What we mean by “cookie” and similar technology
A cookie is a small text file placed in your browser. Local storage is a small key–value area your browser offers for sites you visit; we use it to remember a consent string so you are not asked on every subpage in the same session year. Pixels, tags, and scripts that third parties set may also write cookies; we list what we expect when you turn categories on or off.
Nothing here is meant to be read as a technical log of every file name. Names change when we upgrade software; the purpose category is what matters for your rights.
The three public categories in the banner
Strictly necessary covers security, form operation, and load handling that cannot be fairly switched off without breaking the user journey you started. Analytics is for aggregated insight into how pages are read, which headings help, and where people leave, without using that data to target you with unrelated ads on other sites, unless a separate ad partner says otherwise. Marketing is for remembering that you have already seen a studio announcement or a seasonal prompt so the site does not nag you; it is not a promise of discounts.
Strictly necessary: what and why
We expect these elements to be active even if you press “Reject” on the optional row, because a reject choice still has to be stored, and a session still has to be protected from tampering. That storage is minimal, short-lived, and not repurposed for advertising.
Analytics: when it runs
Analytics only runs after a positive action in the cookie modal or a prior saved consent. We favour aggregated metrics, coarse geography, and event labels such as “contact form start” rather than fine-grained heatmaps that identify individuals, unless a future tool is introduced and this policy is updated with an honest description of any change in precision.
Marketing: meaning here
“Marketing” on this static site is modest: it may include remembering that a ribbon message was closed, or that you opened a content tip card. It does not include selling your name to list brokers, which we do not do.
The consent record in localStorage
When you save, we write a versioned key so the banner does not reappear on every page load. You can delete site data in your browser if you want a clean slate; the banner will return the next time, and you can choose again.
How long we expect things to last
Session cookies are tied to the browser session. Preference cookies may be refreshed for up to twelve months, then re-confirmed, unless a law requires a shorter period in your place of residence, in which case we will tune the build when we are aware of a material rule change. Third-party tools follow their own clocks; we list what we can control in vendor agreements.
What you can do right now
Use the cookie settings control, open your browser’s privacy centre, and read the privacy policy for rights outside the browser, such as access or erasure. If you want every trace removed from our inboxes, say so in writing, subject to the narrow exceptions the law allows for correspondence.
Regulators, children, and changes
Where you are in New Zealand, optional cookies are offered on a notice-and-choice model consistent with the Privacy Act 2020 and Office of the Privacy Commissioner guidance. We do not set out to process children for marketing. If a supervisory authority in the EU or the Privacy Commissioner in New Zealand ever asks a fair question, we will supply documentation on categories, tools, and retention, within what we actually operate at that time, without overstating the sophistication of a small team.
When the underlying technologies change, this cookie policy and the first paragraph of the privacy policy are updated, and the hero date on this page helps readers see the browsing context, not a substitute for a formal version table.