DATA PROTECTION

Cookie Policy

How macrigi.com manages cookies, browser technologies and consent preferences.

OVERVIEW

Cookies and similar technologies

Cookies and other browser technologies may be used to store information, maintain a session, protect the website, measure performance or enable optional functions. Some technologies are first-party; others depend on third-party services. Their duration and behaviour may vary according to the technology and its actual configuration.

Macrigi Consent Core separates consent categories and does not automatically assign cookies, domains, durations or scripts to a service until those elements have been verified in the real runtime.

Consent and withdrawal

Where an optional function requires consent, you can change your choice through the “Privacy choices” panel. Strictly necessary functions are not disabled by that panel.

The four Macrigi categories

Necessary

Security, identity, commerce and functions essential to provide the requested service.

Preferences

Optional functions that improve or personalise the experience.

Analytics

Measurement and analytics where the service, runtime behaviour and related assets have been verified and the relevant lawful basis applies.

Marketing

Optional marketing or advertising technologies where they are actually present and correctly classified.

NECESSARY

Recorded necessary services

The Macrigi Consent Core service catalogue records the following services as necessary. This classification describes the role of the service; it does not mean that every item sets a cookie in the browser.

Macrigi CoreProprietary website, account and commerce functions.

Macrigi Mail 2027Owner of email/marketing consent; not classified as a browser tracker.

AWS SES via Post SMTPBackend delivery of transactional emails.

WooCommerceBasket, checkout, orders and commerce runtime.

Wholesale Suite / Order FormWholesale pricing, MOQ, quantity tiers and add-to-basket.

Ultimate MemberAuthentication, account and profile.

WC Vendors / Macrigi VendorsVendor identity, storefront and marketplace.

Macrigi CommunicationsSupport and authenticated messaging.

Google reCAPTCHASecurity and abuse prevention.

Stripe / PayPalPayment services used in the relevant flows.

PacklinkDelivery/fulfilment integration; frontend assets must be verified before any mapping.

WooCommerce TaxTax integration; frontend assets must be verified before any mapping.

VERIFIED TECHNOLOGIES

Cookies and storage observed at runtime

macrigi_consentStores the state of the categories selected by the user. First-party cookie, expected technical duration 180 days, SameSite=Lax and Secure on HTTPS.

macrigi_consent_subjectTechnical identifier associated with recording the consent choice. First-party cookie, expected technical duration 180 days, SameSite=Lax and Secure on HTTPS.

macrigi_consent_safe_bypasssessionStorage key used only as a navigation fallback if persistence fails. It was not present during normal tests where persistence succeeded.

PHPSESSIDFirst-party session cookie observed at runtime. Its presence is documented without assigning any further unverified purpose.

macrigi_lm_languageFirst-party preference used by Macrigi Languages & Markets to remember the language manually selected by the user. The preference is retained for approximately 12 months and is mirrored in browser localStorage. It does not contain the Cloudflare country code or precise geolocation data.

ORDER ATTRIBUTION

Observed Sourcebuster / WooCommerce technologies

Runtime tests observed WooCommerce sourcebuster/order-attribution assets and first-party cookies in the sbjs_*, including sbjs_current, sbjs_current_add, sbjs_first, sbjs_first_add, sbjs_migrations, sbjs_udata and, in some states, sbjs_session. These elements are documented as observed attribution technologies; they are not assigned to the Marketing category solely because of their name or by assumption.

VERIFIED INFRASTRUCTURE

Cloudflare Browser Insights / RUM

The Cloudflare Browser Insights / Real User Monitoring beacon has been verified as present and is configured in Macrigi's Cloudflare account to measure technical website performance. The code may process browser performance metrics and technical browsing information and may transmit them to Cloudflare infrastructure.

In completed tests, the related asset was present both on staging with optional categories disabled and on live after non-essential options were rejected. HTTPiD has confirmed that the beacon is not injected by the HTTPiD plugin or by the hosting infrastructure: the configuration belongs to Macrigi's Cloudflare account. Activation and any loading conditional on Analytics consent must therefore be managed directly in the Cloudflare configuration.

OPTIONAL / TO BE VERIFIED

Services not presented as active trackers

ARIA / Macrigi AI AssistantAssociated with the Preferences category; availability of the function follows the relevant choice.

Rank Math analyticsListed under Analytics but not runtime-verified. It is not declared active until actual use and assets have been verified.

Affiliate trackingClassification remains pending; no category is assigned by assumption.

PREVENTIVE BLOCKING

How gating works

Macrigi Consent Core can block optional frontend assets only where the service is classified in an optional category, gating is enabled and the actual script or stylesheet handles have been verified. A service without verified handles is not blocked by assumption. Assets injected at CDN, hosting or infrastructure level may require action by the relevant provider.

TRANSPARENCY

What we do not claim without verification

This version does not present GA4, Universal Analytics, Google Ads, Meta Pixel, Google Optimize or other trackers as active unless confirmed by the current runtime. Likewise, cookie names, domains, durations, WordPress handles or purposes are not invented where they have not been verified.

BROWSER CONTROLS

Viewing, blocking or deleting cookies

In addition to the “Privacy choices” panel, you can use your browser settings to view stored cookies and technologies, block them or delete them. Browser settings may not provide the same category-level control as the Macrigi panel, and manual deletion may also remove the locally stored record of your choice.

YOUR CHOICES

Changing or withdrawing preferences

Preferences for optional browser categories can be changed or withdrawn using the “Privacy choices” control available on the website. Email/marketing consent is managed separately by Macrigi Mail. Rejecting optional categories does not disable strictly necessary account, security, basket, order or payment functions.

UPDATES

Policy version

Content reconciled with the service catalogue and the verified Macrigi Consent Core runtime. Last updated: 23 October 2026.