Legal

Cookie Policy

Last updated: 18 August 2026 · Version 3.4

01The short version

Necessary cookies only, until you choose otherwise. On your first visit we ask which optional cookies to allow through a banner. Reject or ignore it and only two things happen: Cloudflare’s security cookie and this tool’s own record of your choice. The homepage also always shows a Google Reviews widget, which we've confirmed sets no cookie at all, so it isn't part of the banner. Two optional things are available if you say yes to the banner: an AI chatbot, and Google Ads measurement of which enquiries came from an ad. Neither loads, and no data reaches Google or Elfsight through them, unless you actively switch it on.

You can change your mind at any time using Manage cookie settings, found in this page’s cookie banner or at the bottom of every page.

02What cookies are

Cookies are small text files stored on your device. UK law generally requires consent before an organisation stores information on, or reads information from, your device, unless a specific exception applies.

03What this site uses

The pages load locally hosted fonts and our own scripts from rootdelta.net. Everything below is either strictly necessary (no consent needed), loads without setting any cookie at all, or is off by default until you turn it on through the cookie banner.

Necessary — always on

Cloudflare may set a limited challenge or security cookie when it checks a request; see the next section. Our cookie-consent tool (a locally hosted copy of the open-source CookieConsent (opens in a new tab) library) sets one cookie, cc_cookie, to record which choice you made so we don’t ask again on every page. Both rely on the PECR "strictly necessary" exception: one protects the site from abuse, the other is needed to operate the consent mechanism itself.

Always shown — Reviews widget (Elfsight), no cookie

The homepage always loads a Google Reviews widget from Elfsight, SL (Escaldes-Engordany, Andorra), run from elfsightcdn.com. Elfsight's own documentation used to name one visitor-facing cookie this set, elfsight_viewed_recently — at our request, Elfsight disabled it for our account on 17 August 2026, and repeated testing on 18 August 2026 (across several checks, the most reliable with browser ad-blocker extensions turned off, which can otherwise mask or add noise to what's actually there) found the widget sets no cookie of any kind. Because nothing is stored on or read from your device, there is nothing here for the PECR consent rules described above to apply to, so it isn't part of the cookie banner. Loading it does still share your IP address and request details with Elfsight, the same way loading any resource from a third party does — see our Privacy Policy for how we describe that. See Elfsight’s own Privacy Policy (opens in a new tab) and Terms of Service (opens in a new tab) for the detail of what they collect and how they use it — we summarise it here in good faith but their own documents are the current source.

Optional — AI chatbot (Elfsight)

If you accept this category, every page loads an AI chatbot from Elfsight, SL (Escaldes-Engordany, Andorra), the same provider as the reviews widget above, run from the same elfsightcdn.com script. The chatbot is clearly labelled as an automated AI agent whose answers may not always be accurate. If you choose to leave your name, email address or phone number in a chat so we can follow up, that is used the same way as our contact form — see our Privacy Policy for what we do with it. Elfsight has stated publicly that the chatbot runs on OpenAI’s ChatGPT to generate replies, which may send your message to the United States; we have not independently confirmed the data-processing terms Elfsight itself has with OpenAI for this, which is Elfsight’s own arrangement, not ours. Accepting this category is treated as your explicit, informed consent to that transfer (Article 49(1)(a) UK GDPR) — see our Privacy Policy for the detail. Elfsight’s own Privacy Policy (opens in a new tab) and Terms of Service (opens in a new tab) cover what they do with a conversation's content. Until you accept, the chatbot is not present on the page at all.

Optional — Advertising (Google Ads)

If you accept this category, the site loads Google’s gtag.js tag for our Google Ads account, which lets us measure which enquiries followed a click on one of our ads. Google’s own cookies and identifiers for this (for example _gcl_au) are set only after acceptance. We use Google’s Consent Mode signals to tell Google not to use advertising cookies at all until you say yes; before that, the tag itself is not even requested from Google’s servers.

Hosting, security and logs

Netlify hosts the site and handles the contact form. Cloudflare provides domain-name service, content delivery and edge security. Both providers create standard operational and security logs on their servers. Server logs are not cookies and do not place information on your device. The providers and their processing are explained in our Privacy Policy.

When Cloudflare presents a security challenge, it may set cf_clearance to record that the challenge was passed and avoid repeating it during the clearance period. Cloudflare says the cookie lasts for the configured Challenge Passage period, which defaults to 30 minutes, and may use related short-lived cookies to operate or diagnose the challenge. Blocking these cookies may prevent the check from completing or the site from loading.

We use these security cookies without consent only where their purpose and use meet an applicable PECR exception. If we introduce storage or access that does not meet an exception, we will obtain consent before enabling it or remove it. We will update this policy and our Privacy Policy before any material change goes live.

04The contact form

The contact form and confirmation page do not set a cookie. The form includes a hidden field used to reject obvious automated spam. When you send the form, the submission travels through Cloudflare to Netlify and is checked for spam through Netlify’s processing chain. Those checks happen on provider servers, not through storage on your device. See our Privacy Policy for the organisations involved.

05Managing your cookie choices

Use Manage cookie settings (in the cookie banner, or the link in this page’s and every page’s footer) at any time to see what you accepted and change it. Turning the chatbot off after it has already loaded on the current page reloads the page to clear it fully, since the widget provider does not offer a way to unload it in place; turning it off before it has loaded simply keeps it off. Turning advertising off tells Google to stop using advertising cookies from that point, even though the measurement code itself stays loaded for the rest of that visit. The Reviews widget isn’t part of these choices at all, since it sets no cookie for them to apply to.

You can also inspect, block and delete any cookie through your browser settings. Blocking Cloudflare’s challenge or security cookie may mean the security check cannot complete and the site does not load; blocking cc_cookie means we ask for your cookie choice again on your next visit.

06Questions

Email hello@rootdelta.net with any question about cookies on this site. See also our Privacy Policy.