This Cookie Policy explains what cookies and similar technologies monkfruithub.com uses, what each one does, how long it lives, and how you decide what runs. It should be read together with our Privacy Policy, which explains what we do with the information these technologies produce.
1. What a cookie is
A cookie is a small text file a site stores in your browser. Cookies let a site recognise your browser on a later visit, remember a setting, or record that something happened. Related technologies do similar work in different places: local storage and session storage keep data inside the browser; a pixel (also called a web beacon) is a tiny image or script that reports that a page was opened; and a SDK embedded in a page can send the same kind of report. This policy covers all of them and calls them “cookies” for short.
2. How consent works on this site
Two rules shape everything below.
- Default is off. Every non-essential category starts denied. Our consent layer declares that state to Google before any tag can run, so nothing is measured or shared before you have had the chance to say no.
- Nothing loads before you choose. Analytics and advertising tags are present in the page but inert — they are marked as plain text, which browsers do not execute. They are only turned into real scripts after you grant the matching category. Choosing “Reject non-essential” means those tags never run at all on that page load.
You can change your choice at any time using Cookie Settings in the footer of any page. Your choice is remembered for 180 days.
2.1 Where you are matters
- Brazil, Saudi Arabia, the United Arab Emirates, the EEA, the United Kingdom and Switzerland — we ask before setting any non-essential cookie. Nothing beyond strictly necessary runs until you agree.
- California — you may opt out of the sale or sharing of personal information at any time, using the Do Not Sell or Share My Personal Information link in the footer or the Cookie Settings control. We also honour the Global Privacy Control signal from your browser.
- Canada — we tell you what we set and obtain your consent; implied consent is enough for strictly necessary cookies, express consent for everything else.
- Elsewhere — we still show the banner and still honour your choice. Treating every visitor the same is simpler than guessing a jurisdiction from an IP address and getting it wrong.
3. Strictly necessary cookies
These run as soon as you arrive, because the site cannot work without them. They are not used for analytics or advertising, and turning them off would break the site.
| Name | Purpose | Lifetime | Provider |
|---|---|---|---|
mfh_consent |
Stores your cookie choices — which is itself a necessary function, since without it we would have to ask again on every page | 180 days | monkfruithub.com (first party) |
| WordPress form nonce | Protects the enquiry form against cross-site request forgery; a submission without a valid nonce is refused | Session to 48 hours | monkfruithub.com |
| WordPress session cookies | Identify a logged-in administrator so the site can be edited; set only for you if you have an account | Session, or up to 2 weeks if you ask to be remembered | monkfruithub.com |
| Rate-limit entries | Server-side, not a browser cookie: limits repeated form submissions from one address, to blunt automated abuse | Up to 1 hour, server-side | monkfruithub.com |
4. Preference cookies
These remember a choice you made so you do not have to make it again. They are set only if you grant the Preferences category.
| Name | Purpose | Lifetime | Provider |
|---|---|---|---|
| Language edition | Remembers that you read the site in English, Spanish or Arabic, so you land on the right edition next time | Up to 12 months | monkfruithub.com |
| Display settings | Remembers catalogue view preferences such as filter state | Up to 12 months | monkfruithub.com |
5. Analytics cookies
These measure how the catalogue is used: which pages are read, where visitors arrive from, and where they leave. We use the numbers to decide what to document better, not to build profiles of individual visitors. Set only if you grant the Analytics category.
| Name | Purpose | Lifetime | Provider |
|---|---|---|---|
_ga |
Distinguishes returning browsers so visits can be counted once | 2 years | Google (GA4) |
_ga_<container> |
Holds the session state for this property | 2 years | Google (GA4) |
_gid |
Distinguishes visitors within a 24-hour window | 24 hours | Google (GA4) |
We configure IP anonymisation and retain analytics data for 14 months. When you have not granted consent, Google receives a cookieless ping with no identifiers attached — measurement without tracking.
6. Advertising cookies
These measure whether our campaigns work: how many people who saw an advertising campaign asked for a quotation, and which platform produced them. They involve cross-site identifiers, which is why we treat them as a separate category and keep them off until you say otherwise. Set only if you grant the Advertising category.
| Name | Purpose | Lifetime | Provider |
|---|---|---|---|
_fbp |
Meta Pixel: attributes a visit and a conversion to a Meta campaign | 90 days | Meta Platforms |
fbc |
Meta Pixel: carries the click identifier from an ad through to a conversion | 90 days | Meta Platforms |
_ttp |
TikTok Pixel: attributes a visit and a conversion to a TikTok campaign | 13 months | TikTok |
_gcl_au / _gcl_aw |
Google Ads: stores the click identifier so a conversion can be credited to the right advert and campaign | 90 days | |
| Google Ads conversion and remarketing | Counts conversions and, if enabled, builds audiences of previous visitors | Per Google’s policy |
6.1 Server-side events
We may also send an enquiry event to Meta’s Conversions API from our server rather than from your browser. This happens only when you have granted the Advertising category, and only where we have a lawful basis for it. The payload is hashed before it leaves, and we send only the fields the platform requires — name, email and phone as one-way hashes, plus the event name and time. Declining the Advertising category stops browser and server events alike.
6.2 Google Consent Mode v2
Before any Google tag loads, this site declares the consent state to Google for six signals: ad_storage, ad_user_data, ad_personalization, analytics_storage, functionality_storage and personalization_storage, with security_storage granted. All except security start denied. When you change your choice, the state is updated immediately, and the tags that match your choice are activated after the update — so the first event a tag sends already carries the correct state.
7. How to control cookies yourself
Besides the controls on this site, your browser can block or delete cookies. The settings live in different places:
- Chrome — Settings → Privacy and security → Cookies and other site data
- Safari — Settings → Privacy → Manage Website Data
- Firefox — Settings → Privacy & Security → Cookies and Site Data
- Edge — Settings → Cookies and site permissions → Manage and delete cookies
Blocking cookies yourself will also block the cookie that stores your choice, which means we will ask again on your next visit. Industry opt-out pages also exist: the Digital Advertising Alliance, the European Interactive Digital Advertising Alliance, and the Global Privacy Control specification, which this site honours.
8. Do Not Track
Browsers’ old “Do Not Track” header never settled on a standard, so we do not act on it. We do act on Global Privacy Control, which has one.
9. Changes to this policy
If we add or remove a cookie, or change what one does, we update this page and the “Last reviewed” date. Adding a new advertising technology, or widening what an existing one is used for, counts as a material change and we will ask for consent again rather than assume the old choice carries over.
10. Contact
Questions about cookies on this site: info@monkfruithub.com. See also our Privacy Policy.
