Cookie policy
Last updated
This page is from Crescat Digital Ltd ("we"). It lists the cookies and similar tools we know of on crescatdigital.com. For each one, it says who sets it, what it does and how long it lasts. It also says whether it needs your consent and how to control it. Most come from other companies' tools. They measure our marketing, work out which organisations visit, track calls to us, or show videos, a map and our booking calendar. Some also log your phone number if you call us, and let Google read contact details you type into our forms. The advertising and tracking tools need your consent. They load only if you give it, in our cookie banner. Each video and the map load only when you press play or Show map. Calendly's booking calendar asks for its own consent. Our own code sets two cookies: one remembers your cookie choices, and one is set only if you enter a password. It also reads the campaign tags in a page's address when you send our discovery-call form or our AI Visibility Index sign-up form, or follow a link to our Client Acquisition Map, and stores nothing in your browser to do it.
At a glance
Here is the short version. The table further down gives the detail for each item.
- Advertising and tracking: Google Analytics, Google Ads, the LinkedIn Insight Tag, CallTrackingMetrics and Lead Forensics, which Google Tag Manager (a Google tool) loads for us, and OpenAI's pixel for our ChatGPT adverts, which our own code loads. They load on every page, but only if you accept Advertising and tracking in our cookie banner. If you reject them, or have not chosen yet, none of them loads.
- What those tools do: count visits, and measure our adverts and show them to past visitors. They also match phone calls to your visit, and work out which organisation you browse from.
- Google, LinkedIn, OpenAI, LiveIntent and Demandbase also use the data for their own purposes, such as advertising.
- Videos and the map: Vimeo and YouTube video players on some pages, and a Google map on About and Contact us. Each one loads only when you press play or Show map, and a note under it says so.
- Booking calendar: Calendly's calendar on Book a call and two of our thank-you pages. Calendly asks for your consent in its own banner inside the calendar.
- From our own code: two cookies. crescat_consent remembers your choice in our cookie banner. aivi_access is set only if you enter the password for our AI Visibility Index results.
- Our forms, menus and pop-ups store nothing in your browser. Our fonts come from our own site, not from Google Fonts. The Google map and the YouTube player do load Google's own fonts.
- Campaign tags: if a page's address carries campaign tags or an advert click ID, our own code adds them to a link to our Client Acquisition Map when you press it. It stores nothing and reads no cookie. Campaign tags in links to our map tool explains this.
- You can change your mind at any time with Cookie settings, at the foot of every page. How to control or delete cookies explains this and your other options.
Which of these need your consent
The law lets a website store or read information on your device without your consent only in a few cases. The main one is when it is strictly necessary for something you asked for.
We ask for your consent with our own cookie banner when you first visit. It has one choice, Advertising and tracking, and it stays off unless you turn it on. It loads Google Tag Manager, and through it Google Analytics, Google Ads, the LinkedIn Insight Tag, CallTrackingMetrics, and Lead Forensics with the services it calls. It also loads OpenAI's pixel for our ChatGPT adverts.
The banner has two buttons. Accept all cookies turns it on. Cookie settings shows the choice as a switch, with Reject all, Accept all and Save choices. Reject all keeps it off, and then none of these tools loads. Until you choose, it stays off. We remember your choice in the crescat_consent cookie for 12 months. You can change it at any time with Cookie settings.
Videos and the map work differently. Each one waits until you press play or Show map, and a note under it says that pressing it loads the player or map from Vimeo, YouTube or Google Maps. Nothing from those companies loads before you press. Pressing is your consent for that one video or map.
The booking calendar is different. Calendly asks for its own consent, in its own banner inside the calendar. Our banner does not cover it.
This is what each category in the table means for consent:
- Essential: no consent needed. It is strictly necessary for something you asked for, such as remembering your cookie choices or opening the locked AI Visibility Index pages.
- Booking calendar: security: no consent needed. Calendly sets these to keep the calendar secure, check for fraud and remember your choice in its banner.
- Booking calendar: optional: set only with your consent, which you give or refuse in Calendly's banner.
- Analytics, Advertising, Call tracking and Visitor identification: these need your consent. They load only if you accept Advertising and tracking.
- Video players: these load only when you press play on that video. Pressing play is your consent.
- Not needed: PHPSESSID. Our content system starts it, but we do not use it. Ordinary visits to our pages never set it.
Cookies from other companies
Most items in the table come from other companies' tools. This is what each tool does on our site. Google Analytics, Google Ads, the LinkedIn Insight Tag, CallTrackingMetrics, Lead Forensics and OpenAI's pixel load only if you accept Advertising and tracking.
Google Analytics counts visits and shows us which pages people use, how they arrived and what they do next. It gives your browser a random ID. We have switched on Google signals. This lets Google link visits to the Google accounts of signed-in people who allow ad personalisation. It gives us reports across devices and lets us build advertising audiences.
