Cookies
Everything this site can store, and when.
Last updated 15 September 2026
Three categories. One of them is on because the site cannot work without it. The other two are off until you switch them on, and you can switch them back off from the bottom of any page.
Necessary
Always on. Without these the page does not load or the form does not submit, so there is nothing to consent to.
| Name | Set by | Lifetime | What it does |
|---|---|---|---|
| coba_consent | This site | 180 days | Remembers the choice you made here, so you are asked once and not on every visit. |
| coba.consent | This site | Until cleared | The same choice, kept a second time in your browser's own storage in case the cookie is cleared. Never sent to us. |
| cf_clearance | Cloudflare | Up to 30 minutes | Remembers that the form's spam check has already been passed, so you are not asked twice. Only set when the check runs. |
The page itself is served by Vercel, which sees your IP address as part of serving the request — that is covered on the privacy page. The typefaces are served from this site, so no font service is contacted and none is listed here.
Analytics
Off unless you accept. This is Google Analytics 4, and all it answers is how many people opened the page and how far down they read. We do not connect it to your form submission.
| Name | Set by | Lifetime | What it does |
|---|---|---|---|
| _ga | 2 years | Tells one browser apart from another, so two visits are not counted as two people. | |
| _ga_P6THC2BK58 | 2 years | Keeps the state of the visit for this particular property. |
If you decline, Google's tag still loads but is told it may not store anything: it sends a count with no identifier and no cookie. If you would rather it did not load at all, any browser content blocker will stop it, and the site works the same.
Marketing
Not in use We are not advertising anywhere today, so none of these are loaded — not even if you accept. They are listed because they are the ones that would be used if a campaign is ever run, and we would rather publish the list before that happens than after.
| Name | Set by | Lifetime | What it would do |
|---|---|---|---|
| _gcl_au | Google Ads | 90 days | Connects a click on an advert to what happened afterwards on this site. |
| IDE, test_cookie | Google (doubleclick.net) | Up to 13 months | Measures and limits how often an advert is shown. |
| _fbp | Meta Pixel | 90 days | Connects a click on a Facebook or Instagram advert to this site. |
| fr | Meta (facebook.com) | 90 days | Delivers and measures adverts across Meta's platforms. |
If a campaign is ever run, this page and its date change first, and a visitor who has already declined marketing stays declined — we would not ask again to get a different answer.
Links to our other sites
Links from here to Burrow, Rebellion X, Kingfisher Medical and cobabiomedical.com carry a tag in the address that tells the site you land on which page you came from. It is part of the address, not a cookie, it is not stored on this site, and it says nothing about who you are.
How the choice is honoured
Google's tags are given a consent state before they load, set to deny everything. Your choice updates that state; until you make one, nothing is stored. Meta's pixel is not loaded at all unless marketing has been accepted — there is no denied-but-loaded state for it.
The choice lives in your browser, not on our servers, so it is per browser and per device. Clearing your browser data clears it, and you will be asked again.
Turning it off elsewhere
Every browser can block or clear cookies on its own, under Settings, usually Privacy. Google also publishes an opt-out for Analytics attools.google.com/dlpage/gaoptout, which works across every site rather than just this one.