Cookie policy
Two cookies, both from Google Analytics, both off until you turn them on. No advertising, nothing that follows you to other sites, nothing sold to anyone. Here is the detail, including the bit about Jersey law that most sites get wrong.
What this site can set
These are the only cookies involved, and neither one exists in your browser unless you have agreed to it. There are no advertising cookies, no social media pixels, no chat widget and no embedded video.
| Cookie | Set by | What it does | How long |
|---|---|---|---|
| _ga | Google Analytics | Tells one visitor apart from another so Google can count how many people came, without knowing who any of them are. | 2 years |
| _ga_* | Google Analytics | Keeps track of a single visit: which pages you looked at, in what order, and when the visit ended. | 2 years |
There is one more thing stored in your browser, and it is not really a cookie: a small entry called gd-consent that remembers your answer so you are not asked on every page. It never leaves your browser and is not sent to me or to anyone else. Clearing it is the "forget my choice" button below.
What I use analytics for
To find out which pages people actually read, roughly how many visitors there are, and which pages they leave from. That is genuinely useful: it tells me whether the pricing page is doing its job and whether anyone gets as far as the portfolio.
What it is not used for: identifying you, advertising, retargeting, building a profile, or anything that gets shared or sold. Google Analytics does not store your IP address, and I have no way of turning any of it back into a person.
Nothing loads until you say yes
This is worth spelling out, because it is stronger than what most sites do. A lot of consent banners load the tracking script immediately and then ask it politely not to record anything. This one does not load it at all. Until you press accept, no request is made to Google, no script reaches your browser and no cookie is created.
- No is as easy as yes. One button each, side by side, same size. Article 11(3) of the Jersey Law requires that, and it is the right way round anyway.
- You can change your mind at any time, on this page, in one click. Turning analytics off also deletes the cookies that were already set.
- I will ask again after twelve months. Consent from three years ago is not really consent.
- Saying no changes nothing else. The site works identically. There is no nag, no reduced version and no second ask on the next page.
How this works in Jersey
This part surprises people, including people who build websites, so it is worth stating plainly.
Jersey has no equivalent of the UK's PECRand the EU's ePrivacy Directive does not apply here. The rule you may have heard, that a site must get your permission before storing anything on your device, is a UK and EU rule. It has no Jersey counterpart, and the JOIC says as much in its own published guidance.
What does apply is the Data Protection (Jersey) Law 2018. A cookie that handles personal data, and most analytics cookies do because they carry an identifier and your IP address, still needs a condition for processing under Schedule 2 and still has to be disclosed under Article 12. So the obligation is real, it just comes from a different direction and it does not automatically mean a consent banner.
So I could legally run these analytics cookies without asking you at all, on legitimate interests, and I would be on solid ground in Jersey doing it. I ask anyway, for three reasons: the JOIC clearly treats consent as the expected norm; a public site with a lot of UK visitors can be caught by UK rules regardless of Jersey law; and I would rather ask. It seems a poor look to run a business on not selling people things they do not need and then help myself to their data because a technicality lets me.
The lawful basis for the analytics cookies is therefore your consent, under Schedule 2, Part 1, paragraph 1 of the Jersey Law. You can withdraw it below, and withdrawing has to be as easy as giving it.
Your choice
Your current setting
You have not made a choice yet, so analytics cookies are off. They stay off until you say otherwise.
Blocking cookies yourself
You do not need my controls or my permission. Every browser lets you block or delete cookies for a site, and this one works perfectly well with all of them blocked. Chrome, Safari, Firefox and Edge all keep this under privacy settings. Google also publishes its own opt-out browser add-on for Analytics, which works across every site rather than just this one.
Where the analytics data goes
To Google, in the United States. Article 66 of the Jersey Law only allows that where the destination ensures an adequate level of protection, and it does here: Jersey takes its adequacy from European Commission decisions, and Google is certified under the EU to US Data Privacy Framework, which is one. Google's data processing terms also carry standard contractual clauses, recognised separately under Article 67(2)(c). The privacy policy sets that out in full.
Anything else
The privacy policy covers everything that is not a cookie: the contact form, server logs, who else sees your information, how long I keep it and what you can ask me to do. If something here is unclear, email me at info@granitedigital.je and I will answer it. Questions are free, to anyone.