Cookie policy
This site sets no advertising cookies and no third-party tracking cookies. It uses a small number of first-party cookies and browser storage entries for things you asked for — which view of the site you chose, whether you are signed in, and a rotating analytics identifier that is not tied to you and is not readable by anyone else.
What is stored
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| ci-mode-v1 | localStorage | Which view of the site you chose, creative or business, so you are not asked again. | Until cleared |
| ci-rip-sheet-seen-v2 | localStorage | Whether this device has already seen the intro sheet. | Until cleared |
| ci_sid | localStorage | A random session identifier for first-party analytics. Regenerated after 30 minutes of inactivity. Not linked to your identity and never sent to a third party. | 30 minutes idle |
| ci_vid | localStorage | A random visitor identifier for first-party analytics, so a returning visit is not counted as a new one. Rotated every 90 days. | 90 days |
| hive_session | cookie | Signed session cookie, set only after you sign in. HttpOnly, Secure, SameSite=Lax. | Session |
| cf_clearance | cookie | Set by Cloudflare Turnstile when a bot check runs on a form. Required for the form to submit. | Up to 30 minutes |
| ci_consent | localStorage | Your analytics choice, if you made one. Only written when you decline. | Until cleared |
What is not stored
- No advertising or retargeting cookies
- No cross-site tracking identifiers
- No third-party analytics cookies — the analytics are first-party and served from our own domain
- No fingerprinting: we do not read canvas, audio, font lists or WebGL parameters to identify a device
Marketing tags
The site ships a loader for marketing tags — Meta, Google Analytics, Google Ads, TikTok, LinkedIn, Reddit and X — but it stays completely dormant unless an ID is configured, and none is configured today. Nothing is loaded, nothing is set, and no request leaves your browser for those domains.
If that ever changes, this page and the privacy policy change first, the tags load only after consent, and the change is recorded on the changelog.
Turning analytics off
First-party analytics honours Do Not Track and Global Privacy Control: if your browser sends either, nothing is collected and no identifier is written.
You can also opt out for this browser by running localStorage.setItem('ci_consent', 'deny') in the console, or by clearing site data, which removes everything in the table above.
Related
Privacy policy · Data access and deletion · Terms of service
Sources
Where this page states a standard, an obligation or a research result, this is what it is drawn from. All external, all checkable.
- Australian Privacy Principles — OAIC, the regulator
- Making a privacy complaint — OAIC — the escalation path if we get it wrong
- Notifiable Data Breaches scheme — OAIC
- Global Privacy Control — the specification our analytics honours
Last reviewed · Site changelog