Skip to content
VAIR Co. No. 16938467
Legal document / Rev. A

Cookie notice

What this website stores on your device, which is very close to nothing, and why there is no consent banner asking you to agree to it.

Effective date 7 August 2026
Version Revision A. First version.
Applies to vairworks.co.uk and all pages served from it
Governing rules PECR regulation 6, read with the UK GDPR

1The short version

vairworks.co.uk sets no cookies of its own. There is no analytics, no tag manager, no advertising pixel, no social embed, no session tracking and no fingerprinting. Nothing on this site follows you anywhere, including around this site.

The only storage that can arise is a strictly necessary security cookie that our host, Cloudflare, may set in narrow circumstances. That is covered in section 4.

Back to contents

2What a cookie is, and what the law requires

A cookie is a small file a website asks your browser to keep and send back on later requests. Related technologies such as local storage, session storage and pixels do similar work by other means, and the law treats them the same way.

In the United Kingdom the rule is regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003. It says that storing information on, or gaining access to information stored on, a user's device requires clear information and the user's consent, to the UK GDPR standard of consent.

There are two exemptions. Consent is not needed where the storage is solely for transmitting a communication, or where it is strictly necessary to provide a service the user has explicitly requested. Analytics cookies are not strictly necessary and the ICO is clear that they require consent. This site avoids the question by not using them.

Back to contents

3Cookies this site sets

None. The site is a set of static HTML, CSS and SVG files plus one small JavaScript file. That script does two things: it reveals each section as you scroll to it, and it draws the hairline rule at the top of a section. It reads nothing, stores nothing and sends nothing anywhere. With JavaScript disabled the whole site still works, which is a reasonable test of the claim.

First party cookies set by vairworks.co.uk
Name Purpose Duration
None This site sets no first party cookie of any kind. Not applicable

Table scrolls sideways on narrow screens.

Back to contents

4What our host may set

The site is served from Cloudflare Pages. Cloudflare sits between your browser and the files, terminates TLS and filters abusive traffic. Its security features can set a cookie, and because it is served from this domain your browser will show it as a first party cookie even though we did not write it.

Cookies our host may set
Name Set by Purpose When it appears Duration Consent
__cf_bm Cloudflare, Inc. Distinguishes a human request from an automated one, so that abusive traffic can be filtered without blocking readers. Only where Cloudflare's bot management is engaged for a request. Most visits will not see it. Up to 30 minutes Strictly necessary. Exempt under regulation 6(4) of PECR, because it exists to deliver the page you asked for securely.
cf_clearance Cloudflare, Inc. Records that a security challenge has been passed, so that you are not challenged repeatedly. Only if you are shown a challenge page. Up to 30 days Strictly necessary. Same exemption.

Table scrolls sideways on narrow screens.

Neither cookie is used for analytics, profiling or advertising, and neither carries an identifier we can read. We have not enabled Cloudflare Web Analytics or any other measurement product on this site. Cloudflare's own cookie documentation describes these two in more detail.

Back to contents

5Google Fonts

The site is set in Newsreader and JetBrains Mono, served from fonts.googleapis.com and fonts.gstatic.com. Fetching a font file does not set a cookie, but it is a request to another company's server, and that request necessarily carries your IP address, your user agent and the page you were on.

We mention it because a cookie notice that only counts cookies gives an incomplete picture of what leaves your browser. If you would rather that request did not happen, block those two hosts. The site remains fully readable in your system's monospace and serif faces, and the layout is built to expect that. The lawful basis for the font request is set out in section 5 of the privacy notice.

Back to contents

6Other storage on your device

This site uses no local storage, no session storage, no IndexedDB, no cache API entries of its own, no service worker, no web beacons and no device or browser fingerprinting. There is no login, so there is no session to keep.

Your browser will cache the HTML, CSS, JavaScript and font files in the ordinary way, as it does for every site. That is your browser's own storage, under your control, and it is cleared whenever you clear your cache.

Back to contents

7Why there is no banner

Consent is required for storage that is not strictly necessary. This site has none, so there is nothing to ask you about, and a banner would be asking for permission it does not need.

Every unnecessary consent dialogue makes the necessary ones easier to dismiss without reading. Not showing one here is a small contribution to the opposite habit.

If this site ever adds anything requiring consent, a proper consent mechanism will appear with it: granular, refusable as easily as it is acceptable, and off until you choose otherwise. This notice would be updated before that shipped, not after.

Back to contents

8Checking this for yourself

You do not have to take our word for any of it. In a desktop browser, open the developer tools with F12, then:

  • Application or Storage shows every cookie, local storage entry and service worker for this origin.
  • Network, with the page reloaded, shows every request the page makes. You should see only vairworks.co.uk and the two Google Fonts hosts.

If you find something that contradicts this notice, tell us at hello@vairworks.co.uk. A privacy notice that cannot survive its own developer tools is not worth publishing.

Back to contents

9Controlling cookies in your browser

Every major browser lets you view, block and delete cookies, usually under Settings, then Privacy. You can block them for a single site or for all sites, and you can clear everything already stored.

Blocking cookies for vairworks.co.uk will not break anything here, because we rely on none. If you block the two Cloudflare cookies described in section 4 and you are shown a security challenge, you may be challenged again on your next visit, which is a minor inconvenience rather than a failure.

Back to contents

10Changes, and how to complain

If what this site stores changes, this notice changes first, and the revision letter and effective date at the top move with it.

Questions go to hello@vairworks.co.uk. If you are not satisfied, you may complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 1113. Full details are in section 27 of the privacy notice.

Back to contents