Cookie Policy
Last updated: 24 August 2026
This policy explains the cookies and similar technologies that may be used when you visit The Puffins website.
1. What cookies are
Cookies are small text files stored on your device. Similar technologies can access or store information on a device, or send technical events to a service provider. Some technologies are necessary to provide a secure service; optional technologies require your permission.
2. Your choices
Optional external media is off until you play a video or enable it in “Privacy settings”. Clicking “Play video” or a portfolio video is the affirmative action that enables YouTube, Vimeo, and Instagram players for your browser. A small one-time notice confirms the choice without interrupting playback.
You can change or withdraw the choice at any time using “Privacy settings” in the site footer. Turning external media off prevents embedded YouTube, Vimeo, and Instagram players from loading on later page views; it does not prevent you from reading the site. Direct email remains available at [email protected].
3. Cookies and technologies used by this site
| Name or service | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
thepuffins_consent | The Puffins | Remembers whether you allowed or rejected optional external media. | 6 months | Strictly necessary preference |
_GRECAPTCHA | Google reCAPTCHA | Risk analysis used to protect the contact form from spam and abuse. Google describes this as a necessary cookie. | Set and controlled by Google | Strictly necessary security |
__cf_bm | Cloudflare | May be set when bot protection is active. | 30 minutes after inactivity | Strictly necessary security |
cf_clearance | Cloudflare | May remember that a visitor passed a security challenge. | Normally 30 minutes; may vary with security configuration | Strictly necessary security |
| WordPress login cookies | The Puffins / WordPress | Authentication and administration. These are relevant only to authorised users who sign in to WordPress. | Session or the selected login period | Strictly necessary authentication |
4. Optional external media
After you play a video or otherwise enable external media, YouTube, Vimeo, or Instagram (Meta) may receive technical request information and use cookies or similar technologies for security, playback, service measurement, and—depending on your provider account and settings—personalisation.
- YouTube: the site uses YouTube’s privacy-enhanced embed domain where possible. Google documents cookies including
YSC(session),__Secure-YNID(6 months),__Secure-YENID(13 months), andPREF(8 months). Provider names and durations can change. - Vimeo: Vimeo documents player cookies including
vuid(2 years),playerandflags(1 year), plus shorter-lived security cookies. Where supported, the player is requested with Vimeo’s Do Not Track parameter. - Instagram: the Harp Music portfolio item uses Instagram’s official public Reel embed. Meta controls any cookies and similar technologies used by that player; their names, purposes, and durations can vary with Meta’s service, region, account state, and choices.
For current details, see Google’s cookie information, Vimeo Player Cookies, and Meta’s Cookies Policy for Instagram.
5. Cookie-free performance measurement
Cloudflare Web Analytics measures aggregate page performance without using cookies or local storage and does not track individual users across Cloudflare customer sites. It is used for the legitimate interest of keeping the site reliable and fast, rather than for advertising.
6. Browser controls and contact
You can also delete or block cookies through your browser settings. Blocking strictly necessary cookies can affect security or site functions. Questions about this policy can be sent to [email protected]. For more information about personal data, see our Privacy Policy.