Cookie policy.
Effective 1 January 2026. We use four categories of cookies: strictly necessary, preference, analytics, and advertising. Only the first category is set without consent.
1. Strictly necessary
Set without consent on the basis of legitimate interest in the secure operation of the site (UK GDPR Recital 49; PECR Reg. 6(4) exemption).
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
pu_consent | pufinance.xyz | Stores your consent decisions (TCF v2.3 TC string) | 13 months |
pu_session | pufinance.xyz | CSRF token for the contact form | Session |
test_cookie | doubleclick.net | Tests whether your browser supports cookies | 15 minutes |
2. Preference
Set only with consent. Currently none. Reserved for future locale or display-density preferences.
3. Analytics
Set only with consent. We do not currently run third-party analytics. Server log review is performed in aggregate without cookies.
4. Advertising — Google AdSense
Personalised advertising cookies are set only with consent. If consent is withheld, AdSense serves non-personalised ads using a reduced cookie set (frequency capping only).
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
__gads | pufinance.xyz (Google) | AdSense impression count and frequency cap | 13 months |
__gpi | pufinance.xyz (Google) | AdSense Publisher Identifier | 13 months |
IDE | doubleclick.net | Conversion tracking and ad selection | 13 months |
NID | google.com | Google preferences and security | 6 months |
DSID | doubleclick.net | Cross-device ad personalisation | 2 weeks |
ANID | google.com | Ad personalisation across Google services | 13 months |
5. How to withdraw consent
Click Cookie settings at any time, or visit adssettings.google.com to opt out of personalised advertising across all Google publishers. Browser-level cookie deletion will also withdraw consent (you will be re-prompted on your next visit).
6. Do Not Track and GPC
The legacy Do Not Track header is ignored (not deployed consistently across browsers). The Global Privacy Control signal is honoured as a withdrawal of consent for personalised advertising and as a Do-Not-Sell/Do-Not-Share request under CCPA/CPRA.