This Cookie Policy explains how Xirvy uses cookies and similar technologies on our marketing website. It should be read with our Privacy Policy.
We comply with the UK Privacy and Electronic Communications Regulations (PECR) and UK GDPR. Non-essential cookies (analytics and advertising) are only set after you give consent. The Google Analytics script itself does load on every page beforehand, in a cookieless mode that stores nothing on your device and sets no identifiers — section 5 explains exactly what this does and does not send.
2. Who we are
Cookies on this site are used by Xirvy. See our Privacy Policy for more information about how we handle personal data.
3. How we use cookies
We use cookies to:
- Remember your cookie consent choice
- Operate and secure the website
- Protect our contact form from spam and abuse (Cloudflare Turnstile)
- Measure website performance with Google Analytics (analytics cookies and identifiers only with consent)
- Measure and improve advertising with Meta/Facebook tools (with consent)
4. Cookie categories
- Strictly necessary — required for core site functions, storing consent, and protecting our contact form from spam (Cloudflare Turnstile). These do not require consent under PECR.
- Analytics — help us understand how visitors use the site (Google Analytics). Google’s script loads on every page, including before you answer the banner, but runs in a cookieless mode by default and only sets analytics cookies or identifiers once you consent.
- Advertising — used for ad measurement and personalisation (Meta/Facebook). Loaded only with consent.
5. Cookies and similar technologies we use
Exact cookie names and durations can vary as Google and Meta update their products. The table below describes the technologies we use or enable once consent is given.
| Name / technology | Provider | Category | Purpose | Typical duration |
|---|---|---|---|---|
| xirvy_cookie_consent | Xirvy (first-party) | Strictly necessary | Stores your consent preferences for Analytics and Advertising (and that strictly necessary processing is always on) | 12 months (localStorage). After 12 months the record expires, we clear any Meta identifiers, and the banner reappears so you can choose again |
| Cloudflare Turnstile challenge data | Cloudflare | Strictly necessary | Anti-spam check on our contact form; processes your IP address and browser signals to confirm you are not an automated bot | Short-lived (challenge only) |
| _ga, _ga_*, _gid (and related) | Google Analytics | Analytics | Distinguish visitors, measure pages and site performance | Up to 24 months (varies by cookie) |
| _fbp, _fbc, fr, and Meta pixel storage | Meta Platforms | Advertising | Ad delivery, measurement, and frequency capping | Up to 90 days (varies) |
Before you consent to the Analytics category, Google Analytics runs in Google Consent Mode with analytics and advertising storage denied: it sends aggregate, cookieless signals only and sets none of the Google Analytics cookies listed above. The script does still load on every page, so Google receives your IP address, browser type, and the page you are viewing as part of those signals. We rely on legitimate interests (measuring aggregate site performance) for this, as set out in our Privacy Policy. The Meta pixel is different: it does not load at all until you consent to the Advertising category.
Technologies that are not cookies. Our pages load the site’s typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). This stores nothing on your device, but Google does receive your IP address, browser type, and the page you are viewing whenever the fonts load. Because the fonts are needed to display the site, this happens on every page, including before you answer the cookie banner. Cloudflare Turnstile works in a similar way on our contact page.
Third-party providers may also set their own cookies subject to their policies. See Google’s Privacy Policy, Meta’s Privacy Policy, and Cloudflare’s Privacy Policy.
6. Managing your cookies
Our cookie banner
When you first visit (and again when a previous choice has expired), we show a banner titled Cookies. It explains that we use strictly necessary cookies to run this site, and that by choosing Accept all you also agree to optional analytics and advertising cookies.
The banner lets you:
- Accept all — consent to Analytics and Advertising (as well as strictly necessary cookies, which are always on)
- Turn Analytics and Advertising on or off individually, then choose Save preferences to apply that choice. Leave both unchecked and save if you only want strictly necessary cookies
Strictly necessary processing cannot be switched off. Advertising scripts do not load until you consent to the Advertising category. Google Analytics loads in a cookieless mode that stores nothing on your device and sets no identifiers; it only begins setting analytics cookies after you consent to the Analytics category.
Changing or withdrawing your consent is as easy as giving it. At any time you can reopen the preferences panel using the button here, or the “Cookie settings” link in the site footer, adjust the toggles, and save. Your updated choice takes effect immediately.
We also ask again periodically: your choice is remembered for 12 months, after which the banner reappears so you can confirm or change it.
Browser controls
Most browsers let you block or delete cookies via settings. Blocking all cookies may affect site functionality. You can also use industry tools such as Your Online Choices (youronlinechoices.com) for some advertising cookies, and Google’s Ads Settings for Google personalisation.
7. Updates
We may update this Cookie Policy when our technologies or the law change. The “Last updated” date will be revised accordingly.
8. Contact
Questions: contact@xirvy.com
For broader data protection information, see our Privacy Policy.