Cookie Policy

How We Use Cookies on Our Website

This Cookie Policy explains how the operator of the website https://authz.ca (“we,” “us,” or “our”) uses cookies and similar tracking technologies when you visit our website (the “Website”).

1. What are Cookies?

Cookies are small text files that are placed on your computer or mobile device when you visit a website. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

2. How We Use Cookies

We operate on a minimal-cookie, privacy-first model. By default, no non-essential cookies are placed on your device.

We currently use two categories:

  1. Strictly Necessary (Essential) — Core hosting / security layer behaviors (e.g., transient CDN edge or DDoS mitigation processes) that may incidentally involve technical tokens. We do not set a first‑party “session” or personalization cookie.
  2. Performance & Analytics (Optional) — Only set if you explicitly accept analytics. These enable aggregated measurement to improve site structure, accessibility and sustainability (reducing energy and data transfer footprint).

We do not use advertising, remarketing, social media tracking pixels, fingerprinting techniques, or cross-site identifiers.

3. Cookies We Use

Strictly Necessary Cookies

These cookies are essential for basic website operation and security.

CategoryPurposeProvider
Security & FunctionalityTo protect the website, ensure secure connections (HTTPS), and enable core website features. These are essential for the site to operate safely.Our Website / Netlify

We use Google Analytics only after you grant consent. Until then, the GA script isn’t loaded and no analytics cookies (_ga, _ga_<container-id>) are set.

CookiePurposeApproximate DurationSet Only After ConsentProvider
analytics_consentRecords that you granted or denied analytics tracking (granted or denied). Prevents repeated prompts.12 monthsOn first choice (both accept/deny)This Site
_gaDistinguishes users (aggregated statistics). IP is anonymized before storage.Up to 24 months (configurable)Yes (only if granted)Google
ga<container-id>Persists session state / visit attribution.Up to 24 months (configurable)Yes (only if granted)Google

Safeguards applied:

  • ad_storage denied (no ads / remarketing features)
  • IP anonymization enabled
  • No Google Signals / demographics
  • No cross-site or marketing enrichment

You can withdraw consent by deleting the analytics_consent cookie (or all site data) or using the future “Cookie Settings” control once deployed. After withdrawal, no new GA requests occur.

Note: Google may update implementation details. See Google’s official documentation for the most current cookie descriptions.

4. Managing / Changing Your Preferences

  • Initial Banner: Choose Accept (enables GA) or Decline (sets denial value; no GA loads). Either choice sets analytics_consent to avoid repetitive prompts.
  • Revoke Later: Delete the analytics_consent cookie (browser dev tools) and reload; you’ll be prompted again. A persistent “Cookie Settings” link will be added to the footer in a forthcoming update.
  • Browser Controls: You may block or clear cookies via your browser at any time.
  • Global Opt-Out: Install Google’s opt-out add-on (https://tools.google.com/dlpage/gaoptout) to suppress GA broadly.

5. Data Retention & Expiry

  • analytics_consent: 12 months (then you may be re-prompted)
  • GA statistical cookies: Controlled via Google Analytics retention setting (configured to shortest useful window)

We may update this Cookie Policy to reflect operational, legal, or service changes. Material changes will be timestamped.

7. Contact Us

If you have questions about this Cookie Policy or our minimal-cookie approach, please contact us via the site contact page.

Last Updated: September 24, 2025