Tracking
Cookie Policy
Effective date: September 19, 2026
Last updated: November 1, 2026
This page lists every cookie astridlind.com actually sets. It was written by inspecting the live site, not from a template.
What we set
| Name | Set by | Purpose | Type | Expires |
|---|---|---|---|---|
_ga | Google Analytics 4 | Distinguishes one visitor from another so we can count visitors rather than page loads | Analytics – non-essential | 2 years |
_ga_P06B65EN7V | Google Analytics 4 | Keeps session state for our specific property | Analytics – non-essential | 2 years |
_GRECAPTCHA | Google reCAPTCHA | Tells an automated script apart from a person, so our lead forms are not flooded by bots. Set only on pages that show one of our lead forms. | Security – strictly necessary | 6 months |
That is the complete list. We set no advertising cookies, no retargeting pixels and no social media trackers. There is no Meta/Facebook Pixel, no LinkedIn Insight Tag, no TikTok pixel, no Hotjar, no Microsoft Clarity, and no third-party iframes anywhere on the Site.
The Site also uses one item of browser session storage, wpEmojiSettingsSupports, which WordPress uses to check whether your browser can display emoji. It stores no information about you, is not a cookie, and is cleared when you close the tab.
The Site also stores one item in your browser’s local storage, al_attr. It records the first page you landed on and any ad or campaign tracking values in the link you used (such as gclid or utm_source). It is not a cookie, it is not read by Google or any other third party, and it leaves your browser only if you submit one of our forms, so we can tell which ad or source an enquiry came from. It is cleared after you submit a form or after 30 days.
Strictly necessary cookies
The Site does not require you to log in, does not use a shopping cart, and does not keep a browsing session for visitors. There is one exception, and it applies only to pages that show our lead form.
Spam protection on our lead forms. Every page that shows one of our lead forms (our home page, service pages, area pages, the Areas We Serve page and the contact page) loads Google reCAPTCHA v3 to keep the form from being filled in by automated scripts. It sets the _GRECAPTCHA cookie, and it works by observing how the page is used – pointer movement, typing rhythm, timing, and browser and device characteristics – and sending those signals, together with your IP address, to Google. Google returns a score. We receive only that score. We do not see your Google account, and we are not told who you are.
This is a security measure rather than analytics or advertising, so it is not gated behind the consent banner. Google’s handling of the data is governed by the Google Privacy Policy and the Google Terms of Service.
If you would rather it did not run, do not use the form. Call or email us instead, using the details at the bottom of this page. Pages without a lead form (for example our legal pages, Learning Center articles, About and Projects) do not load reCAPTCHA. Because it is loaded with the form, reCAPTCHA can run while you view a page that shows the form, even if you do not submit it.
If you do submit the form, WordPress may also briefly set a cookie to guard against duplicate submissions. That is strictly necessary for the form to work and is not covered by the consent banner either.
Your choices
The banner. On your first visit you are asked whether to allow analytics. Analytics run unless you decline, which is the standard California allows. If you decline:
- the Google Analytics script is not loaded at all on later page views,
- the
_gacookies already set are deleted, - your choice is remembered in your browser for 12 months.
Changing your mind. Use the Cookie settings link in the footer of any page.
Global Privacy Control. If your browser sends a GPC signal we treat it as a decision to decline analytics, and the banner does not appear.
Your browser. You can also block or delete cookies in your browser settings. Blocking the two analytics cookies has no effect on how the Site works for you. Blocking _GRECAPTCHA may stop our lead forms from submitting, because the form will not be able to establish that you are not a bot; if that happens, please phone or email us instead.
Opting out at Google
Google offers a browser add-on that prevents Google Analytics from collecting data on any website: tools.google.com/dlpage/gaoptout
How Google Analytics is configured here
- IP addresses are not stored. Google Analytics 4 does not log or store full IP addresses.
- Data retention is set to 14 months.
- We do not use Google Signals, Google Ads linking, or any advertising feature that would combine your visit with advertising profiles. This is why we are able to state in our Privacy Policy that we do not share personal information for cross-context behavioral advertising.
Maintenance note: if Google Signals or Google Ads linking is ever switched on in the GA4 property, this page and the “sale/share” section of the Privacy Policy must be revised. Turning those features on changes the legal position.
Questions
info@astridlind.com | (424) 256-5005
