Cookie policy
A plain-English rundown of the cookies we use and how to switch them off.
Last updated July 6, 2026
Cookies are small files a site stores in your browser. We use them sparingly. The table below lists every cookie this site can set — we run no analytics or advertising cookies of our own, and your language choice is handled through the page address (the /xx/ prefix), not a cookie. Cookies that are not strictly necessary are set only with your consent, which you can change or withdraw at any time.
Our security plugin (Wordfence) can also set a small number of strictly necessary security cookies. These protect the site rather than track you, almost exclusively concern accounts that log in to the site, and are never used for advertising or analytics.
| Cookie | Provider | Category | Purpose | Duration | Consent needed |
|---|---|---|---|---|---|
| cky-consent | CookieYes | Necessary | Remembers your cookie-consent choices. | 1 year | No (necessary) |
| cky-action | CookieYes | Necessary | Records that you responded to the consent banner. | 1 year | No (necessary) |
| Cloudflare Turnstile | Cloudflare | Security | Tells humans from bots on the contact and review forms; loaded only on pages that have those forms. | Session / temporary | No (essential) |
| wfwaf-authcookie-(hash) | Wordfence (Defiant, Inc.) | Security | Lets the Wordfence firewall check a signed-in user’s access level before WordPress loads, so administrators are not blocked by firewall rules. Set only when you log in to the site. | 12 hours | No (necessary) |
| wf_loginalerted_(hash) | Wordfence (Defiant, Inc.) | Security | Records that the administrator has already been alerted about a sign-in from this device. Only used if login alerts are enabled; set only when you log in to the site. | Persistent | No (necessary) |
| wfCBLBypass | Wordfence (Defiant, Inc.) | Security | Allows a visitor who knows a hidden bypass address to pass country blocking. Only used if country blocking is enabled — we do not currently use it. | Only if enabled | No (necessary) |
| wfls-remembered-(hash) | Wordfence (Defiant, Inc.) | Security | Remembers a trusted browser for two-factor login when a signed-in user chooses “remember this device”. Set only for site accounts that use two-factor authentication. | Up to 30 days | No (necessary) |
| Retailer / affiliate cookies | Amazon & affiliate networks | Advertisement | Set on the retailer’s own website after you click a “View deal” link, to attribute a purchase. We do not set or read these. | Set by the retailer | On their site, after your click |
| Google sign-in | Functional | Set only if you choose to sign in with Google to post a review, under Google’s own policy. | Set by Google | With your action |
Managing and withdrawing consent
When you first visit, a consent banner lets you accept all cookies, reject everything that is not essential, or choose category by category. You can review or change your choice at any time using the button below.
You can also block or delete cookies in your browser settings at any time, and most browsers offer private-browsing modes. Blocking essential cookies may stop parts of the site from working. For how cookie data relates to your wider rights, see our privacy policy.
We keep this policy up to date as the site evolves. It reflects our actual practices but is not a substitute for tailored legal advice.