Google Ads measures whether our adverts lead to visits and enquiries. It records an enquiry when you reach one of our thank-you pages or one of a few older form pages. It also adds your browser to our remarketing lists, so we can show you our adverts on other websites. For this, Google uses its advertising cookies on doubleclick.net.
Our Google Analytics and Google Ads settings also let Google's tag read contact details typed into our forms. That means an email address, phone number or postal address. Google receives them in scrambled (hashed) form and uses them to measure enquiries more accurately.
The LinkedIn Insight Tag tells LinkedIn about your visit. We use it to measure our LinkedIn adverts and to show them on LinkedIn to people who have visited our site. It also gives us reports on the kinds of professionals who visit. If you are signed in to LinkedIn, LinkedIn can link your visit to your account.
OpenAI's pixel measures our adverts in ChatGPT. Our own code loads it from bzrcdn.openai.com, only if you accept Advertising and tracking, and only while OpenAI's automatic advanced matching is switched off for it. Each time a page loads, it tells OpenAI it has started, with the page's address, a random ID for your browser (kept in a cookie called __obref for a year) and, if you arrived by clicking one of our ChatGPT adverts, OpenAI's reference for that click (kept in __oppref for 30 days). A third cookie, __oaiq_consent, records for 30 days that the pixel may run. When you book a call on our Book a call page, it tells OpenAI, with a scrambled reference to the booking. It does not read what you type into our forms, and we do not send OpenAI your name, email address or other contact details. OpenAI also uses this data for its own purposes, such as delivering and improving its advertising, as its privacy policy explains. This is separate from the way OpenAI writes text for the reports in our Client Acquisition Map tool, which our privacy policy describes.
CallTrackingMetrics shows you a tracking phone number in place of our usual number. It keeps showing you the same number for 30 days, and calls to it come through to us as normal. If you call, CallTrackingMetrics logs your phone number. It links the call to the page and source that brought you to our site. It also reads your Google Analytics ID, so a call can be matched to your visit.
Lead Forensics shows us which organisations visit our site and which pages they view. Its script loads from www.operation-inspirationastute.com, a web address Lead Forensics uses. It looks up your IP address to work out the organisation you are browsing from. It also records the page's address and title, the page you came from and your screen size. If you browse from home or a small office, the result may point to you rather than to an organisation. It set no cookie in our tests.
The Lead Forensics script also calls three other services, and each receives your IP address and browser details. Demandbase looks up your IP address. It returns your internet provider or organisation and your rough location, such as a postcode district. It also returns a visitor-type label and an ID for your device. That ID stayed the same from page to page in our tests, although no cookie was set. The result goes back to Lead Forensics.
LiveIntent, a Zeta Global company, tries to match your browser to its identity records, which it uses for advertising. Its ID for you also goes back to Lead Forensics. The third service, at a.usbrowserspeed.com, receives Lead Forensics' ID for your visit so the two can link their records. We are asking Lead Forensics to name the company that runs it. None of the three set a cookie on our site in our tests.
Google, LinkedIn, OpenAI, LiveIntent and Demandbase also use the data for their own purposes, such as advertising, as their own notices explain.
Calendly provides the booking calendar on our Book a call page and on two of our thank-you pages. It runs inside our page. Calendly shows visitors in the UK its own cookie banner in the calendar, with Decline all, Accept all and Cookie settings buttons. Calendly decides where to show the banner based on your location. Your choice there covers Calendly's cookies only. Our own cookie banner does not cover the calendar.
Before you choose, Calendly sets a few cookies and stored items for security and fraud checks, from Cloudflare, Stripe and Google reCAPTCHA. It also checks your device for signs of fraud. One more cookie records that you have not chosen yet, and a second is added once you choose. In our tests, none of Calendly's analytics or advertising tools loaded before a choice was made.
Calendly's banner says Accept all allows optional cookies for analytics and marketing. The analytics include recordings of how you use the calendar. We did not press Accept all in our tests. With Calendly's banner switched off, the calendar loaded Google Analytics, Segment, Sprig, Braze and Facebook, which stored IDs in the browser. We expect Accept all to load the same tools.
To change your Calendly choice later, use Cookie settings at the foot of the calendar. You can also delete calendly.com's cookies in your browser, and Calendly's banner will ask again. If you open Calendly in its own tab, calendly.com sets further cookies of its own, which its privacy notice covers.
Vimeo plays some of our videos, such as those on Our Work, our case study pages, client testimonials on our service pages and two older social media pages. The player loads only when you press play. We use Vimeo's "do not track" setting. Vimeo says that with it, the player sets only its security cookies. In our tests with it, the player set one security cookie, __cf_bm, and stored nothing else in your browser, even after the video played.
YouTube, which Google owns, plays our Crescast episodes and some videos on our home page and Resources page. They play in YouTube's privacy-enhanced mode, and the player loads only when you press play. In our tests that mode set no cookies, even after the video played. It did keep a few settings in your browser's storage.
