Cookies &Your Choices.

A cookie is a small text file a website asks your browser to keep, and hands back to that same website on your next request. It is how a site recognises that two page views came from the same browser. Related technologies do the same job in a different drawer: localStorage keeps a value until something clears it, and sessionStorage keeps one only until you close the tab. This policy covers all three, because the law treats them the same way, and so do we.

A cookie is not a program. It cannot read your files, run code, or see anything you do on other websites. What it can do- and the reason consent exists- is carry an identifier that lets activity be linked together over time.

Most cookie banners offer four or five categories. This site offers two, because it only has two. We run no advertising pixel, no remarketing tag, no social tracking script and no personalisation profile, so there is no toggle for them. A switch wired to nothing would misrepresent what we collect.

Strictly Necessary

These make the site work and are always on. They hold no identifier, are readable only by this website, and are never used to build a profile or shared with anyone. Under the ePrivacy rules and the GDPR, storage in this category is exempt from the consent requirement, which is why it is active while the consent banner is still open- including the record of your own choice, which we obviously have to keep in order to honour it.

Analytics

Google Analytics 4, which counts visits and shows us which pages people actually read. This is optional, it is off by default, and no Google code is loaded onto the page at all until you accept. Refusing it costs you nothing: every page and feature behaves identically either way.

This is everything. You can verify it yourself in your browser's developer tools, under Application, then Cookies and Local Storage.

If you accept and later change your mind, we do not merely stop setting these — the Reject action actively deletes the two Google Analytics cookies from your browser.

Two external services are contacted by pages on this site, and it is worth being precise about which does what.

Google Analytics

Loaded from googletagmanager.com, and only after you have accepted analytics. Until then the script is not requested at all, so no connection to Google is made from these pages. When it is loaded, the data it collects is processed by Google LLC under its own privacy terms, and the site additionally signals through Google Consent Mode that advertising storage, advertising user data and ad personalisation are all denied.

Social icons

The social media icons in the footer are images served by icons8.com. They are pictures, not scripts: they set no cookie and can carry none of ours. As with any image loaded from another domain, that provider does receive the ordinary request information a web server sees, such as your IP address and browser type.

Withdrawing consent is deliberately as easy as giving it, which is a requirement rather than a courtesy. You have three routes:

• The Cookie Preferences link in the footer of every page
• The banner itself, which returns automatically every 180 days
• Your browser's own settings, which can block or clear cookies for any site

Blocking cookies in your browser will not break this website. The strictly necessary items degrade quietly: if storage is unavailable, the consent banner simply asks again on your next visit rather than failing.

CodePlus Global operates from Sri Lanka and works with clients in Europe and elsewhere, so this site is built to the stricter of the standards that can apply to a visitor.

• EU ePrivacy Directive — consent is required before non-essential storage is placed
• EU GDPR — consent must be freely given, specific, informed and as easy to withdraw as to give
• Sri Lanka PDPA No. 9 of 2022 — lawful basis, transparency and data-subject rights
• UK PECR and GDPR — equivalent requirements for UK visitors

In practice that means four things you can check on this page: nothing non-essential loads before you choose; Reject is offered as prominently as Accept and is never a dark pattern; refusing costs you no functionality; and your choice is recorded with a timestamp and expires rather than lasting forever.

The rights that apply to the information described here — access, correction, deletion, withdrawal of consent, portability and objection — are set out in full in our Privacy Policy, and they apply to analytics data as much as to anything you send us through a form.

Questions about this policy, or a request relating to your data, can be sent to privacy@codeplus.global and we will respond from Colombo, Sri Lanka.