Cookie and Tracking Policy

Current known tracking

• Member and admin login use first-party HTTP-only session cookies.
• Pageview and activation endpoints record path-level engagement using daily visitor hashes, not raw IP addresses or full user agents in the analytics tables.
• Partner links on utility pages route through a CREN redirect that logs partner, source page, area, intent, placement, destination host, referrer host, and a daily visitor hash for reporting. No raw IP address or full user agent is stored.
• Google Analytics 4 (analytics category): after you choose Allow analytics, the Google tag may set first-party _ga and _ga_<stream> cookies, retained up to two years, for audience, acquisition, device, and content measurement. Choosing Essential only leaves the tag unloaded. The tag is not loaded on initial admin-page visits. This site's tag does not configure Google signals, advertising features, remarketing, or User-ID.
• Newsletter providers, pixels, and advertising tags must be inventoried here before activation.

Cookie categories

• Essential: login, security, form protection, and site operation.
• Analytics: aggregate audience, content, and conversion measurement.
• Advertising: sponsor measurement, campaign attribution, pixels, and retargeting if added.
• Personalization: saved areas, preferences, and newsletter topic selection where supported.

Controls

Choose Allow analytics or Essential only in the site prompt. To change your choice, use Change analytics choice on this Cookie Policy page. Withdrawing analytics permission removes accessible GA cookies and reloads the page. Dark patterns, pre-checked telemarketing consents, and hidden tracking disclosures should not be used.