function. The Poppins typeface is self-hosted from this website, so no font request is sent to Google or any other third party, and your IP address is not shared with a font provider simply for visiting.
What we do not use
We do not use Google Ads or any advertising conversion tracking. We do not use visitor-identification tools that reveal the company or individual behind a visit. If any of this ever changes, we will complete a lawful-basis assessment, update this page, and put a proper consent mechanism in place before the technology loads, not after.