1. What cookies are

Cookies are small pieces of information that a website may store in your browser. Other technologies, including local storage and similar identifiers, may also be used to remember a session or preferences or to measure how a site is used. These technologies may be used across the public website, customer account area and checkout.

2. Categories

Strictly necessary technologies

These may support essential functions requested by a visitor, such as account sign-in, session continuity, fraud and security controls, and shopping-cart or checkout functionality. Applicable cookie-consent rules may exempt technologies that are strictly necessary for a requested service, but not every site cookie is automatically exempt.

Preferences

This website does not use a cookie to remember display preferences. The analytics choice described below is stored in browser local storage, not as a preferences cookie.

Analytics, advertising and other optional tracking

The only optional analytics technology is Google Analytics 4. It runs only after the required consent. This website does not use advertising cookies.

3. Cookies and similar technologies in use

Strictly necessary technologies

These support security, sign-in and checkout. They are not optional analytics, and they are not controlled by the analytics choice.

  • __cf_bm, set by Cloudflare when the site is served. It is used for bot management. It is HttpOnly. On the public site it expires 30 minutes after it is set.
  • fg_session, set after you sign in. It is an encrypted customer-session cookie. It is HttpOnly, Secure and SameSite=Lax. It is removed when you sign out or when it expires. It does not last longer than the account credential, and never longer than 12 hours.
  • fg_login, set only while sign-in is in progress. It uses the same cookie flags and expires after 10 minutes. It is the sign-in handshake, not a lasting account session.
  • Cloudflare Turnstile, loaded only on the public contact form from `https://challenges.cloudflare.com`. It checks the submission before the message is sent. It is not used for advertising or analytics.

Checkout uses the signed-in session where a purchase requires an account. Card details are collected by Stripe in the payment field, as described in the Privacy Policy, rather than by a WPFixit analytics cookie.

Optional analytics

No analytics cookie is set before you choose.

Your choice is stored in this browser as local storage named wpfixit.analytics-consent. It records whether you accepted or declined, and the time of that choice. It is kept for six months. After six months, or where an older saved choice has no time recorded, it is forgotten and you are asked again. That entry is not a cookie sent to our server, and it is not stored by Brevo or in the support mailbox.

If you allow analytics, Google Analytics 4 is loaded from `https://www.googletagmanager.com` inside a separate frame. It runs only on public information pages: the home page, about, contact, pricing, care plans, agency support, services, guides, and these legal pages. It does not run on sign-in, checkout or customer-account pages. The frame records a page view with the page path, the page title and a limited referrer. Query strings and fragments are not included. Google signals and ad personalisation are turned off in this configuration. Google's script may then store its own cookies. This website does not name those cookies or set their lifetimes.

We do not use advertising cookies. We do not use a separate cookie to remember display preferences.

For questions about cookies or tracking on WPFixit, contact support@wpfixit.org.

4. How you can control cookies

On a public page where analytics can run, Cookie preferences lets you allow or reject analytics again after your first choice. Rejecting analytics stops further measurement in that browser and stores the declined choice for six months. Cookies that Google's script may already have stored stay in the browser until they expire or you remove them. This website does not name those cookies and does not delete them. The control is not shown on sign-in, checkout or customer-account pages, because analytics does not run there. Open one of the public pages listed above to change the choice.

You can also clear site data for this website, which removes the stored choice. Browser controls can block or delete cookies. Blocking a strictly necessary cookie can stop sign-in, the contact-form check, or checkout.

5. Changes and contact

We may update this policy when technologies or providers change. Contact support@wpfixit.org with questions.