Introduction
This Cookie Policy supplements the Privacy Policy published by Xarlenoxthepia (“we”, “us”). It exists because regulators increasingly expect granular explanations—not checkbox theatrics—about storage technologies embedded inside informational websites.
When we mention “cookies”, we include HTTP cookies, HTML web storage where equivalent functionality applies, pixel trackers authorised after consent, and similar identifiers referenced by analytics vendors operating solely under executed agreements.
Plain-language reminder: rejecting optional cookies does not degrade access to general informational articles about structuring desk-friendly movement routines unless security tooling detects abusive automation.
How technologies behave session-to-session
Strictly necessary identifiers activate immediately because consent dashboards themselves rely upon remembering outcomes. Analytics cookies activate only after you affirm acceptance inside our banner or adjust granular switches upward inside Cookie Settings.
LocalStorage synchronisation piggybacks the same consent snapshot JSON blob referenced elsewhere—meaning revocation wipes unnecessary artefacts wherever feasible.
Identifiers versus payloads
Cookies frequently carry opaque tokens pointing toward server-side logs while downloads remain anonymous until you voluntarily submit forms. Marketing pixels—when permitted—may correlate aggregate impressions without exposing raw salary bands or medical histories.
Inventory overview
Exact filenames evolve alongside vendor releases; we refresh this narrative quarterly even when engineers ship silently.
| Category | Representative purpose | Typical lifetime |
|---|---|---|
| Strictly necessary | Stores consent JSON + CSRF alignment tokens issued by hosting layers. | Session up to twelve months |
| Analytics | Distinguishes returning informational visits from single-hit anomalies. | Vendor defaults reviewed annually |
| Marketing | Attributes brochure downloads back to lightweight experiments. | Ninety days unless shortened sooner |
Third-party recipients
Optional analytics or marketing layers may transmit truncated signals to subprocessors domiciled outside New Zealand. Where European Economic Area visitors browse, we rely upon Standard Contractual Clauses or equivalent safeguards discussed inside our Privacy Policy international sections.
Managing preferences
Use “Cookie Settings” inside the banner whenever you wish to reopen granular switches after initial dismissal. Browser manufacturers additionally expose global deletion workflows—Chrome, Safari, Firefox, and Edge each publish evolving menus worth bookmarking for facilities teams responsible for kiosk endpoints.
Blocking strictly necessary storage wholesale may force the banner to reappear each navigation—this behaviour protects transparency rather than inconveniencing anyone deliberately.
Signals honouring
Where legislatures mandate recognition of browser-level opt-out headers, we integrate vendor guidance as soon as practically deployable without breaking consent archaeology requirements.
Review cadence
Material cookie introductions trigger Policy refreshes with updated hero timestamps mirroring legal communications calendars. Immaterial vendor patches might arrive silently yet receive quarterly bullet lists upon request.
Questions belong with mailuse@xarlenoxthepia.world or via contact.html.