Cookie policy
Which cookies this site uses, what each category in the cookie banner switches on, and how to change your choice. In effect from 12 November 2026.
How we use cookies
A cookie is a small file a website stores in your browser. Local storage works much the same way, so both are covered here.
This site sets a few cookies of its own that it needs to work. Analytics and marketing tags come through Google Tag Manager (container GTM-NNHQGNV), and Google Tag Manager is not even loaded until you agree to analytics or marketing in the cookie banner. Before you choose, no request goes to Google.
Our ad landing pages (castitsignage.com/nl/lp/…, /sr/lp/…, and /en/special-offer) differ in two ways. They count visits with PostHog, hosted in the EU, from the moment the page opens: this sets no cookies and stores nothing in your browser, and it runs whatever you choose in the banner (the privacy policy says what it records). And a page that runs an OpenAI ad loads the OpenAI ads pixel itself, not through Google Tag Manager, once you switch marketing on (see Marketing below).
The banner has three categories, the same three described below. Essential is always on. Analytics and marketing stay off until you switch them on.
Essential (always on)
Needed for the site to work, for example to remember this choice and to protect forms from spam.
They are set without asking, and never used to track you.
- castit_consent: remembers your choice in the cookie banner, so you are not asked on every page. Set by this site. Kept for 182 days (about six months), then the banner asks again.
- castit-locale: remembers the language you picked in the language menu. Set by this site, only when you pick a language. Kept for 365 days.
- payload-theme (local storage): remembers whether you chose the light or the dark theme. Set by this site, only when you choose one. Kept until you clear it.
- payload-token: keeps Castit staff signed in to the site's editing area. Set only for people who sign in there.
- __cf_bm and cf_clearance: set by Cloudflare, our hosting provider, only when its security checks need them, to tell people from bots. __cf_bm is kept for 30 minutes; cf_clearance, set after a passed security check, for up to 30 minutes.
Analytics
Show us which pages are read and where visitors come from, so we can improve the site.
Off until you switch them on.
Switching analytics on loads Google Tag Manager and gives Google the analytics_storage consent signal, which lets analytics tags set their cookies.
- Ahrefs Web Analytics: counts visits and the pages viewed. It sets no cookies and stores nothing in your browser.
- PostHog (PostHog Cloud EU): measures how the site is used. Sets the cookie ph_<project key>_posthog with a random ID and keeps the same in local storage. Kept for 365 days.
Marketing
Let our advertising partners measure our campaigns and show you relevant ads on other sites.
Off until you switch them on.
Switching marketing on loads Google Tag Manager and gives Google its three advertising consent signals: ad_storage, ad_user_data, and ad_personalization.
On an ad landing page that runs an OpenAI (ChatGPT) ad, switching marketing on also loads the OpenAI ads pixel (from bzrcdn.openai.com), directly rather than through Google Tag Manager. It tells OpenAI about the visit, so OpenAI can match it to a click on its ad, and, when you send the page's form, that a request came in. We send it nothing from the form. Today that is the partner page, /nl/lp/partners. The pixel can set up to three cookies on this site: __oppref, the ID of your click on the OpenAI ad (30 days); __obref, a random ID for your browser (365 days); and __oaiq_consent, your consent choice for the pixel (30 days).
- Google Tag Manager runs no marketing tags today. If we add one, we list it here, with its cookies, before it goes live.
Changing your choice
Choose Cookie settings at the bottom of any page to open the banner again. It shows what you chose before, and you can switch analytics and marketing on or off.
If you switch something off after Google Tag Manager has loaded, the page reloads, because tags that are already running cannot be stopped any other way. Cookies those tags set stay in your browser until they expire or you delete them.
You can also block or delete cookies in your browser's settings. Each browser on each device has its own. If you block essential cookies too, the site asks for your cookie choice on every visit.
Questions
This policy changes when the site's cookies do, and the date at the top shows when. For anything else about your data, see the privacy policy.