Cookie notice
What this website stores on your device, which is very close to nothing, and why there is no consent banner asking you to agree to it.
1The short version
vairworks.co.uk sets no cookies of its own. There is no analytics, no tag manager, no advertising pixel, no social embed, no session tracking and no fingerprinting. Nothing on this site follows you anywhere, including around this site.
The only storage that can arise is a strictly necessary security cookie that our host, Cloudflare, may set in narrow circumstances. That is covered in section 4.
Back to contents2What a cookie is, and what the law requires
A cookie is a small file a website asks your browser to keep and send back on later requests. Related technologies such as local storage, session storage and pixels do similar work by other means, and the law treats them the same way.
In the United Kingdom the rule is regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003. It says that storing information on, or gaining access to information stored on, a user's device requires clear information and the user's consent, to the UK GDPR standard of consent.
There are two exemptions. Consent is not needed where the storage is solely for transmitting a communication, or where it is strictly necessary to provide a service the user has explicitly requested. Analytics cookies are not strictly necessary and the ICO is clear that they require consent. This site avoids the question by not using them.
Back to contents3Cookies this site sets
None. The site is a set of static HTML, CSS and SVG files plus one small JavaScript file. That script does two things: it reveals each section as you scroll to it, and it draws the hairline rule at the top of a section. It reads nothing, stores nothing and sends nothing anywhere. With JavaScript disabled the whole site still works, which is a reasonable test of the claim.
| Name | Purpose | Duration |
|---|---|---|
| None | This site sets no first party cookie of any kind. | Not applicable |
Table scrolls sideways on narrow screens.
Back to contents4What our host may set
The site is served from Cloudflare Pages. Cloudflare sits between your browser and the files, terminates TLS and filters abusive traffic. Its security features can set a cookie, and because it is served from this domain your browser will show it as a first party cookie even though we did not write it.
| Name | Set by | Purpose | When it appears | Duration | Consent |
|---|---|---|---|---|---|
| __cf_bm | Cloudflare, Inc. | Distinguishes a human request from an automated one, so that abusive traffic can be filtered without blocking readers. | Only where Cloudflare's bot management is engaged for a request. Most visits will not see it. | Up to 30 minutes | Strictly necessary. Exempt under regulation 6(4) of PECR, because it exists to deliver the page you asked for securely. |
| cf_clearance | Cloudflare, Inc. | Records that a security challenge has been passed, so that you are not challenged repeatedly. | Only if you are shown a challenge page. | Up to 30 days | Strictly necessary. Same exemption. |
Table scrolls sideways on narrow screens.
Neither cookie is used for analytics, profiling or advertising, and neither carries an identifier we can read. We have not enabled Cloudflare Web Analytics or any other measurement product on this site. Cloudflare's own cookie documentation describes these two in more detail.
Back to contents5Google Fonts
The site is set in Newsreader and JetBrains Mono, served from fonts.googleapis.com and fonts.gstatic.com. Fetching a font file does not set a cookie, but it is a request to another company's server, and that request necessarily carries your IP address, your user agent and the page you were on.
We mention it because a cookie notice that only counts cookies gives an incomplete picture of what leaves your browser. If you would rather that request did not happen, block those two hosts. The site remains fully readable in your system's monospace and serif faces, and the layout is built to expect that. The lawful basis for the font request is set out in section 5 of the privacy notice.
Back to contents6Other storage on your device
This site uses no local storage, no session storage, no IndexedDB, no cache API entries of its own, no service worker, no web beacons and no device or browser fingerprinting. There is no login, so there is no session to keep.
Your browser will cache the HTML, CSS, JavaScript and font files in the ordinary way, as it does for every site. That is your browser's own storage, under your control, and it is cleared whenever you clear your cache.
Back to contents7Why there is no banner
Consent is required for storage that is not strictly necessary. This site has none, so there is nothing to ask you about, and a banner would be asking for permission it does not need.
Every unnecessary consent dialogue makes the necessary ones easier to dismiss without reading. Not showing one here is a small contribution to the opposite habit.
If this site ever adds anything requiring consent, a proper consent mechanism will appear with it: granular, refusable as easily as it is acceptable, and off until you choose otherwise. This notice would be updated before that shipped, not after.
Back to contents8Checking this for yourself
You do not have to take our word for any of it. In a desktop browser, open the developer tools with F12, then:
- Application or Storage shows every cookie, local storage entry and service worker for this origin.
- Network, with the page reloaded, shows every request the page makes. You should see only vairworks.co.uk and the two Google Fonts hosts.
If you find something that contradicts this notice, tell us at hello@vairworks.co.uk. A privacy notice that cannot survive its own developer tools is not worth publishing.
Back to contents9Controlling cookies in your browser
Every major browser lets you view, block and delete cookies, usually under Settings, then Privacy. You can block them for a single site or for all sites, and you can clear everything already stored.
Blocking cookies for vairworks.co.uk will not break anything here, because we rely on none. If you block the two Cloudflare cookies described in section 4 and you are shown a security challenge, you may be challenged again on your next visit, which is a minor inconvenience rather than a failure.
Back to contents10Changes, and how to complain
If what this site stores changes, this notice changes first, and the revision letter and effective date at the top move with it.
Questions go to hello@vairworks.co.uk. If you are not satisfied, you may complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 1113. Full details are in section 27 of the privacy notice.
Back to contents