Information about cookies and similar technologies used on enigmat.io and how you can control them.
Last updated: 3 September 2026
Your choices
We use necessary storage for core operation and security. Optional analytics is controlled through our cookie-consent choices. You can review or change your preferences using the cookie settings control on the website.
1. What are cookies?
Cookies are small text files that a website stores on your computer, phone or other device. They can help a website work, remember choices, keep services secure and provide information about how the site is used.
Similar technologies, such as local storage, pixels or browser identifiers, can perform comparable functions. In this policy, we use “cookies” as a convenient term for cookies and similar storage or access technologies where appropriate.
2. How we use cookies
We use cookies and similar technologies for a limited number of purposes:
- to remember your cookie and privacy preferences;
- to protect forms and the website from bots, spam and abuse;
- to understand how visitors use the website through Google Analytics 4 where analytics is enabled; and
- to support normal WordPress administration for authorised site administrators.
We do not currently use advertising or remarketing cookies on this website. If that changes, we will update this policy and the consent controls before enabling them.
3. Cookie categories
- Necessary / security – required for core operation, security, anti-spam, consent choices or functionality requested by the user. These may operate without optional analytics consent where the law allows.
- Analytics – helps us understand website usage and improve the site. Our planned Google Analytics 4 implementation is treated as optional and controlled by the cookie-consent choices.
- Functional – would support optional features or preferences beyond what is strictly necessary. We do not currently rely on a separate functional-cookie category for major visitor-facing features.
- Advertising – used for targeted advertising, remarketing or advertising profiles. We do not currently use advertising cookies on enigmat.io.
4. Cookie Compliance for WordPress
We use Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA as our cookie-consent interface. It allows visitors to make choices about optional cookies and helps us record or respect those choices depending on the mode and configuration we use.
The cookie banner may store a necessary preference in your browser so that your choices can be remembered. In connected mode, consent information may also be processed by Hu-manity.co in order to provide consent records and related compliance features.
You can change your cookie preferences later by reopening the cookie settings control provided on the website.
5. Cookies and storage we expect to use
The exact cookies visible on the live website can change when software is updated or configuration changes. The table below describes the principal cookies or storage expected from the planned setup.
| Name / service | Category | Purpose | Typical duration |
|---|---|---|---|
| Cookie-consent preference / Cookie Compliance | Necessary | Remembers your consent or privacy choices. Exact browser-storage name can vary with the plugin mode and configuration. | According to the cookie-consent configuration. |
| hu-form (where used by Cookie Compliance form-consent integration) | Necessary | Short-lived local cookie used by the Cookie Compliance form-consent flow. | About 5 minutes. |
| _ga | Analytics | Google Analytics 4 first-party cookie used to distinguish users. | Google default: 2 years. |
| _ga_<measurement-id> | Analytics | Google Analytics 4 first-party cookie used to persist session state. | Google default: 2 years. |
| Cloudflare Turnstile token / security data | Necessary / security | Helps determine whether a form submission is from a genuine visitor rather than automated traffic. | Normally short-lived and security-dependent. |
| cf_clearance | Necessary / security | Proves to Cloudflare that a visitor has passed relevant security checks and may reduce repeated challenges. | Depends on Cloudflare security configuration. |
| WordPress administration cookies | Necessary | Used when authorised administrators log in to manage the website. They are not used to track ordinary visitors for marketing. | Session or as configured by WordPress. |
Google documents the default GA4 cookie durations above. Browser privacy controls can shorten actual lifetime. We may also configure shorter durations.
6. Google Analytics 4
Where you allow analytics, Google Analytics 4 helps us measure and understand website usage. GA4 may collect information such as page views, events, device/browser information, approximate location and referral information. Google states that IP addresses are not logged or stored in Google Analytics 4.
The principal GA4 cookies in our planned implementation are _ga and _ga_<measurement-id>. Google lists a default expiry of two years for each, although browser restrictions or our own settings may result in a shorter lifetime.
We do not intend to load optional analytics storage contrary to the choices you make through our cookie-consent control.
7. Cloudflare Turnstile and security storage
Our forms use Cloudflare Turnstile to reduce spam and automated abuse. Turnstile performs security checks using technical browser and network signals. By default, the Turnstile widget issues a short-lived token that is validated by our website. If pre-clearance is enabled, Cloudflare may additionally set a cf_clearance cookie.
We treat Turnstile as a security service rather than an analytics or advertising service. Cloudflare states that Turnstile processes data necessary for the security function and does not access, store or transmit form-entry contents.
8. Google Search Console
We use Google Search Console through Google Site Kit to understand our visibility and performance in Google Search. Search Console is an administrative reporting tool and is not used by us to set advertising cookies on website visitors.
9. How to change or withdraw consent
You can review or change your cookie choices at any time through the cookie settings control on the website. Where consent is the basis for an optional cookie, withdrawing consent will apply to future storage or access. It does not automatically remove cookies already stored in your browser, so you may also wish to delete them using your browser settings.
10. Browser controls
Most browsers let you view, delete or block cookies. You can usually choose to block all cookies, block third-party cookies, clear cookies when you close the browser or use private-browsing controls. Blocking necessary cookies may affect how parts of the website work.
11. Changes to this Cookie Policy
We may update this policy when our website, cookie configuration, analytics setup or service providers change. We will update the date at the top of the policy when material changes are made.
12. Contact us
If you have questions about our use of cookies or similar technologies, contact us at contact@enigmat.io or call 01698 688939.