Legal · Cookies
Cookie Policy
Last updated: 28 April 2026. This page tells you how tamazia.co.uk uses cookies and similar local-storage technologies. Essential first-party storage runs the site. Analytics and error-diagnostic tools (Google Analytics 4, PostHog, Microsoft Clarity, and Sentry Session Replay) are loaded only after you give analytics consent. No advertising trackers are set.
1. What is a cookie
A cookie is a small text file stored by your browser on your device when you visit a website. Local storage and session storage are similar mechanisms managed by your browser. Together these allow a site to remember information across page loads.
2. The cookies and storage tamazia.co.uk uses
| Name | Type | Purpose | Duration | First / third party |
|---|---|---|---|---|
tamazia-cookie-consent | Local storage | Remembers your consent decision and timestamp under Consent Mode v2 schema. | 13 months sliding (re-prompts after expiry) | First party |
_ga | Cookie | Google Analytics 4 user identification. Loaded only after analytics consent. IP truncated by GA4 default. | 2 years | Third party (Google LLC) |
_ga_<CONTAINER-ID> | Cookie | GA4 session state. Loaded only after analytics consent. | 2 years | Third party (Google LLC) |
ph_*, __ph_opt_in_out_* | Cookie + local storage | PostHog product analytics. Records page views and interaction events to understand how the site is used. Loaded only after analytics consent. | 12 months | Third party (PostHog, EU region) |
_clck, _clsk | Cookie + local storage | Microsoft Clarity session analytics and heatmaps. Records interactions to diagnose usability issues. Loaded only after analytics consent. | _clck: 12 months · _clsk: 1 day | Third party (Microsoft Corporation) |
sentryReplaySession and related Replay storage | Session storage | Sentry Session Replay. Records a masked reconstruction of the page session to diagnose front-end errors. Text is masked and media blocked. Recording starts only after analytics consent; error monitoring without replay runs as a strictly necessary reliability function. | Session | Third party (Functional Software, Inc., trading as Sentry) |
__cf_bm | Cookie | Cloudflare bot management. Strictly necessary for security and DDoS protection. | 30 minutes (rolling) | First party (set by Cloudflare on our behalf) |
cf_chl_* | Cookie | Cloudflare Turnstile challenge. Strictly necessary when bot-defence challenge is triggered. | Session | First party (set by Cloudflare on our behalf) |
The site uses Consent Mode v2 with a default-denied state. Until you accept analytics, Google Analytics, PostHog, Microsoft Clarity, and Sentry Session Replay are not loaded or do not record, and they set no storage. After you accept, these analytics and error-diagnostic tools load and begin recording. No advertising cookies are set under any circumstances. The 13-month sliding expiry on the consent decision is set per ICO guidance (PECR Reg 6).
3. What we do not use
- No Meta Pixel, LinkedIn Insight, X Pixel, or any advertising tag.
- No retargeting or behavioural-advertising cookies of any kind.
- No browser fingerprinting.
- Google Analytics 4, PostHog, and Microsoft Clarity load only after explicit consent under Consent Mode v2 with a default-denied state. GA4 runs with IP anonymisation.
- Sentry Session Replay records a masked reconstruction of the session (all text masked, media blocked) and only after analytics consent. Error monitoring without replay runs as a strictly necessary reliability function.
- Cloudflare Web Analytics is privacy-friendly server-side measurement (no client cookies); it is still gated behind explicit consent for belt-and-braces.
4. Your choices
When you first visit tamazia.co.uk you will see a consent banner with two equally prominent options: Reject all and Accept all, plus Manage preferences to toggle the analytics category on its own. Choosing Reject all, or leaving the choice unmade, means no analytics or session-replay storage is set: Google Analytics, PostHog, Microsoft Clarity, and Sentry Session Replay stay off. Choosing Accept all (or enabling the analytics toggle) loads them.
You can change or withdraw consent at any time by reopening the banner from the cookie-settings link in the footer, or by clearing site storage in your browser. Withdrawal is as easy as giving consent.
5. Lawful basis
Under UK GDPR and EU GDPR the essential cookie used by this site is processed on the basis of legitimate interests under Article 6(1)(f). Namely, the operation of the consent mechanism itself, which is required by EU PECR and the UK PECR.
6. Contact
Questions about this policy: founder@tamazia.co.uk. For data-subject requests under UK GDPR / EU GDPR / UAE PDPL, see the privacy notice.