Cookie Policy
Last updated: 1 August 2026
The short version
- Nothing that tracks you runs until you press Accept.
- If you decline, or ignore the banner, no analytics cookies are set at all.
- We use no advertising cookies and no third-party tracking pixels.
- If your browser sends a Global Privacy Control signal, we treat that as a decline and never ask.
- You can change your answer at any time using the button in section 5.
This policy explains exactly what this website stores on your device, what each item does, and how long it lasts. Legacy Creators is the trading name of Arthur de Paula Filiberto, ABN 42 627 319 380. For how we handle personal information generally, see our Privacy Policy.
1. What cookies are
Cookies are small text files a website asks your browser to store. They are used to make sites work, to remember preferences, and to tell site owners how their site is being used. Related technologies do the same job by other means — local storage keeps data in your browser without sending it anywhere, and pixels are tiny images used for measurement. This policy covers all of them, and uses "cookies" as shorthand throughout.
2. Our approach to consent
Cookies that are strictly necessary for the site to work do not require consent, and we use very few of them. Everything else is off by default.
Google Analytics is not loaded when the page opens. The script is only requested after you press "Accept" on the consent banner. If you press "Decline", or navigate away without answering, no analytics cookies are set and no data is sent to Google. This is a genuine prior-consent implementation, not a banner that appears after tracking has already started.
We do not use cookie walls. Declining costs you nothing and the site works identically either way.
3. Strictly necessary
These are always active. They do not identify you and cannot be switched off without breaking the site.
| Name | Set by | Purpose | Type and duration |
|---|---|---|---|
lc-cookie-consent |
Legacy Creators | Remembers whether you accepted or declined analytics, so the banner does not reappear on every page. Stored on your own device and never transmitted to us or anyone else. | Local storage. Until you clear it or use the button below. |
__cf_bm |
Cloudflare | Distinguishes people from bots so the site stays available and is not overwhelmed by automated traffic. | Cookie. About 30 minutes. |
cf_clearance |
Cloudflare | Only set if a security challenge is shown. Records that the challenge was passed so you are not asked repeatedly. | Cookie. Up to 1 year. |
4. Analytics — only after you accept
We use Google Analytics 4 to understand how many people visit, which pages they read, and roughly which country or region they are in. We use it to improve the site, not to build a profile of you. IP addresses are anonymised, and we have not enabled Google Signals, advertising personalisation, or any remarketing feature.
| Name | Set by | Purpose | Type and duration |
|---|---|---|---|
_ga |
Google Analytics | Assigns a random identifier so repeat visits from the same browser are counted as one visitor rather than several. | Cookie. 2 years. |
_ga_<ID> |
Google Analytics | Keeps track of the current session, so a visit that spans several pages is measured as one visit. | Cookie. 2 years. |
Analytics records are retained for 14 months and then deleted. Google acts as our processor for this data. See Google's Privacy Policy, and note you can also install Google's own opt-out browser add-on to block Analytics across every site you visit.
Booking — only if you open the scheduler
We use Calendly for appointment booking. The Calendly widget is not loaded when the page opens. It is downloaded only if you click the button to show available times, and Calendly sets its own cookies at that point to operate the booking process and remember your progress through it. If you never click that button, Calendly is never contacted and sets nothing. See Calendly's Privacy Notice.
5. Changing your mind
Withdrawing consent is as easy as giving it. Use this button to clear your stored choice — the page will reload and the banner will ask again.
Browser-level controls
- Global Privacy Control. If your browser or an extension sends a GPC signal, we treat it as a decline automatically. You will not see the consent banner and analytics will never load.
- Browser settings. Every major browser lets you block or delete cookies for individual sites or for all sites. Blocking cookies broadly may affect how other websites work.
- Clearing site data. Clearing this site's data in your browser also erases your stored preference, so the banner will appear again on your next visit.
6. What we deliberately do not use
- No advertising or retargeting cookies.
- No social media tracking pixels — no Meta pixel, no LinkedIn Insight Tag, no TikTok pixel.
- No cross-site tracking, and no sale or sharing of personal information for behavioural advertising.
- No fingerprinting or other techniques designed to identify you without storage.
- No session recording, heatmapping or keystroke capture.
If that ever changes, we will update this policy and ask for fresh consent before setting anything new.
7. Your rights and the law
Where the GDPR, UK GDPR and the Privacy and Electronic Communications Regulations apply, non-essential cookies require your prior, freely given, specific and informed consent — which is why nothing loads until you accept, and why withdrawing is a single button. Where the CCPA applies, we do not sell or share personal information, and we honour Global Privacy Control signals. In Australia, information collected through cookies is handled under the Australian Privacy Principles as described in our Privacy Policy.
8. Changes and contact
We may update this policy. The current version is always on this page with the date it was last updated. For any question about it, email [email protected].
This policy describes what the website actually does, verified against its own source code. It is not legal advice.