Cookie Policy

Last updated: 22 October 2026

This page lists every cookie yaya.co can set, who sets it, and how long it lasts. It is written from the site’s actual configuration rather than from a template, so if you audit us against it you should find it accurate.

The short version: one consent cookie, one analytics vendor, no advertising, no session replay.

1. What we do not use

Worth saying first, because most cookie policies bury it.

No advertising or retargeting cookies. No Meta pixel, no LinkedIn Insight tag, no Google Ads remarketing, no DoubleClick.
No session replay or heatmapping. Nothing on this site records your mouse, your scrolling, or your keystrokes.
No cross-site tracking or data brokers. We do not enrich, resell, or match your visit against a third-party identity graph.
No font tracking. Our typefaces are self-hosted. Loading a page here sends no request to Google Fonts or any other font host.
No embedded social or video players on our own pages, so no YouTube, Vimeo, or LinkedIn cookies ride along.

2. Strictly necessary

These run without consent because the site cannot do its job without them. They set no advertising identifier and follow you nowhere.

Name	Set by	Purpose	Duration
`CookieConsent`	Cookiebot (Usercentrics A/S)	Stores your consent choices so we do not ask again on every page	12 months
Turnstile challenge token	Cloudflare, on challenges.cloudflare.com	Proves a form submission came from a human. Set in the challenge frame, not on yaya.co	Session
`x-segment`	First party	Read by our edge middleware to serve a regional content variant. We read it if present; nothing on the public site currently sets it	Session

Editor-only cookies

These appear only if you are signed into our Sanity Studio and previewing unpublished content. A visitor will never receive them.

Name	Purpose	Duration
`__prerender_bypass`	Enables draft preview mode	1 hour
`sanity-preview-perspective`	Selects which draft version to render	1 hour
`top_level_preview`	Marks a sanctioned top-level preview session	1 hour

3. Statistics

Set only if you accept statistics in the consent banner. Decline, and Google Tag Manager does not fire the analytics tag and none of these are written.

Name	Set by	Purpose	Duration
`_ga`	Google Analytics 4	Distinguishes one browser from another	2 years
`_ga_JKQVE4LLVB`	Google Analytics 4	Holds session state for our GA4 property	2 years

Google Tag Manager (container GTM-PHD87VB) is the loader. It sets no cookie itself. It is also what loads the Cookiebot banner.

We send Google Analytics page views, our Core Web Vitals measurements, and coarse location derived from IP. We have not enabled Google Signals, advertising features, or cross-device tracking on this property.

Google’s own policy: policies.google.com/privacy

4. Preferences

None. We do not currently set any preference or personalisation cookie. If that changes, this table gets filled in before the cookie ships.

5. Marketing

None. See section 1.

6. Third-party services that set no cookies

Named for completeness, because they do process data even though they store nothing in your browser.

Sentry collects an error report when a page breaks: URL, browser, operating system, stack trace, IP. No cookie.
Vercel writes server logs for every request, cookies or not. That is how a web server works.
Sanity serves our page content and images from cdn.sanity.io, and holds an open connection to its live content API so editors see changes immediately. No cookie.
Demio handles webinar registration on its own pages, under its own cookie policy.
Marker.io runs a feedback widget on our internal pre-release builds only. It is switched off on the public site by domain.

7. Managing your choices

Change your mind any time: the “Manage cookie preferences” link in the footer of every page reopens the consent banner. Withdrawing consent is one click and takes effect immediately.
Browser controls: every major browser lets you block or delete cookies. Blocking the strictly necessary ones means we will ask for your consent again on every page, because the cookie that remembers your answer is the one you blocked.
Google Analytics opt-out: Google publishes a browser add-on at tools.google.com/dlpage/gaoptout.

Declining statistics cookies costs you nothing on this site. Every page works identically either way.

8. Changes

We update this page when the site’s tag configuration changes, and the date at the top moves with it. New cookies are documented here before they are switched on, not after.

9. Contact

Questions about anything above, or want the consent record we hold for you:

Yaya Digital Limited 5th Floor, 167 - 169 Great Portland Street, London W1W 5PF Company number 11954846 hello@yaya.co

For how we handle personal data more broadly, see our Privacy Policy.