Denied by default, everywhere

Advertising and analytics storage start in a denied state for every visitor, not only where the law requires a prompt. Deciding per-country would mean locating you before we could decide what we are allowed to store about you, and getting it wrong fails in the direction that harms you. Denying by default needs no location signal at all.

Last updated: August 2026

The standard we hold ourselves to

These are the rules the site is built against, written down so they can be checked against what actually ships:

  • Nothing non-essential loads before a decision is recorded. The gate is consulted on every page, ahead of any page-specific script. A tag that is not registered against a granted category has no route to run.
  • A decision is a record, not a dismissal. We store the categories you chose, where the choice was made, and when — because “we had consent” is only meaningful if you can say what was asked and when it was answered.
  • Reject all is offered as prominently as Accept all, in the same visual weight, everywhere the choice appears.
  • Global Privacy Control is honored as an expressed opt-out wherever it applies.
  • Withdrawal is as easy as granting. One control clears the record and returns everything to denied.

What is not covered here

Some things are necessary for the site to work at all, and are not part of this choice. We list every one of them, by legal entity, in our vendor register:

  • Your theme and last-viewed state — two small entries in your browser's own storage (flutrack-theme, flutrack-state). They never leave your device.
  • Your consent decision itself — stored as flutrack-consent, because we cannot honor a choice we do not remember.
  • Server logs and security — standard request records kept by our host for abuse prevention.
  • The surge-alert subscription — only if you submit the form, and only to send what you asked for.

Cloudflare Web Analytics sits in an unusual spot worth naming plainly: it is categorised as analytics, but it is cookieless and stores nothing on your device, so it never engages this gate. We describe it in full in our Privacy Policy and in the vendor register rather than hiding it behind a prompt that would not actually govern it.

Questions or requests

To ask what we hold, or to have it corrected or deleted, write to [email protected] and a real person will answer. The full picture is in our Privacy Policy.