CivitasPoint
Cookie Policy
Last updated October 3, 2026. This policy describes storage and services identified on the current CivitasPoint website. It does not claim that the site meets every jurisdiction’s legal requirements.
Your choices
We use a worldwide opt-in approach. Google Analytics is blocked until you explicitly allow Analytics. Accept all allows the optional purposes currently offered; Reject optional keeps them off; Customize lets you choose. Browsing or closing a page does not grant consent. Use Cookie settings in the footer to change or withdraw your choices. Advertising consent stays denied because the site has no advertising integrations.
Only Necessary and Analytics are currently offered. No optional preference or marketing services were found in the current inventory. New purposes will require a new policy version and a fresh choice. Global Privacy Control is treated as a refusal of optional tracking where the browser exposes it.
Cookies and browser storage
| Item / provider | Purpose and category | Duration |
|---|---|---|
| cmplz_functional, cmplz_statistics, cmplz_preferences, cmplz_marketing, cmplz_banner-status, cmplz_policy_id, cmplz_consented_services — CivitasPoint / Complianz | Necessary: minimal first-party category choices, banner status and consent-policy version. Unused categories are recorded as denied. | 180 days; choices are requested again after expiration or a material policy-version change. |
| wp_consent_functional, wp_consent_statistics, wp_consent_statistics-anonymous, wp_consent_preferences, wp_consent_marketing — WP Consent API | Necessary: passes category choices to compatible WordPress integrations. Contains allow/deny choices, not a personal identifier. | 30 days in the installed API’s default; Complianz’s 180-day record remains authoritative and resynchronizes choices on visits. |
| cp_vote_browser — CivitasPoint | Requested vote management: signed, random first-party browser identifier, set only when you use article voting. Remembers one current vote per article in this browser and supports changing/removing it. Not set just to read an article, and not used for Analytics. | Up to one year from creation. Secure, HttpOnly, SameSite=Lax. Clearing it loses browser access to prior votes; it does not automatically erase their anonymous database records. |
| _ga and _ga_* — Google Analytics | Analytics, optional: Google’s own browser/session measurement. Activated only after Analytics consent. The voting identifier is never sent to Google. | Google documents up to two years by default; browser restrictions and Google stream settings can shorten this. We have not independently verified custom stream expiration settings. |
| wpEmojiSettingsSupports — WordPress, sessionStorage | Necessary presentation: remembers the browser’s emoji rendering support; not an audience identifier. | Session storage, normally until the tab/browser session ends. WordPress’s support cache also has a two-day freshness check. |
| wordpress_test_cookie, wordpress_logged_in_*, wordpress_sec_*, wp-settings-*, wp-settings-time-* — WordPress | Necessary only for login/admin use: cookie support, authenticated access and editor preferences. Ordinary logged-out reading does not require an account. | Test/authentication cookies: session or the login’s Remember Me lifetime (normally up to 14 days); editor settings: up to one year. Hosting and security settings can alter authenticated session lifetimes. |
| __cf_bm — Cloudflare edge security | Necessary security: bot protection for delivery of the site. Observed as an HttpOnly response cookie; it is separate from Analytics and consent records. | Cloudflare documents 30 minutes of continuous inactivity. See Cloudflare’s cookie documentation. |
Legacy GoDaddy _tccl_visitor, _tccl_visit and _scc_session telemetry cookies were observed from the previous hosting scripts; their original durations were not independently verified. Those scripts are now disabled, and their accessible first-party cookies are cleared. The old cp_analytics_v1 choice cookie is retired and removed when the current integration loads. No persistent custom consent fingerprint, raw-IP consent log, or server-side individual consent record is created. Complianz’s consent-record collection and remote Cookie Database synchronization are disabled. No custom voting localStorage is used. Other browser storage introduced by future plugins must be inventoried before activation.
Scripts, third parties and embeds
Google Site Kit places the single Google Analytics installation for G-MRJFF92GYE. Our basic-mode adapter keeps the whole tag inert before permission; it applies denied defaults for analytics_storage, ad_storage, ad_user_data and ad_personalization. After Analytics permission, only analytics_storage is granted. Ads and personalization remain denied. Logged-in users and staging are excluded.
GoDaddy hosts the site. Its optional visitor RUM scripts (scc-c2 and tccl-tti from img1.wsimg.com) are disabled on the public site. The unused GoDaddy-injected Google Fonts stylesheet and preconnection hints are also removed; the existing system/Georgia typography is preserved. This does not stop essential server-side hosting/security logs, whose exact provider retention has not been verified. No active social/video/maps embeds were found in the 45 published articles and pages inspected. Complianz’s script and embed blocker is enabled for recognized services; any newly added or unrecognized embed needs testing and classification before release. Source links are ordinary links; a third party’s own practices apply after you leave this site.
Withdrawal and limitations
Withdrawing Analytics stops future optional events, removes first-party _ga cookies accessible to this site, and reloads the page to unload Google’s running code. Requests already sent or in flight cannot be recalled, and withdrawal does not delete previously collected Google data. Cookies on another provider’s domain or inaccessible HttpOnly cookies cannot be removed by this website’s JavaScript. Browsers may also retain cache entries; a cached script is not permission to execute it.
Related information
See our Privacy Policy for voting data and planned newsletter processing, and Contact for currently published contact information. The publisher’s legal identity, verified privacy contact and applicable rights/hosting retention details still need to be finalized; no business address or registration is invented here.
Recorded article views
With Analytics consent, CivitasPoint records at most one article view per shared browser session using the first-party cp_recorded_session cookie. This secure, HTTP-only session cookie is created only after consent. It ends when the browser session ends, with a 30-day safety cap; browser session restoration may extend the session. Withdrawing Analytics consent clears the cookie when the site is open. Deduplication uses a random session value stored as a keyed hash, retained for no more than 30 days. Aggregate article totals remain. No raw IP addresses, email addresses or fingerprint are stored or sent to Google for this counter.
Recorded views began 2026-10-05 02:41:29 UTC. They exclude administrators and obvious bots where practical, but do not represent all visits or unique people. Cookie deletion, blocking and automated traffic can affect totals. Browsers without shared tab locking do not record views. Search, archives and voting work without Analytics consent.