Cookie policy

What we measure, and what we don't

This site runs Google Tag Manager. It's a loader: a small script from Google that fetches whichever measurement tags we've configured, so we can see how many people visit, which pages they read and where they arrived from. That's the whole reason it's here.

What it isn't here for: we run no advertising tags, we build no advertising audiences, and we don't sell or hand your behaviour to anyone for their own purposes. This page changed on 19 August 2026, when the measurement went in. It used to say we ran none — that was true then and isn't now, and we'd rather rewrite the page than leave it flattering us.

What actually gets stored

A security cookie from our host

Cloudflare serves and protects this site, and may set a cookie named __cf_bm to distinguish real visitors from bots. It lasts around 30 minutes, contains no information identifying you personally, and cannot be used to track you across other websites. Under privacy law this one counts as strictly necessary, so it needs no permission from you.

Analytics cookies from Google

The measurement tags loaded through Google Tag Manager set cookies in your browser to tell one visit from the next — Google Analytics uses names beginning _ga, and they last up to two years. They record how the site is used, not who you are: we never send Google your name, your email or anything you type into the contact form.

Loading the tags also means your browser makes a request to Google's servers, which reveals your IP address to them, in the United States. That's a real cost and we're not going to bury it in a sentence about performance.

Nothing else, unless you're one of us

The site includes an internal review tool that our team uses to leave comments on the design. It only activates from a special link, and when it does it stores those comments in your own browser so they aren't lost. If you've never used that link, nothing is stored. Even then, it never leaves your browser except when we deliberately send it to ourselves.

Why there's no banner

You won't see a cookie prompt on this site. We operate from Canada, where the rule is that you have to be told clearly what's collected and why — which is what this page is — rather than clicked through a dialogue. So we've written the page instead of building the banner.

We'd rather say that plainly than dress it up: the analytics cookies described above are not strictly necessary, and if you're reading this from the EU or the UK, the local rule there is stricter than the one we're following. If that matters to you, block the cookies as described below or email us and we'll tell you what we hold.

Which third parties a page contacts

Exactly one: Google, for the tag manager and the measurement tags it loads. Our typefaces used to come from Google Fonts as well; we moved those onto our own domain and that request is gone, so fonts, images, stylesheets and scripts all come from us.

Nothing else is permitted to run, and that isn't a promise — it's enforced. The site sends a Content Security Policy naming the handful of addresses a script may be fetched from, so a tag pointing anywhere else is refused by your browser rather than by our good intentions.

How to check we're telling the truth

Don't take our word for it. Open your browser's developer tools, go to the Application or Storage tab, and look at the cookies for this domain. You should find the Cloudflare security cookie and the Google analytics ones described above, and nothing else. The Network tab will show you every address the page contacted. If you find something this page doesn't account for, we'd genuinely like to know: info@daenaagency.com.

Blocking them anyway

Every browser lets you block or delete cookies in its settings, and most now have a setting or an extension that blocks analytics outright. Use it here if you want to — nothing on this site will break, and we'd rather have an honest page than a complete dataset. Blocking the Cloudflare cookie may mean you're occasionally asked to prove you're human.

If this changes

If we add anything beyond the measurement described above — an advertising pixel, a session recorder, anything that follows you off this site — we'll ask before it loads rather than after, and this page will say so on the same day. What we won't do is switch something on quietly and leave this text sitting here contradicting reality.