Cookie & Tracking Technologies Policy
Esaholic uses strictly necessary technical cookies for site security, load balancing, and session integrity, alongside opt-in functional and aggregate performance analytics cookies compliant with UK GDPR and PECR regulations. We do not place third-party cross-site advertising cookies or sell visitor data.
1. Legal Basis & UK GDPR Compliance
This Cookie Policy explains how Esaholic uses cookies and similar web storage technologies on esaholic.com in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Under PECR, strictly necessary technical cookies do not require prior user consent as they are essential for service delivery. All non-essential functional, performance, and analytical cookies operate strictly on an opt-in consent basis.
2. Cookie Category Breakdown
We categorize web storage cookies into four distinct functional tiers:
Esaholic Cookie Category Taxonomy
Anatomy ExplainerCookie Category Component Parts:
1. Strictly Necessary Cookies
Text alternative for screen readers & search engines
- Part 1: 1. Strictly Necessary Cookies - Essential security, CSRF protection, and load balancing tokens required for site navigation. [Tech: Consent Exemption: Exempt under PECR Reg 6(4). Duration: Session to 30 days.]
- Part 2: 2. Functional & Preference Cookies - Remembers user selections such as dark mode theme preferences and locale choices. [Tech: Consent Basis: Opt-in explicit consent. Duration: 180 days in localStorage.]
- Part 3: 3. Privacy-First Analytics Cookies - First-party aggregate performance measurement with IP anonymization for diagnostic reporting. [Tech: Consent Basis: Opt-in consent. No cross-site user profiling or data sharing.]
- Part 4: 4. Marketing & Ad Tracking - Third-party cookies used for cross-site behavioral targeting and ad retargeting. [Tech: Status on Esaholic: ZERO advertising or cross-site tracking cookies deployed.]
3. Complete Cookie Inventory Table
Below is the complete, audit-verified inventory of cookies and web storage items set by esaholic.com:
| Category | Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|---|
| Strictly Necessary | __cf_bm | Cloudflare bot protection & rate-limiting validation. | 30 minutes | Cloudflare UK |
| Strictly Necessary | esa_csrf_token | Cross-Site Request Forgery protection on contact forms. | Session | Esaholic |
| Functional | esa_theme_mode | Stores user preference for dark/light display theme. | 180 days | Esaholic |
| Functional | esa_cookie_consent | Records visitor cookie consent choices (accepted/rejected). | 365 days | Esaholic |
| Analytics (Opt-In) | _pa_session | Privacy-preserving first-party aggregate visitor metrics (IP anonymized). | 30 days | Plausible Analytics |
| Marketing | None | Esaholic does NOT place marketing or ad-tracking cookies. | N/A | None |
4. Managing Preferences & Consent Controls
You can modify or revoke your cookie consent selections at any time by clicking our interactive consent preference control:
Additionally, you can restrict or block cookies by adjusting your browser settings (Chrome, Firefox, Safari, Edge). Blocking strictly necessary cookies via browser settings may impact contact form submission functionality.