Cookie Policy

Effective Date: 28 January 2026
Last Updated: 28 January 2026

This site (“we”, “us”, “our”) uses cookies, pixels, local storage, and similar technologies (collectively “cookies and similar technologies”) on our website, application, and related services (the “Site”). This Cookie Policy explains what we use them for, why, who the third parties are (including Google), how we obtain consent or rely on exemptions, and how you can manage your preferences.

This Policy forms part of our Privacy Policy. We comply with the **UK GDPR**, the **Privacy and Electronic Communications Regulations 2003 (PECR)** (as amended by the Data (Use and Access) Act 2025), and **Google Consent Mode v2** for relevant traffic. Guidance from the Information Commissioner’s Office (ICO) is followed.

1. What are cookies and similar technologies?

Cookies are small text files placed on your device by the Site via your browser. Similar technologies include pixels, device fingerprinting, localStorage, and sessionStorage. They enable the Site to function, remember preferences, analyse usage, and deliver personalised advertising.

We use both **first-party** (set by us) and **third-party** cookies.

2. Categories of cookies and trackers (updated for UK rules 2026)

Category	Purpose	Consent required under PECR?	Examples / Technologies	Storage duration	Main third parties
Strictly Necessary	Authentication, session management, security, fraud prevention, basic Site functionality	No (always active)	session_id, auth_token, csrf_token, galaxy_uid	Session / up to 1 year	—
Functional / Preferences	Remember language, theme, region, favourite assets, interface settings	Yes (unless low-risk exemption applies)	lang_pref, theme_mode, favorite_assets	Up to 2 years	—
Analytics / Statistical	Aggregated usage statistics, behaviour analysis, Site improvement (non-intrusive)	No (exemption under DUA Act 2025 for low-risk statistical purposes; opt-out provided)	Google Analytics (__ga, _gid, _ga_, _gat_)	Up to 2 years + 14 months	Google Ireland Limited
Advertising / Marketing	Personalised ads, retargeting, conversion tracking	Yes (unless low-risk advertising exemption applies per ICO guidance)	Google Ads (IDE, test_cookie, _gcl_aw, _gcl_au)	Up to 1–2 years	Google Ireland Limited
Social / Embedded	Social media widgets, embedded videos, chats (when enabled)	Yes	Meta Pixel, X Pixel (if used)	Up to 2 years	Meta, X Corp.

3. Google as a third party (Consent Mode v2)

Google (Google Ireland Limited / Google LLC) is our primary partner for analytics and advertising:

Google Analytics 4 — anonymised aggregated statistics (IP anonymisation enabled)
Google Ads / Marketing Platform — personalised advertising, remarketing, conversion tracking

Google Consent Mode v2 applies: Until consent (or reliance on exemption), Google receives denied signals for ad_storage, analytics_storage, ad_user_data, and ad_personalization. Data is modelled without cookies where possible.

Data may transfer to the US under Standard Contractual Clauses and supplementary measures. More: Google Privacy Policy | How Google uses cookies

4. How we comply with consent and exemptions (UK 2026)

For cookies requiring consent: A clear banner appears on first visit, with equally prominent “Accept All” and “Reject All” buttons, plus “Settings” for granular choice.
Consent is freely given, specific, informed, and unambiguous (UK GDPR Art. 4(11)). No pre-ticked boxes; no consent from scrolling or inaction.
For exempt categories (e.g., low-risk analytics/statistical under DUA Act): We provide clear information and an easy opt-out mechanism.
Consent records kept for at least 5 years (timestamp, hashed IP, choice).
Consent Mode v2 updated instantly on choice.

5. Managing cookies and opting out

Use the “Cookie Settings” link in the Site footer anytime.
Browser settings (e.g., Chrome → Privacy & security → Cookies).
Third-party tools: youronlinechoices.eu, adchoices.com

Opting out/withdrawing does not affect strictly necessary cookies.

6. Changes to this Policy

We may update this Policy (e.g., new exemptions or ICO guidance). Changes posted here with updated date. Continued use after changes = acceptance.

7. Contact

Questions about cookies: [email protected]
UK supervisory authority: Information Commissioner’s Office (ICO)