What cookies and similar technologies are
Cookies are small pieces of information stored by a browser for a website. Similar technologies, including local storage, can remember information without using a traditional cookie.
Some storage is necessary to provide a service requested by the user or to keep a website secure. Optional analytics, functional media and marketing technologies require an appropriate positive choice before they begin. Rejecting optional cookies does not prevent access to the core website.
Categories and current status
The privacy controls separate necessary storage from optional categories. Optional choices are off by default and are not inferred from scrolling, inactivity or continued browsing.
- Necessary — active — Required for security, forms, sessions and essential website functions. These cannot be switched off.
- Analytics — optional and consent-gated — Where validly configured in production, Google Analytics 4 helps Purple Frog Signs understand aggregate website use and selected conversions. No Google Analytics script or request occurs before Analytics is positively permitted. Local preview and private staging do not load production analytics.
- Functional media — available only with consent — This permits an approved YouTube or Vimeo case-study video to load where one is present. No remote player or player script is contacted before functional-media consent.
- Marketing — inactive — No advertising pixel, retargeting tag or marketing tracker is currently active. Marketing remains off and is not enabled by Accept optional cookies.
First-party storage used by this website
- pfs_session — A first-party, strictly necessary session cookie used when security, form or protected-session functions require it. It supports form security, temporary success or error messages and protected administrative sessions. It is configured as Secure in production, HttpOnly and SameSite=Lax, and normally expires when the browser session ends. The name can be changed as part of secure hosting configuration.
- pfs_cookie_consent_v2 — A first-party local-storage record created after Reject, Accept, Save preferences or Allow video and play is selected. It stores consent version 2, Necessary, Analytics, Functional media and Marketing choices, a timestamp and an expiry time. It contains no name, email address or visitor identifier. The choice is valid for up to 180 days and is removed as invalid when the website next reads it after expiry.
- Google Analytics 4 storage — only after Analytics consent — When Google Analytics 4 is both configured and allowed, Google may create first-party analytics cookies for aggregate measurement. The exact production cookie names and durations must be observed and recorded during final staging verification rather than guessed in this draft. The website attempts to remove known first-party Google Analytics cookies where practical when Analytics consent is withdrawn.
How consent is obtained and changed
On a first visit, Reject optional cookies stores Necessary as on and all optional categories as off. Accept optional cookies records permission for Analytics and Functional media; Marketing remains off because no marketing technology is active. Manage preferences allows Analytics and Functional media to be selected independently before saving.
The Cookie preferences button in the footer is available on every public page. It reopens the preference centre with the browser's current selections so Analytics and Functional media can be changed independently. Revoking Analytics stops future analytics events and attempts to remove known first-party Google Analytics cookies where practical. Revoking Functional media removes any loaded optional video iframe. Neither action affects necessary website storage. Clearing browser site data removes the saved choice and the website will ask again.
If the consent policy changes materially, Purple Frog Signs will increase the consent version. A choice saved under an earlier version will no longer be accepted and the first-visit choices will be shown again.
Google Analytics 4
Google Analytics 4 is the named optional analytics provider. The Google tag is not requested in denied mode: it is requested only after Analytics consent, only when a valid G- Measurement ID and the production feature flag are configured, and never on local preview, private staging, administrator or installer routes.
The implementation keeps analytics storage denied by default and keeps advertising storage, advertising user data and advertising personalisation denied. It does not use Google Tag Manager, Google Signals, advertising pixels, session replay, heatmaps or fingerprinting.
Consented measurement includes standard page-view and engagement information, the recommended generate_lead event after a confirmed successful enquiry, and restrained click_to_call, click_to_email and cta_click events. Event parameters are predefined and must not contain enquiry personal details or free text.
YouTube and Vimeo video
An approved case-study video displays a local poster or neutral placeholder before consent. The page does not create a YouTube or Vimeo iframe and does not contact either provider until Functional media is allowed. Standard case-study videos are not set to autoplay.
Consented YouTube videos use YouTube's privacy-enhanced youtube-nocookie.com player. Consented Vimeo videos use player.vimeo.com with Vimeo's Do Not Track parameter requested. Vimeo states that this prevents new non-essential Vimeo cookies for that viewing session; storage essential to player operation or security may still apply. YouTube and Vimeo process information under their own privacy terms once their player is loaded.
Selecting Allow video and play records Functional media as allowed without enabling Analytics or Marketing. This can be reversed at any time through Cookie preferences in the footer.
External websites
Ordinary links to services such as LinkedIn or Instagram do not place social widgets inside this website and do not contact those services until the link is followed. If you follow an external link, the destination may use its own cookies and will provide its own privacy information.
Questions and policy changes
For a privacy or website-storage question, use the Contact page, email info@purplefrogsigns.com or telephone 01303 656 111. Purple Frog Signs will update this policy if the website's actual storage, providers or optional services change.