Google Maps shows our office on our About and Contact us pages. The map loads only when you press Show map. It set no cookies or storage in our tests. It does load from Google's servers, so Google receives your IP address.
If you have used Google, YouTube or LinkedIn before, your browser may already hold their cookies. When their tools load on our pages, including the Google map, your browser can send those cookies back to them. That is how, for example, LinkedIn can recognise a signed-in member.
Our Client Acquisition Map tool at tools.crescatdigital.com is a separate site with its own cookies. Section 10 of our privacy policy describes them.
Each company's own notice explains what it does with the data:
- Google: privacy policy, how Google uses information from sites that use its services and Google's advertising cookies. These cover Analytics, Ads, YouTube, Maps and reCAPTCHA.
- LinkedIn: cookie policy and cookie table
- OpenAI: privacy policy
- CallTrackingMetrics: privacy policy
- Lead Forensics: privacy policy
- Demandbase: privacy policy and cookie policy
- LiveIntent: privacy policy and ad choices
- Calendly: privacy notice
- Stripe: cookie policy
- Vimeo: cookie policy
How to control or delete cookies
You can change your choice at any time with Cookie settings. It opens the same switch as our banner. The Cookie settings link is also at the foot of every page.
If you switch Advertising and tracking off, we delete the cookies and stored items these tools keep under our own web address, such as _ga, _gcl_au, __ctmid and OpenAI's __obref and __oaiq_consent. We also tell OpenAI's pixel that you have withdrawn. Then we reload the page, so the tools stop. We cannot delete cookies stored under other companies' addresses, such as LinkedIn's cookies on linkedin.com and Google's advertising cookies on doubleclick.net. Your browser settings can.
You can also limit or remove what is stored in these ways.
- Browser settings: block or delete cookies in Chrome, Edge or Firefox (block, delete). Delete them in Safari on a Mac or Safari on iPhone and iPad. Deleting cookies and site data also clears local storage and browser databases.
- Third-party cookies: blocking them stops most cookies stored under other companies' addresses, such as Google's advertising cookies and LinkedIn's. It does not stop the Lead Forensics script or Demandbase's device ID. Nor does it stop what Google Analytics, Google Ads and CallTrackingMetrics store under our own address. Safari blocks third-party cookies by default. Firefox blocks known tracking cookies by default.
- Blocking all cookies may stop parts of our site working, such as the booking calendar. A private or incognito window deletes its cookies when you close it.
- None of these browser settings stops the tools loading, or sending your IP address and visit details to the companies above. Switching Advertising and tracking off in Cookie settings does. So can a browser or extension that blocks trackers.
- Google Analytics: install Google's opt-out browser add-on, which works in desktop browsers. It stops Google Analytics on every site you visit. It does not stop Google Ads.
- Google adverts: manage ad personalisation in My Ad Center.
- LinkedIn: if you have an account, go to Settings, then Advertising data. If not, use LinkedIn's guest opt-out.
- LiveIntent: its ad choices page explains how to opt out of its cookie-based advertising.
- Calendly: use the banner inside the calendar to choose Decline all, Accept all or Cookie settings. To change your choice later, use Cookie settings at the foot of the calendar.
- Adverts based on your interests: Your Online Choices lets you turn them off for many advertising companies at once.
- Ask us: you can ask what data we hold from these tools, or ask us to delete it. We will delete what we hold, such as call records. We can delete your Google Analytics data if you give us your Google Analytics ID (the value of your _ga cookie). Google, LinkedIn, OpenAI, LiveIntent and Demandbase keep their own copies, so ask them directly using the links above. Our privacy policy explains your rights.
Changes to this policy
We update this page when we add, remove or change a cookie or tool on our site. We also re-check it at least every three months, because other companies can change their tools without telling us. The date at the top shows when we last changed it.
We built the current list on 28 September 2026 and last tested it on the live site on 29 September 2026. On 6 October 2026 our cookie banner changed: the separate choice for videos and maps went, and each video and the map now load only when you press them. On 12 October 2026 our banner's buttons became Accept all cookies and Cookie settings, with Reject all inside Cookie settings, and we added OpenAI's pixel for our ChatGPT adverts. We tested it on the live site the same day. On 14 October 2026 we added how links to our map tool carry campaign tags. On 15 October 2026 we added the one case where we send a tag we keep to Google or OpenAI: when you allow it on the map's report form.
Contact us
Questions about cookies or this page? Email hello@crescatdigital.com. For requests about your data rights, you can also email our Data Protection Officer at lee@crescatdigital.com.
Or write to us at Crescat Digital Ltd, Unit 2 The Bramley Business Centre, Station Road, Bramley, Guildford, Surrey GU5 0AZ (our registered office). Company number 09369289.
Our privacy policy explains how we handle personal data and your rights, and how to complain. You can also complain to the Information Commission, formerly the Information Commissioner's Office (ICO). It is the UK regulator for data protection. Its website is ico.org.uk and its helpline is 0303 123 1113.
