This cookie policy explains how Defectly Ltd uses cookies and similar technologies (including localStorage and tracking pixels) on this website (defectly.io) and the Defectly platform (app.defectly.io), what they do, and how you can control them.
What cookies are
Cookies are small text files placed on your device when you visit a website. Some are essential to make the site work; others remember preferences, measure how the site is used, or support advertising. localStorage is a similar browser feature that stores small amounts of data on your device. Tracking pixels are tiny page elements that work alongside cookies for measurement.
How consent works on this site
When you first visit, our consent banner asks whether you allow analytics and advertising measurement cookies. The banner offers "Accept all" and "Reject non-essential" with equal prominence, no boxes are pre-ticked, and nothing other than essential cookies is set until you choose. We do not load Google Tag Manager, Google Analytics or any advertising tool before you accept: until then, no analytics or advertising request leaves your browser.
Your choice is recorded in a first-party cookie called defectly_consent for 12 months. It is set on the defectly.io domain so that the Defectly platform at app.defectly.io honours the same decision and does not ask you twice. When you accept, we also send Google "consent mode" signals that reflect your choice to the tools we load.
You can change your mind at any time using the "Cookie settings" link in the footer of every page, which reopens the banner. Withdrawing consent stops the relevant tools being loaded from that point on; you can also delete existing cookies through your browser. If we add new tools or purposes, we will ask for your consent again.
Essential cookies and storage
These are required for the site and platform to work, or record the choices you have made, and do not need consent:
Session and security cookies on the Defectly platform that keep you signed in and protect forms against cross-site request forgery.
Cloudflare cookies used to deliver the site securely and to run the Turnstile anti-abuse check on forms such as our contact form.
defectly_consent (first party, 12 months, defectly.io and its subdomains): records the choice you made in the consent banner, whether that was to accept or to reject.
defectly_attr (first party, 30 days, defectly.io and its subdomains): only written after you have accepted analytics and advertising cookies. It stores the campaign parameters of the link you arrived on (utm_source, utm_medium, utm_campaign, utm_content, utm_term, fbclid, gclid), the first page you landed on and the time of that visit, so that if you later create an account the platform can attribute it to the campaign that brought you here. It contains no name, email address or other identifier.
A theme preference stored in localStorage that remembers whether you chose light or dark mode.
Analytics cookies (with your consent)
These help us understand how the site is used so we can improve it. They are delivered through Google Tag Manager (Google Ireland Limited), which is itself only loaded once you accept:
Google Analytics 4 (Google Ireland Limited): the _ga cookie and a _ga_ cookie suffixed with our measurement ID, each lasting 2 years. They distinguish visitors and sessions so we can measure pages visited, how visitors found us, and how the site performs. Data may be transferred to Google LLC in the US under the UK-US Data Bridge.
We do not rely on the UK's "statistical purposes" consent exception for any analytics; everything in this category is consent-based. If that changes we will update this policy and provide the required objection mechanism.
Advertising measurement cookies (with your consent)
These measure whether our advertising works and let us show relevant adverts to people who have visited our site. They are also delivered through Google Tag Manager and are set only if you opt in, and only while we are running the campaigns concerned:
Meta Pixel (Meta Platforms Ireland Limited), when enabled: the _fbp and _fbc cookies, each lasting 3 months, used to measure Facebook and Instagram ad performance and build audiences. We and Meta are joint controllers for this data; see our privacy policy for what that means for your rights.
We do not currently use Google Ads conversion tracking or the LinkedIn Insight Tag. If we add either, we will list its cookies here and ask for your consent again. We never use "legitimate interests" as a basis for advertising cookies; they are always opt-in consent, as UK law requires.
Managing cookies in your browser
Use the "Cookie settings" link in the footer to change your choices at any time.
Your browser settings let you block or delete cookies entirely, although blocking essential cookies may stop parts of the site working.
Google offers a browser add-on to opt out of Google Analytics at tools.google.com/dlpage/gaoptout, and your Facebook account settings include controls over ads based on data from partners.
Changes to this policy
We may update this policy when we add, remove, or change tools. Material changes will be reflected in the consent banner so you can make a fresh choice. The date at the top of this page shows when it was last updated.
Contact us
Questions about cookies on Defectly: hello@defectly.io, or write to Defectly Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.