Cookie Policy
Last updated: 25 August 2026
This page lists every cookie yaya.co can set, who sets it, and how long it lasts. It is written from the site's actual configuration rather than from a template, so if you audit us against it you should find it accurate.
The short version: one consent cookie, one analytics vendor, no advertising, no session replay.
1. What we do not use
Worth saying first, because most cookie policies bury it.
- No advertising or retargeting cookies. No Meta pixel, no LinkedIn Insight tag, no Google Ads remarketing, no DoubleClick.
- No session replay or heatmapping. Nothing on this site records your mouse, your scrolling, or your keystrokes.
- No cross-site tracking or data brokers. We do not enrich, resell, or match your visit against a third-party identity graph.
- No font tracking. Our typefaces are self-hosted. Loading a page here sends no request to Google Fonts or any other font host.
- No embedded social or video players on our own pages, so no YouTube, Vimeo, or LinkedIn cookies ride along.
2. Strictly necessary
These run without consent because the site cannot do its job without them. They set no advertising identifier and follow you nowhere.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
CookieConsent | Cookiebot (Usercentrics A/S) | Stores your consent choices so we do not ask again on every page | 12 months |
| Turnstile challenge token | Cloudflare, on challenges.cloudflare.com | Proves a form submission came from a human. Set in the challenge frame, not on yaya.co | Session |
x-segment | First party | Read by our edge middleware to serve a regional content variant. We read it if present; nothing on the public site currently sets it | Session |
Editor-only cookies
These appear only if you are signed into our Sanity Studio and previewing unpublished content. A visitor will never receive them.
| Name | Purpose | Duration |
|---|---|---|
__prerender_bypass | Enables draft preview mode | 1 hour |
sanity-preview-perspective | Selects which draft version to render | 1 hour |
top_level_preview | Marks a sanctioned top-level preview session | 1 hour |
3. Statistics
Set only if you accept statistics in the consent banner. Decline, and Google Tag Manager does not fire the analytics tag and none of these are written.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics 4 | Distinguishes one browser from another | 2 years |
_ga_JKQVE4LLVB | Google Analytics 4 | Holds session state for our GA4 property | 2 years |
Google Tag Manager (container GTM-PHD87VB) is the loader. It sets no cookie itself. It is also what loads the Cookiebot banner.
We send Google Analytics page views, our Core Web Vitals measurements, and coarse location derived from IP. We have not enabled Google Signals, advertising features, or cross-device tracking on this property.
Google's own policy: policies.google.com/privacy
4. Preferences
None. We do not currently set any preference or personalisation cookie. If that changes, this table gets filled in before the cookie ships.
5. Marketing
None. See section 1.
6. Third-party services that set no cookies
Named for completeness, because they do process data even though they store nothing in your browser.
- Sentry collects an error report when a page breaks: URL, browser, operating system, stack trace, IP. No cookie.
- Vercel writes server logs for every request, cookies or not. That is how a web server works.
- Sanity serves our page content and images from cdn.sanity.io, and holds an open connection to its live content API so editors see changes immediately. No cookie.
- Demio handles webinar registration on its own pages, under its own cookie policy.
- Marker.io runs a feedback widget on our internal pre-release builds only. It is switched off on the public site by domain.
7. Managing your choices
- Change your mind any time: the "Manage cookie preferences" link in the footer of every page reopens the consent banner. Withdrawing consent is one click and takes effect immediately.
- Browser controls: every major browser lets you block or delete cookies. Blocking the strictly necessary ones means we will ask for your consent again on every page, because the cookie that remembers your answer is the one you blocked.
- Google Analytics opt-out: Google publishes a browser add-on at tools.google.com/dlpage/gaoptout.
Declining statistics cookies costs you nothing on this site. Every page works identically either way.
8. Changes
We update this page when the site's tag configuration changes, and the date at the top moves with it. New cookies are documented here before they are switched on, not after.
9. Contact
Questions about anything above, or want the consent record we hold for you:
Yaya Digital Limited Fifth Floor Suite 23, 63/66 Hatton Garden, London EC1N 8LE Company number 11954846 hello@yaya.co
For how we handle personal data more broadly, see our Privacy Policy.