Post-breach data control

Cookie Policy

How pastwipe.com uses cookies and similar technologies, the categories we use and how to manage your preferences.

Version 2.1 · Effective 29 September 2026

1. Cookies and similar storage

PastWipe Ltd uses browser storage to remember your privacy choice and protect website forms. If you choose Accept optional, we also use Google Analytics to understand how the website is used, and we remember how you arrived on the website so we can see which campaigns lead to enquiries. These rules cover local storage as well as cookies. The website is operated by PastWipe Ltd, company number 16893742, registered office 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Questions: info@pastwipe.com.

2. Your choices

Choose Accept optional or Reject optional in the banner. We remember either choice for 6 months and then ask again. Neither option prevents you from making an enquiry. Until you accept, Google Tag Manager, Google Analytics and campaign storage stay off, and no campaign information is sent with forms. You can change your choice at any time through Cookie settings. If you withdraw permission, optional processing stops and the website deletes its optional campaign storage and the Google Analytics cookies _ga and _ga_Y4K28JWLT2. Withdrawal does not erase information already lawfully collected, such as analytics data already sent to Google or an enquiry you have sent; contact us about that information.

3. Storage inventory

The table lists the cookies, browser storage and related technologies used on this website. Google Tag Manager is a script loader and sets no cookies itself. The Google Analytics cookie lifetimes shown are Google’s documented defaults.

Technology Purpose and category Duration and activation
pw_consent
PastWipe host-only cookie
Strictly necessary: stores granted if you choose Accept optional or denied if you choose Reject optional or send a Global Privacy Control signal. Set when you make a choice. Secure, SameSite=Lax, path /; kept for 6 months, then we ask again.
pw_landing_path
PastWipe local storage
Optional campaign attribution: the path of the first page you visited on the website, without query strings or fragments. Only after Accept optional. Deleted after 30 days, or earlier if you withdraw permission.
pw_utm_source, pw_utm_medium, pw_utm_campaign, pw_utm_term, pw_utm_content
PastWipe local storage
Optional campaign attribution: the campaign tags in the link you arrived by. Allowlisted campaign values only; no personal information. We do not collect Google Ads click IDs. Only after Accept optional. Deleted after 30 days, or earlier if you withdraw permission.
pw_referrer
PastWipe local storage
Optional campaign attribution: the referring page reported by your browser. Only after Accept optional. Deleted after 30 days, or earlier if you withdraw permission.
pw_form_{form}_last
PastWipe session storage
Strictly necessary anti-abuse timestamp for the form you are using. No message content. Temporary: deleted after the form submission data is created, and no later than the end of your browsing session.
Google Tag Manager
Google script
Optional: loads Google Analytics after you accept. Container GTM-MZSK7G6C. Loads only after Accept optional. Sets no cookies itself.
_ga and _ga_Y4K28JWLT2
Google Analytics cookies
Optional analytics (Google Analytics 4, G-Y4K28JWLT2). _ga distinguishes visitors; _ga_Y4K28JWLT2 keeps track of your session. Set only after Accept optional. Up to 2 years (Google’s default). Deleted by the website if you withdraw permission.
Cloudflare Turnstile
Cloudflare script and frame
Strictly necessary security check by Cloudflare on forms, the newsletter sign-up and the final Ask PastWipe step, to tell genuine requests from automated abuse. It may process device and browser signals and your IP address. Runs when you use a form. On the newsletter sign-up it loads only when you start filling in the form. Cloudflare stores one item named cf.turnstile.u in browser local storage for its own domain (challenges.cloudflare.com). It has no set expiry and stays until you clear your browser storage. In our tests Turnstile set no cookies.
Cloudflare network delivery
Cloudflare
Strictly necessary website delivery and security; processes request information, including IP address. Operates on every request to the website.
Ask PastWipe
First-party form
Sends your enquiry details to PastWipe for an email response. Stores no message content in your browser. Its temporary anti-abuse timestamp and the Turnstile check are listed above.

4. Analytics and withdrawal

Google Analytics 4 is switched on, but it loads only if you choose Accept optional. If you choose Reject optional, or your browser sends a Global Privacy Control (GPC) signal, which we treat as Reject optional, Google Tag Manager and Google Analytics do not load and no analytics request is sent to Google. Google Analytics 4 does not log or store IP addresses. Event-level Analytics data is kept for 14 months. We do not use any Google advertising features (including Google signals), advertising cookies or remarketing, and the website does not collect Google Ads click IDs. You can also block or clear storage in your browser; clearing the consent record will make the banner appear again.

5. Changes and more information

We will update this inventory when the website’s technologies change. Our Privacy Policy explains personal-data purposes, recipients, retention, transfers and rights. Contact info@pastwipe.com with questions.