Cookie Policy.
A complete inventory of every cookie this site sets — with the purpose, the lifespan, and whether you can switch it off. It's a short list.
The short version
Two kinds of cookies, and you control the second. Strictly-necessary cookies(security on the contact form) always run — EU law exempts them from consent. Optional analytics (Google Analytics) runs only if you accept the consent banner: nothing analytics-related loads, and no analytics cookie is set, until you do. Either way — no marketing pixels, no advertising trackers, no fingerprinting, no session-replay.
Strictly necessary
Required for security on the contact form. They run regardless of consent — under the EU ePrivacy Directive (Art. 5(3)) they are exempt from consent.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| cf_clearance | Cookie (Cloudflare) | Cloudflare's bot-protection token, issued after a Turnstile check on the contact form passes. | 30 min – 30 days |
| __cf_bm | Cookie (Cloudflare) | Cloudflare bot-management — identifies and blocks automated traffic. | 30 minutes |
Analytics — optional, off until you accept
This site can use Google Analytics 4 to understand which pages are useful — but only if you accept the consent banner. Decline (or just ignore it) and none of the cookies below are ever set; the Google Analytics script isn't even loaded. Change your mind anytime via “Cookie settings” in the footer — no dark patterns.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| _ga | Cookie (Google Analytics) | Distinguishes visitors to count unique sessions — set only after you accept. | up to 2 years |
| _ga_* | Cookie (Google Analytics) | Persists GA4 session state — set only after you accept. | up to 2 years |
| gb-analytics-consent | Local storage (first-party) | Remembers your accept/decline choice so we don't ask twice. Not a cookie; never leaves your browser. | until you clear it |
What we don't use
For full transparency — common third-party trackers this site explicitly does not embed:
- Google Ads conversion / remarketing tags (Analytics itself is opt-in only — see above)
- Facebook / Meta Pixel
- LinkedIn Insight Tag · Twitter/X · TikTok Pixel
- Hotjar / Microsoft Clarity / FullStory or any session-replay tool
- HubSpot / Marketo / Salesforce / Pardot tracking
- Intercom / Drift or any chat widget that sets cookies
- Heap / Mixpanel / Amplitude / Segment
Changing your mind
Use “Cookie settings” in the footer to accept or withdraw analytics consent at any time. Decline and the only cookies left are the strictly-necessary security ones, which you can clear in your browser like any other. Nothing non-essential loads until you opt in.
Questions
Email hello@growbeyond.ltd. The full Privacy Policy covers data collected outside cookies (the contact form).
— Mikkel, Bangkok