Cookies and similar technologies
Cookies are small browser files that may be sent with web requests. Local storage stays in your browser between visits; session storage belongs to a tab session. This policy covers these technologies, even when no cookie is involved.
What the public site uses
Ordinary public navigation does not set an AZ Unified HTTP cookie. We do not use advertising cookies, marketing pixels, embedded social widgets or a contact-form CAPTCHA. Language links work through the page URL, whether or not you accept optional storage.
| Name | Provider | Purpose | Type | Duration | Essential? | Consent required? |
|---|---|---|---|---|---|---|
az-unified-language | AZ Unified | Remembers an explicitly selected language between visits. Read and written only with Preferences consent. | localStorage | Until withdrawn, cleared or expired; maximum 180 days from consent. | No | Yes — Preferences. |
az-unified-cookie-consent | AZ Unified | Stores cookie-choice version, time and permission for optional language storage. No identity or browsing history. | localStorage | 180 days from your choice. An expired record is removed on the next visit. | Yes | No — necessary to remember your privacy choice. |
az-unified-contact-request | AZ Unified | Random identifier to prevent duplicate form submissions. Created only when sending, not when typing. No form fields. | sessionStorage | Until successful acceptance or an idempotency conflict, or the end of the tab session. Browser session restoration can retain it. | Yes | No — necessary for the enquiry you ask us to send. |
Refusing or withdrawing Preferences removes the saved language and stops it being read or written. It does not change the language of the page you are reading. Expired choices require a new decision. Your browser can also remove storage.
Necessary storage and security
The request identifier supports the enquiry you submit; the cookie-choice record avoids repeatedly asking for the same privacy decision. Neither stores your name, email address or message. No public challenge or anti-abuse cookie appeared in the audited browsing session. Cloudflare may present a security check when needed; cookies in that situation serve that security function, not advertising.
Cloudflare Web Analytics
Cloudflare Web Analytics is enabled with EU visitor data excluded. Its analytics script is not injected for EU visitors. Where collection is enabled, it measures page views and loading performance through browser timing information. Cloudflare states that it uses no cookies, local storage or individual fingerprinting for analytics. No analytics script or analytics storage appeared in the audited session.
Cookie-free does not mean no browser information is processed: performance measurements are still analytics. Our Preferences switch controls saved language only; it does not change Cloudflare’s regional analytics setting.
Admin authentication is separate
Cloudflare Access protects Admin. Visiting public pages does not start an Admin login. Opening the protected area uses authentication and login-security cookies. These support that requested login, not public analytics or marketing.
| Name | Provider | Purpose | Type | Duration | Essential? | Consent required? |
|---|---|---|---|---|---|---|
CF_AppSession | Cloudflare | Maintains the Access application login session; observed when opening the protected area. | HTTP cookie | 24 hours. | Yes | No — necessary for Admin authentication. |
CF_Session | Cloudflare | Protects the Access login flow against cross-site request forgery; observed on the Access login domain. | HTTP cookie | 4 hours. | Yes | No — necessary for Admin authentication. |
CF_Authorization | Cloudflare | Authorizes the authenticated Admin session. Set after successful login; no new login was performed for this audit. | HTTP cookie | The configured Access session lifetime, controlled by the Admin authentication policy. | Yes | No — necessary for Admin authentication. |
Observed login cookies are Secure and HttpOnly. CF_AppSession belongs to azunified.net; CF_Session belongs to the Cloudflare Access login domain. Public cookie preferences do not alter Access authentication.
Cloudflare Access cookie documentation
Other browser technologies
No application IndexedDB database, Cache Storage cache or service worker was found on audited public pages. Menu state and animation controls do not use persistent storage. Fonts, images and application scripts load from the site itself. The browser may use its ordinary HTTP cache for these files.
Your choices
Accept all enables the single optional category: Preferences. Reject non-essential leaves it off. Cookie preferences lets you save it on or off, or withdraw a previous choice. No optional category is selected on a first visit. Necessary storage cannot be switched off here because it supports your privacy choice or a service you request.
Reopen Cookie preferences from any public Footer. Closing without saving does not grant consent. Privacy and Cookies remain readable without acceptance. You can clear or block site storage in browser settings; removing the choice record means the site will ask again.
The Contact privacy acknowledgement is separate from cookie consent. Refusing optional storage does not prevent an enquiry.
Updates and contact
If we introduce another optional technology or materially change a storage purpose, we will update this policy and request the appropriate choice before using it. An old consent version will not authorize a new purpose.
For questions about browser storage, contact AZ Unified at support@azunified.net.
Last updated: 7 October 2026.