Legal
Cookie Policy
1. What cookies are
A cookie is a small text file a website stores on your device. Some are needed for the site to work at all — keeping you logged in, remembering a form part-way through, protecting against automated abuse. Others measure how the site is used so it can be improved.
This policy covers cookies and comparable technologies such as local storage, pixels and tags. It sits alongside our Privacy Policy, which explains how we handle personal information generally.
2. Our position on cookies
We run a small number of cookies and we do not run advertising or cross-site tracking.
CyberCrest does not use cookies for behavioural advertising, does not operate remarketing or retargeting pixels, does not embed social media tracking, and does not sell or share data collected through cookies with advertising networks.
The cookies below fall into two groups: those the site cannot function or stay secure without, and analytics cookies, which visitors in the United Kingdom and Europe are asked about before they are set.
3. Strictly necessary cookies
These are set to keep the site working and protected. They cannot be switched off through the consent banner because the site would not function correctly without them. They do not track you across other websites.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
__cf_bm | Cloudflare | Distinguishes human visitors from automated traffic. Part of bot management. | 30 minutes |
_cfuvid | Cloudflare | Supports rate limiting. Contains no personally identifiable data. | Session |
cc-consent (local storage) | CyberCrest | Stores your analytics choice so you are not asked on every page. | 12 months |
cc-country (session storage) | CyberCrest | Remembers the country Cloudflare reports for your connection, so the consent check is not repeated on every page. No IP address is stored. | Session |
4. Analytics cookies
For visitors in the United Kingdom and Europe, these run only if you accept them. Elsewhere they run by default, and you can decline them at any time using Cookie settings at the foot of every page. They tell us which pages are read, how visitors arrive and where they leave, so we can improve the site. They do not identify you by name and we do not attempt to re-identify anyone from them.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics 4 | Distinguishes one visitor from another. | 2 years |
_ga_<container-id> | Google Analytics 4 | Maintains session state. | 2 years |
IP anonymisation: Google Analytics 4 does not log or store full IP addresses. Data collected is aggregated usage data, not a profile of an identifiable individual.
Data retention: analytics data is retained for 14 months, after which it is deleted.
5. What we do not use
For clarity, and because it is unusual enough in this industry to be worth stating:
- No advertising or remarketing cookies
- No Google Ads, Meta Pixel, LinkedIn Insight Tag or TikTok Pixel
- No cross-site tracking or data broker integrations
- No session recording or heat mapping tools
- No embedded social media widgets that track visitors
- No fingerprinting
If any of these are later added for a marketing campaign, this list and the tables above must be updated before the tag goes live.
6. Embedded content
Pages on this site may embed content hosted elsewhere, such as a video or a map. Embedded content behaves as if you had visited the third-party site directly, and that provider may set its own cookies and track your interaction with it. We have no control over those cookies.
There are currently no third-party embeds on the site. If a Vimeo player is added later, it must be listed here and, ideally, loaded only after consent.
7. Managing your choices
Through the site
Use Cookie settings, at the foot of every page, to accept or decline analytics cookies. You can change your choice at any time.
Through your browser
Every major browser lets you view, block and delete cookies. Blocking all cookies will break parts of most websites, including this one.
- Chrome — Settings → Privacy and security → Third-party cookies
- Safari — Settings → Privacy
- Firefox — Settings → Privacy & Security
- Edge — Settings → Cookies and site permissions
Opting out of Google Analytics entirely
Google publishes a browser add-on that prevents Analytics data being sent from your browser on any website: tools.google.com/dlpage/gaoptout
Global Privacy Control
Where your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a decline of analytics cookies.
8. Consent, and how long it lasts
Where consent is required — for visitors in the United Kingdom and Europe — we ask before analytics cookies are set, not afterwards. Your choice is recorded for 12 months, after which you will be asked again. You may withdraw consent at any time using Cookie settings, and withdrawing it is as straightforward as giving it.
Declining analytics cookies does not restrict access to any part of this site.
9. Changes to this policy
Cookies change when the tools behind a website change. We review this policy whenever an analytics configuration or third-party service is added or removed, and the current version is always at cybercrest.nz/cookie-policy/ with the date at the top.
10. Contact
Questions about cookies or this policy:
Jake Stamper, Director
jake@cybercrest.nz
027 430 1191