Cookie Policy
Version 2026-09-02 · Effective September 2, 2026
Cookies are small files a site asks your browser to keep. Some are needed for a page to work at all; the rest are a choice, and on this site they stay switched off until you make it.
The four categories
- Strictly necessary — keeps the site working, and remembers both the choice you make here and the language you asked the site to speak. No consent needed, and nothing to switch off, because without these there is no site.
- Functional — remembers preferences you set, such as a dismissed notice or a view you arranged. Nothing that follows you elsewhere.
- Analytics — counts visits so we can tell which pages earn their keep. Aggregate numbers, not a profile of you.
- Marketing — lets advertising platforms recognise you across sites in order to measure and target campaigns. This is the one people actually mind, and it is off unless you say otherwise.
What can be set
This table is generated from the same configuration that drives the consent panel and the deletion routine, so it cannot drift out of date. Only what is actually in use on this site is listed.
| Cookie | Provider | Purpose | Retained |
|---|---|---|---|
| NEXT_LOCALE | Cactos.app (first party) | Remembers the language you chose, so the site opens in it next time. | 1 year |
| cactos_consent | Cactos.app (first party) | Stores the choice you made here, so we neither ask again nor guess wrong. | 180 days |
| _ga, _ga_* | Google Analytics 4 | Distinguishes visitors and sessions to produce visit statistics. | 2 years |
| _gid | Google Analytics 4 | Distinguishes visitors within a 24-hour window. | 24 hours |
| _gat*, _gac_* | Google Analytics 4 | Throttles the request rate and links campaign data to a session. | 1 minute – 90 days |
Changing your mind
Withdrawing is as easy as granting — that is a requirement, and it is also just decent. This button is in the footer of every page:
When you switch a category off, we delete the cookies in it that we are able to reach, and reload the page so anything already running in it stops.
One honest limitation: cookies set on a vendor's own domain — google.com, doubleclick.net, facebook.com — cannot be read or deleted by this site's code, and any policy claiming otherwise is overpromising. The real control over those is never loading the tag in the first place, which is exactly what refusing does. To clear ones already set, use your browser's own settings.
Your browser's own controls
Every major browser lets you block or delete cookies, and most offer a stricter mode for third-party ones. Blocking the strictly necessary category will not break this site, but it does mean we cannot remember your choice, so you will be asked again on your next visit.
If your browser sends a Global Privacy Control signal, we treat it as a refusal of everything optional and do not ask.
How long your choice lasts
Your choice is stored for 180 days, whether you accepted or refused. Re-asking sooner after a refusal than after an acceptance is a well-documented dark pattern, and we would rather not. We will ask again if that period runs out, if you clear your cookies, or if this policy changes materially — the current version is 2026-09-02.