Cookies are small text files that websites store on your device. Some are essential for the site to work; others are used for analytics, personalisation, or advertising. Under UK PECR (Privacy and Electronic Communications Regulations) we have to tell you what we use and, where it isn't strictly necessary, ask permission first.
What we actually use.
The main pages of this site (Home, Audit, Embed, Operator, Insights) set no cookies of their own. No analytics, no advertising pixels, no tracking. Loading Google Fonts may set a font preference cookie at Google's end; that's about it.
Two pages do load third-party services that set cookies:
- The booking page (/book) embeds the Cal.com calendar so you can book a discovery call. Cal.com sets cookies needed for the booking widget to work.
- The confirmation pages (/audit-confirmed, /embed-confirmed) are reached after Stripe payment, which sets its own session cookies during checkout.
The full inventory.
| Name | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
| None on main pages | The CAIO | We don't set our own cookies on the main site. | — | N/A |
| cal-* | Cal.com (cal.eu) | Booking widget functionality. Loaded only on /book and only if you interact with the calendar. | Session and up to 1 year | Strictly necessary on /book |
| __stripe_mid, __stripe_sid | Stripe | Fraud prevention during payment. Loaded only on Stripe-hosted checkout pages and on /audit-confirmed and /embed-confirmed when Stripe redirects to them. | Session and up to 1 year | Strictly necessary at checkout |
If we add analytics (we're considering Plausible or Fathom, both privacy-respecting and cookieless), this table gets updated before they go live, and any non-essential cookies will only run after you opt in.
How to control cookies.
You can clear or block cookies at the browser level. Each browser handles this slightly differently, but the option is always somewhere in Settings → Privacy. Useful links:
Blocking all cookies will prevent the booking page and the Stripe checkout from working. The rest of the site is unaffected.
Do Not Track.
We honour the Do Not Track and Global Privacy Control browser signals where they apply. Since we don't run analytics or advertising tracking, this mostly means the same thing in practice: you're not tracked here.
Questions.
Cookie or privacy questions go to leeroy@thecaio.co.uk. The full privacy policy lives at /privacy.