What cookies are
Cookies are small text files set in your browser when you visit a website. They allow the site to remember things across requests — your locale preference, your consent state, your authenticated session — and they enable analytics and (with consent) marketing.
Categories we use
Strictly necessary
These keep the site functioning. They include the Payload admin authentication cookie (only set after you sign in to /admin), a CSRF/state cookie for the OAuth flow during admin sign-in, and a cookie that records your consent decision so we don't ask you again on every page.
Analytics
Only after you accept analytics cookies. We use Google Analytics 4 and our self-hosted Plausible installation. We do not enable cross-site advertising features in GA4.
Marketing
Only after you accept marketing cookies. Used for email-engagement attribution via HubSpot when you submit a form or click through from a marketing email.
How to change your preferences
Click "Cookie policy" at the bottom of any page to reopen the consent dialog and adjust your choices. You can also clear cookies in your browser settings, which will reset our prompt.
Do Not Track
We honour your browser's Do Not Track signal: when DNT=1, we do not load analytics or marketing tags regardless of your stated cookie preferences.